Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa
File:                     3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          TwuN7AU+seT8tFav38UzhZbMPvwVXESQxwynIqTUhCU=
Subject key identifier:   69:0C:A3:26:00:34:24:B4:E4:69:54:93:8A:CE:F4:22:73:49:BF:1B
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       1117ABFC1FBD6A2D424ED09069C7C767B62E7833
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:11 +0000
ROA not before:           Thu 30 Dec 2021 18:17:11 +0000
ROA not after:            Thu 29 Dec 2022 18:22:11 +0000
asID:                     28343
IP address blocks:        201.131.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:ab:fc:1f:bd:6a:2d:42:4e:d0:90:69:c7:c7:67:b6:2e:78:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:11 2021 GMT
            Not After : Dec 29 18:22:11 2022 GMT
        Subject: CN=3082010A0282010100CF904D24A31A3600519EB49DA6BA7CF08955A2DA8AF6D4B2C0821C1D52921185A20AC979A1482486FFA7DEDC6B79C87F3C1F0D4C99D9FD2753DD3E1BF2287A968F572D3BB75A4F20105E89401225519F413F477646E5267FFD75938619240D15345B94A0483008A63411AEDB25FBCB0B5C5BC84EEBD7B27ACDF1C29FCF473A94217A56C0A2787ECB5A36EE7A4D15BD9666E8FE43C265994FEA5D895B4B7E31A9DAA466167A0BD387A8E25BD5F412E1D7A993C5676C078AB99E0A55F20DBF5902B09202A8F128F397A9D9B82B7B2290BED3B0D597A44472C3AA48A399DBA77E55ECC496240ECE466024914E8FB50112F7903AF76472AD388CEB2573676E507D030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:4d:24:a3:1a:36:00:51:9e:b4:9d:a6:ba:
                    7c:f0:89:55:a2:da:8a:f6:d4:b2:c0:82:1c:1d:52:
                    92:11:85:a2:0a:c9:79:a1:48:24:86:ff:a7:de:dc:
                    6b:79:c8:7f:3c:1f:0d:4c:99:d9:fd:27:53:dd:3e:
                    1b:f2:28:7a:96:8f:57:2d:3b:b7:5a:4f:20:10:5e:
                    89:40:12:25:51:9f:41:3f:47:76:46:e5:26:7f:fd:
                    75:93:86:19:24:0d:15:34:5b:94:a0:48:30:08:a6:
                    34:11:ae:db:25:fb:cb:0b:5c:5b:c8:4e:eb:d7:b2:
                    7a:cd:f1:c2:9f:cf:47:3a:94:21:7a:56:c0:a2:78:
                    7e:cb:5a:36:ee:7a:4d:15:bd:96:66:e8:fe:43:c2:
                    65:99:4f:ea:5d:89:5b:4b:7e:31:a9:da:a4:66:16:
                    7a:0b:d3:87:a8:e2:5b:d5:f4:12:e1:d7:a9:93:c5:
                    67:6c:07:8a:b9:9e:0a:55:f2:0d:bf:59:02:b0:92:
                    02:a8:f1:28:f3:97:a9:d9:b8:2b:7b:22:90:be:d3:
                    b0:d5:97:a4:44:72:c3:aa:48:a3:99:db:a7:7e:55:
                    ec:c4:96:24:0e:ce:46:60:24:91:4e:8f:b5:01:12:
                    f7:90:3a:f7:64:72:ad:38:8c:eb:25:73:67:6e:50:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:A3:26:00:34:24:B4:E4:69:54:93:8A:CE:F4:22:73:49:BF:1B
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:54:00:ac:ec:ed:47:1a:be:ec:b0:1a:04:38:0e:2e:70:
         d1:42:91:98:f6:e4:99:2e:4d:9b:7c:1e:06:f8:aa:7f:9a:19:
         cf:a8:8e:7d:55:41:61:f9:e6:e9:c7:e7:bc:82:c8:24:96:ee:
         62:8d:54:89:4c:54:30:3c:8d:5c:15:36:55:b3:ca:66:7b:61:
         4b:ae:04:9a:ef:0c:38:13:67:22:c7:54:79:75:29:3b:5e:b3:
         ac:02:0d:ef:c5:8f:12:81:1e:da:7e:18:bb:ed:31:4c:2b:14:
         8b:a8:37:07:ed:e8:76:c8:ce:e6:6c:4f:82:ba:fa:a9:58:7b:
         ef:c4:19:d7:3c:a0:36:0c:86:8d:93:25:12:c5:23:b9:40:25:
         54:9d:fc:9e:7f:0c:ae:df:a2:bc:3c:6c:91:d6:89:43:ab:fd:
         ac:70:11:d6:cd:50:a5:8b:ce:1a:6f:d3:4d:75:35:17:d2:c1:
         ca:8b:96:e5:65:f9:88:2b:1e:57:a0:55:fa:01:06:ff:7d:ee:
         5c:b4:4c:10:b7:0e:e2:4d:04:c9:5b:32:45:c6:b8:81:cd:64:
         19:f3:80:bf:fc:cf:55:b3:b8:74:99:f7:bd:ee:52:7e:af:e1:
         a7:67:22:27:6c:ed:12:3b:eb:31:8b:3f:65:9e:c2:36:83:1e:
         59:b7:df:f9
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUERer/B+9ai1CTtCQacfHZ7YueDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTFaFw0yMjEyMjkxODIyMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y5MDREMjRBMzFBMzYwMDUx
OUVCNDlEQTZCQTdDRjA4OTU1QTJEQThBRjZENEIyQzA4MjFDMUQ1MjkyMTE4NUEy
MEFDOTc5QTE0ODI0ODZGRkE3REVEQzZCNzlDODdGM0MxRjBENEM5OUQ5RkQyNzUz
REQzRTFCRjIyODdBOTY4RjU3MkQzQkI3NUE0RjIwMTA1RTg5NDAxMjI1NTE5RjQx
M0Y0Nzc2NDZFNTI2N0ZGRDc1OTM4NjE5MjQwRDE1MzQ1Qjk0QTA0ODMwMDhBNjM0
MTFBRURCMjVGQkNCMEI1QzVCQzg0RUVCRDdCMjdBQ0RGMUMyOUZDRjQ3M0E5NDIx
N0E1NkMwQTI3ODdFQ0I1QTM2RUU3QTREMTVCRDk2NjZFOEZFNDNDMjY1OTk0RkVB
NUQ4OTVCNEI3RTMxQTlEQUE0NjYxNjdBMEJEMzg3QThFMjVCRDVGNDEyRTFEN0E5
OTNDNTY3NkMwNzhBQjk5RTBBNTVGMjBEQkY1OTAyQjA5MjAyQThGMTI4RjM5N0E5
RDlCODJCN0IyMjkwQkVEM0IwRDU5N0E0NDQ3MkMzQUE0OEEzOTlEQkE3N0U1NUVD
QzQ5NjI0MEVDRTQ2NjAyNDkxNEU4RkI1MDExMkY3OTAzQUY3NjQ3MkFEMzg4Q0VC
MjU3MzY3NkU1MDdEMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz5BNJKMaNgBRnrSdprp88IlVotqK9tSywIIcHVKSEYWiCsl5oUgk
hv+n3txrech/PB8NTJnZ/SdT3T4b8ih6lo9XLTu3Wk8gEF6JQBIlUZ9BP0d2RuUm
f/11k4YZJA0VNFuUoEgwCKY0Ea7bJfvLC1xbyE7r17J6zfHCn89HOpQhelbAonh+
y1o27npNFb2WZuj+Q8JlmU/qXYlbS34xqdqkZhZ6C9OHqOJb1fQS4depk8VnbAeK
uZ4KVfINv1kCsJICqPEo85ep2bgreyKQvtOw1ZekRHLDqkijmdunflXsxJYkDs5G
YCSRTo+1ARL3kDr3ZHKtOIzrJXNnblB9AwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGkMoyYANCS05GlUk4rO9CJzSb8bMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMyMzAzMTJlMzEzMzMxMmUzMTMz
MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
yYOIMA0GCSqGSIb3DQEBCwUAA4IBAQAOPFQArOztRxq+7LAaBDgOLnDRQpGY9uSZ
Lk2bfB4G+Kp/mhnPqI59VUFh+ebpx+e8gsgklu5ijVSJTFQwPI1cFTZVs8pme2FL
rgSa7ww4E2cix1R5dSk7XrOsAg3vxY8SgR7afhi77TFMKxSLqDcH7eh2yM7mbE+C
uvqpWHvvxBnXPKA2DIaNkyUSxSO5QCVUnfyefwyu36K8PGyR1olDq/2scBHWzVCl
i84ab9NNdTUX0sHKi5blZfmIKx5XoFX6AQb/fe5ctEwQtw7iTQTJWzJFxriBzWQZ
84C//M9Vs7h0mfe97lJ+r+GnZyInbO0SO+sxiz9lnsI2gx5Zt9/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org