Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e362e38382e302f32312d3234203d3e203238333433.roa
File:                     3139312e362e38382e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          XMEqeRtQuoFPWdOYEIZTo+e1HuSEC7qaPYeWhsk0+jE=
Subject key identifier:   21:29:8E:98:34:28:05:BD:71:9C:18:E1:03:CB:9B:5B:3A:43:67:00
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       5A679DFDA324D215A2AA43FCC964A8080048D1D0
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e362e38382e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        191.6.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:67:9d:fd:a3:24:d2:15:a2:aa:43:fc:c9:64:a8:08:00:48:d1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:6b:c6:6b:70:ab:94:38:08:fc:32:d5:c5:
                    93:08:6e:27:4e:15:45:7b:9f:55:f1:7f:0c:6f:7e:
                    1b:8b:4b:91:65:59:5d:65:8f:4b:f6:8b:a3:4b:57:
                    42:bd:15:97:0e:b0:6e:4c:35:6f:2c:be:ec:7c:33:
                    55:04:fa:47:28:2e:ad:0d:d6:fd:7e:5b:15:79:9a:
                    70:c8:33:7e:9f:f9:10:35:c9:2f:df:cf:01:90:8e:
                    77:67:7c:46:04:cd:8b:66:af:b5:d8:d4:fa:77:c6:
                    9a:26:93:18:f7:9d:a1:17:d4:04:51:62:e0:08:d3:
                    6d:20:37:4f:4e:db:e8:ea:e5:7e:b6:c4:15:ce:05:
                    2e:8a:07:2b:a9:99:82:2a:9b:e6:41:e3:e3:ac:f7:
                    b5:61:d0:d3:09:11:e7:de:a0:63:97:9c:be:28:df:
                    ef:f9:db:af:5b:07:be:7c:0e:27:d8:94:40:cd:58:
                    8a:32:a0:6b:3b:e6:5b:d5:51:78:97:94:16:8c:ae:
                    5f:a7:2b:b5:6a:9d:9d:cf:fd:b5:0a:a2:54:00:9c:
                    c8:7a:c8:df:8a:4d:36:9e:90:18:df:9b:e5:63:d1:
                    65:01:17:71:30:e7:01:83:eb:b7:83:c1:8b:0d:3c:
                    ac:cc:f5:7c:44:c0:f0:20:54:b2:45:8f:58:31:f0:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:8E:98:34:28:05:BD:71:9C:18:E1:03:CB:9B:5B:3A:43:67:00
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e362e38382e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:55:eb:16:f1:e1:a6:30:43:bf:bf:d8:ce:9b:67:87:22:
         bf:75:ba:45:1d:70:c6:a2:85:2d:15:be:c6:4d:81:b8:6b:d5:
         e4:a0:11:4e:b8:74:82:76:35:f8:3e:fc:b7:ee:ba:76:26:56:
         20:7a:75:56:1a:49:4e:1d:58:8c:72:a5:e3:12:50:ee:ee:82:
         4e:42:19:37:35:ab:85:69:a8:99:4e:83:04:01:a8:56:1b:dd:
         fa:cf:a9:16:ab:1c:f7:61:4d:ba:bd:7c:5d:ce:83:6e:78:dd:
         0d:18:33:e6:d6:d3:80:2f:19:32:f5:53:ef:f0:14:41:e7:fb:
         23:42:93:e3:0c:bf:0c:e1:5d:c1:f7:1b:f8:e3:60:82:05:e2:
         d5:1b:5a:79:50:5a:9e:38:69:dc:5e:bc:e3:90:d5:d9:76:d4:
         42:5f:f1:90:a9:8e:c7:11:e0:13:71:bd:ed:19:9c:cf:2a:9c:
         f3:82:ec:64:ab:0c:37:b7:92:45:ca:05:c6:a7:33:a6:4a:82:
         18:f1:27:8b:d4:3a:a9:57:be:a9:f4:b1:c7:56:e7:94:c9:b2:
         96:e2:95:46:75:85:2e:3a:8d:d0:9c:73:5c:7d:94:f8:d0:86:
         01:66:ac:0e:e4:3b:c2:62:77:7a:5d:bf:eb:49:83:5d:84:16:
         d6:42:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org