Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa
File:                     3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          mlkml2aIf0FSVLSoQ8cILx3daMpFY7B4pdG60p1Ln2E=
Subject key identifier:   AF:4C:41:75:F1:24:FA:2B:90:F1:42:91:48:D2:7F:9A:05:1F:C3:F5
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       4B2AA251C48B341CC4368F6C96D1732F3580E9C6
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        201.131.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2a:a2:51:c4:8b:34:1c:c4:36:8f:6c:96:d1:73:2f:35:80:e9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:1b:ae:0e:b7:7f:c8:fb:4c:bd:33:04:52:
                    bb:d0:9f:34:12:8d:2d:d1:ad:22:d1:dc:de:46:d7:
                    d3:c2:ed:f2:6c:7d:67:71:2d:10:1a:1a:aa:c1:92:
                    8f:15:7d:11:ca:7c:0a:a9:d5:c8:6e:8c:8d:52:67:
                    a5:58:88:69:60:f2:ab:64:46:32:e7:91:36:3c:0c:
                    b9:fa:c5:8a:82:d0:1c:54:dd:17:45:89:29:ac:e5:
                    4f:c0:f9:61:3e:c2:36:52:2f:ec:0e:0b:8b:af:32:
                    58:b5:80:f3:c2:1c:a4:9c:a8:f4:c0:4a:e9:1a:50:
                    2e:86:eb:0f:76:ca:52:e8:4f:f3:f0:2f:80:a6:bc:
                    bd:b6:ba:44:4f:c1:35:7c:d6:de:33:95:31:92:0f:
                    76:89:97:5f:1c:19:b8:36:86:94:03:b8:98:82:e0:
                    59:5d:3f:4a:c5:63:0e:b0:2f:ab:0f:4e:da:13:90:
                    59:27:55:47:c4:1b:dd:60:3b:87:b3:f6:e4:d9:ae:
                    aa:80:a9:e7:36:b7:55:f6:0f:64:0f:07:b8:55:0d:
                    b0:ec:ae:1d:d2:19:11:20:6c:dc:3e:11:09:82:ce:
                    30:9e:7d:c6:3e:37:70:81:dc:90:ab:af:0e:12:89:
                    52:ee:a9:96:f2:c7:18:eb:95:b5:68:a2:ee:b9:38:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:41:75:F1:24:FA:2B:90:F1:42:91:48:D2:7F:9A:05:1F:C3:F5
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:45:1d:86:7c:d4:dc:80:18:76:32:c2:07:24:36:1a:f1:
         ff:52:ad:96:c8:86:3a:64:88:45:e3:bf:04:c9:a1:0d:15:36:
         91:fb:3c:fd:93:46:41:44:45:17:94:88:ca:9b:c2:49:af:c0:
         a1:cb:8e:e2:ed:4f:9f:85:9b:b8:46:71:52:ec:d8:67:75:f9:
         27:12:ad:2b:aa:28:49:e6:51:45:8e:8e:56:6a:51:0f:d4:94:
         b9:a9:3d:8f:d5:c5:51:c7:3b:10:22:7f:66:af:50:9a:5d:1f:
         b0:97:95:c6:ca:36:8a:c8:46:6d:c4:2f:e0:9e:47:14:58:3e:
         67:f1:d0:e8:cd:c6:dd:39:8d:f7:35:3d:64:6f:05:52:2d:65:
         f1:44:74:94:fd:ab:76:ed:53:03:cf:bd:50:8b:68:69:95:81:
         7b:4e:d1:32:25:fc:94:a9:16:61:d2:82:c7:e8:01:9a:03:b7:
         dd:62:27:3e:a8:e0:7c:a0:05:ea:66:41:05:e0:87:8e:3b:3a:
         40:ce:67:96:1f:da:b4:10:fd:3e:dc:09:99:50:3e:2c:ff:20:
         8f:78:25:9c:20:75:84:03:8d:65:56:16:a5:c5:99:06:42:9c:
         0c:84:b3:34:65:a3:c5:11:a4:9f:3e:41:cc:84:30:2f:06:0e:
         de:80:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org