Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa
File:                     3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          ow3p8Pexm4HcfsMIVInURIocUjayLLaYP8L813jydiM=
Subject key identifier:   7A:BB:EC:EE:CE:84:AF:00:16:CA:50:8C:90:C0:C8:5C:F1:F7:D1:D6
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7CCD3643D29EC2774719503C4696217DE5DAFBEB
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        201.159.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cd:36:43:d2:9e:c2:77:47:19:50:3c:46:96:21:7d:e5:da:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:1a:78:bd:45:2c:d8:5c:b8:b9:d4:49:81:
                    fc:f3:52:e9:b3:37:28:ad:23:30:69:69:5f:db:42:
                    30:df:5a:d2:34:2a:5b:82:db:63:0a:e3:62:14:18:
                    e8:83:ef:bd:41:8e:88:fc:5c:9a:a5:a3:37:c8:4b:
                    02:f2:dc:ec:61:91:17:93:e5:fa:ee:63:ba:c2:5d:
                    19:63:ae:ed:f1:68:bb:b6:ea:e2:73:8d:00:3b:94:
                    e6:c7:db:63:5a:9b:36:7e:3f:cc:d1:65:0e:f1:ec:
                    d9:e8:a8:9f:1e:58:f4:c5:95:65:62:41:5c:bb:77:
                    ef:e4:60:cb:4b:ee:b9:af:4a:a4:59:42:7f:76:d4:
                    3a:36:68:26:a6:c3:d1:a9:8d:25:83:82:0c:2c:c7:
                    93:64:e2:5a:64:94:86:35:46:b0:15:54:72:28:10:
                    1b:11:59:9e:c1:5f:11:e5:50:8c:97:7a:af:35:29:
                    7a:26:48:31:78:a5:9c:16:7c:f7:39:ce:ee:94:da:
                    c2:99:d9:69:00:37:1f:e5:f6:9a:bf:06:68:c8:8b:
                    72:b1:89:3f:0e:6f:bb:5f:2c:d0:d9:69:63:45:0d:
                    80:2b:60:70:6f:84:e4:7d:4b:9c:86:e6:f6:9a:1d:
                    e4:0c:aa:96:57:1a:93:a9:20:c0:aa:0a:83:47:4d:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:EC:EE:CE:84:AF:00:16:CA:50:8C:90:C0:C8:5C:F1:F7:D1:D6
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:43:96:04:6c:37:a8:77:d3:c1:98:ae:d5:3f:79:3d:0e:
         a6:34:40:35:a9:1f:dc:3c:00:2a:15:b0:7c:0e:10:ef:a3:7f:
         81:e9:8d:d1:e1:60:75:20:27:47:5b:b9:29:39:ee:88:76:47:
         78:f1:63:ec:73:2e:10:e7:bd:b6:de:6f:a9:b1:4c:7d:9d:a3:
         84:8e:3d:31:ee:9e:20:70:64:6b:43:c0:9a:d2:59:d9:ba:be:
         57:90:06:06:9a:64:18:45:20:90:a3:d9:81:95:65:f9:41:8f:
         71:bd:74:a0:db:da:08:b1:e7:7f:de:d6:a5:27:7e:0d:f3:a2:
         66:2d:25:89:fb:d1:fc:4f:70:b3:80:ac:0b:3d:3f:fc:c2:1d:
         24:cc:20:f2:5e:b9:7c:76:28:66:b4:92:65:a8:ee:34:49:a1:
         a1:27:0b:e3:c7:10:43:03:bf:d1:8e:dd:bb:37:4c:80:9d:52:
         48:00:44:64:c3:56:6f:5a:f6:01:87:c8:cc:7a:93:14:66:f5:
         5c:4e:3d:7f:6d:92:25:65:d0:f8:ff:ad:54:10:55:e2:42:09:
         5b:2d:2a:ed:88:41:5b:97:bd:12:b8:cd:1c:7c:7c:af:30:ac:
         be:0f:c2:b4:d7:e4:da:a9:20:67:88:6a:a0:e2:c3:69:b2:03:
         62:3b:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org