Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230302e31302e342e302f32322d3234203d3e203238333433.roa
File:                     3230302e31302e342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          jQej1ekonFpf23sq6O9/JhS/UXffWoiK/6VV2974X1w=
Subject key identifier:   B5:69:03:A7:37:E4:27:F9:A3:6D:A5:49:7F:2A:79:F5:B4:9F:07:08
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       55F3B186590C51611D1C0760DC1165AEC4960675
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230302e31302e342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        200.10.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f3:b1:86:59:0c:51:61:1d:1c:07:60:dc:11:65:ae:c4:96:06:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject: CN=3082010A0282010100DD87F6D9BEB810AAEDEFD353C86AC543F257CC82B5FBB1880C73F3C911B98419648D1D11FD744CB679FFC4AD0644B845D172E82A7919DF29B2B43D1594F9B7DF60934DC4A529DAFD70462BF7454ECD2F424346B21618F6DCD553549CA59CFB181E2777D908D09BFB8D716913A9698F8482D7A167E677EF1DA39ECC10B2E108D0675D9799B7BA987852F2F4CB8D32BEDB8AF89B6095F3391289D13B8518AAC39116DAC92EE9F18856A17E3269CCE32EB398236DE46C05BE9E97510F6604744D40BCD9FAE09F5C76F25E3D973B0CFB475F5EBACDE198ECD7692B90BC9C8300802597F5C1E37EC7C81F1774CF29EFCD523F3C9C1A111BC5F147542CC098C745E0270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:f6:d9:be:b8:10:aa:ed:ef:d3:53:c8:6a:
                    c5:43:f2:57:cc:82:b5:fb:b1:88:0c:73:f3:c9:11:
                    b9:84:19:64:8d:1d:11:fd:74:4c:b6:79:ff:c4:ad:
                    06:44:b8:45:d1:72:e8:2a:79:19:df:29:b2:b4:3d:
                    15:94:f9:b7:df:60:93:4d:c4:a5:29:da:fd:70:46:
                    2b:f7:45:4e:cd:2f:42:43:46:b2:16:18:f6:dc:d5:
                    53:54:9c:a5:9c:fb:18:1e:27:77:d9:08:d0:9b:fb:
                    8d:71:69:13:a9:69:8f:84:82:d7:a1:67:e6:77:ef:
                    1d:a3:9e:cc:10:b2:e1:08:d0:67:5d:97:99:b7:ba:
                    98:78:52:f2:f4:cb:8d:32:be:db:8a:f8:9b:60:95:
                    f3:39:12:89:d1:3b:85:18:aa:c3:91:16:da:c9:2e:
                    e9:f1:88:56:a1:7e:32:69:cc:e3:2e:b3:98:23:6d:
                    e4:6c:05:be:9e:97:51:0f:66:04:74:4d:40:bc:d9:
                    fa:e0:9f:5c:76:f2:5e:3d:97:3b:0c:fb:47:5f:5e:
                    ba:cd:e1:98:ec:d7:69:2b:90:bc:9c:83:00:80:25:
                    97:f5:c1:e3:7e:c7:c8:1f:17:74:cf:29:ef:cd:52:
                    3f:3c:9c:1a:11:1b:c5:f1:47:54:2c:c0:98:c7:45:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:69:03:A7:37:E4:27:F9:A3:6D:A5:49:7F:2A:79:F5:B4:9F:07:08
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230302e31302e342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:dc:97:99:fb:e2:83:fc:73:07:6c:c6:2e:d5:b9:fe:77:ba:
         90:65:f2:57:8c:fc:72:64:13:de:77:ab:8e:7e:fd:6c:f3:85:
         26:cd:31:32:ac:de:3b:19:9f:03:29:39:67:3c:a7:32:7c:8d:
         64:af:d5:98:8e:4f:be:f5:04:8b:73:69:52:69:34:e4:eb:30:
         2d:73:32:06:15:83:28:e2:80:bf:f0:ff:81:9f:bb:0f:b8:09:
         0b:16:76:90:82:fa:86:f5:f0:b6:64:b4:12:51:4d:9b:a0:6c:
         d7:15:0a:3b:7c:55:72:d5:e6:85:82:ff:5f:2d:24:76:da:4d:
         51:75:2f:da:c8:7e:7d:86:73:24:a2:60:84:17:be:28:2f:13:
         9c:7e:20:68:be:93:d7:1c:2c:65:57:f4:de:56:a2:49:b0:1c:
         af:5e:a2:52:ed:0b:d5:04:e5:70:b7:17:db:b4:e0:7e:9c:41:
         3d:62:5c:b5:0b:b2:39:7a:41:82:21:49:a8:24:06:b9:01:c9:
         ef:25:d9:ce:62:44:39:90:92:84:70:5b:a7:fa:ab:70:3e:22:
         c0:44:d1:e6:80:06:f1:56:a4:43:f3:09:44:d2:71:86:c9:e7:
         43:a4:e6:24:4c:a4:14:ab:d4:db:ee:76:b8:42:d8:da:66:33:
         34:6c:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org