Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a3330633a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a3330633a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          0EO+p4yl0+uOHi7kBWaX6JDY9YB6mJVhCaZ0Xt+KgeM=
Subject key identifier:   A6:D2:8F:92:13:AF:E1:95:DA:EC:CD:B4:34:73:A8:7F:77:68:B8:CA
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6AD7AFAE37F7D0F2D5EA661298FA787F9F7CC02B
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a3330633a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        2804:30c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d7:af:ae:37:f7:d0:f2:d5:ea:66:12:98:fa:78:7f:9f:7c:c0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d7:6e:4a:e6:3f:f2:57:83:40:1a:bf:2a:86:
                    01:bc:ed:fa:0e:d8:61:b9:56:09:75:85:48:12:fe:
                    e3:b9:91:1e:e6:24:ba:dd:55:bd:cb:16:c8:88:f4:
                    49:c3:60:5b:68:a4:e2:c6:bf:a9:45:d0:a4:a4:34:
                    95:48:12:92:72:c0:db:92:13:63:14:31:e2:67:eb:
                    64:5b:61:7d:06:fc:a8:5c:40:ce:37:98:0f:b1:f7:
                    2d:08:e3:27:41:c0:4a:3a:c7:5f:e5:1c:99:4d:ee:
                    a6:2f:99:6a:2e:9b:86:5b:0f:95:25:66:c3:54:93:
                    f6:e7:44:59:e5:65:68:4c:78:f1:0b:24:ba:3e:7b:
                    fe:78:62:61:89:17:af:39:b8:3f:51:55:ee:78:de:
                    42:61:50:39:4c:15:42:4a:19:ec:a5:c6:2e:c1:53:
                    aa:ef:62:ec:16:8a:99:c8:81:f2:07:7a:a6:5c:b6:
                    a6:c5:8d:b8:5b:d6:21:49:78:b6:37:8f:01:8c:25:
                    26:3c:80:ff:fb:57:cf:f7:72:59:8c:49:1e:0e:c3:
                    12:85:f9:ed:36:27:ae:44:5f:b4:66:75:59:e9:33:
                    a4:47:6a:78:83:20:a8:62:e9:40:10:51:e8:a1:45:
                    4b:55:68:64:c6:19:0c:ac:c4:66:72:31:5e:23:92:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:8F:92:13:AF:E1:95:DA:EC:CD:B4:34:73:A8:7F:77:68:B8:CA
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a3330633a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:b9:37:2a:db:37:89:58:36:30:a0:a5:a5:2c:01:90:77:d7:
         7b:aa:9f:08:6c:37:d8:01:98:cb:b7:55:4a:2f:47:e8:02:3e:
         58:50:85:8b:39:c6:49:9b:31:0a:89:f6:ac:c8:e8:9e:ba:01:
         08:fa:6a:62:4c:46:68:ad:f9:08:55:5f:04:4b:9c:d0:5a:b4:
         dc:70:fb:45:66:27:be:2d:bb:d0:7a:4b:0e:52:55:75:e8:42:
         94:d9:60:46:80:d4:b7:5b:53:77:80:97:d5:27:43:df:a7:0b:
         9e:86:c8:41:03:16:a7:7f:97:1e:07:b8:22:c0:2b:c5:1b:6f:
         6d:61:8d:1f:e3:c9:c9:e4:f5:c5:e1:43:fe:62:30:af:12:c1:
         44:22:49:5e:94:4f:94:41:ab:ec:41:1a:7b:e4:b6:c8:d2:96:
         cf:fe:41:83:a3:5a:4b:7d:1d:5c:bc:f8:8e:01:fd:e2:ca:e0:
         33:33:42:45:db:02:b3:c7:41:9f:d2:77:f2:b3:99:47:fe:6e:
         61:46:d7:e1:80:24:24:ae:78:01:3a:67:a8:5c:c0:a9:2d:3d:
         c9:db:6d:57:9d:bd:e7:18:18:e6:a3:30:5f:f2:9c:f0:6c:1d:
         69:e1:94:20:29:ce:39:38:e4:92:7a:78:5e:79:1b:c0:b7:70:
         44:b6:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org