Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a633a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a633a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          af4B56I+xAHCrIoIGwJdWRd8d/uOdK6shiI7Ps5QpF0=
Subject key identifier:   AB:C9:57:FA:A6:1A:84:6A:B9:23:67:83:D9:8A:2B:81:0D:48:D2:D6
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       48F18307272D2F7C9D0412DA6B2CFCEBDC250F07
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a633a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        2804:c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f1:83:07:27:2d:2f:7c:9d:04:12:da:6b:2c:fc:eb:dc:25:0f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:05:e4:9a:9c:e1:47:0a:88:10:f8:49:0b:
                    b9:22:9c:70:88:95:76:16:81:2a:b0:95:bc:66:5d:
                    70:2b:91:84:3b:22:98:4d:59:4a:39:11:52:50:23:
                    6c:53:0e:c7:94:c3:d6:c6:10:ef:af:8e:b3:4b:2c:
                    50:25:f4:d3:a2:4c:95:d7:de:db:09:ff:a4:84:d0:
                    08:2f:06:bf:c6:25:81:27:42:97:0a:73:7b:38:81:
                    fe:77:75:1b:05:6e:63:96:05:8b:84:e3:4a:59:fa:
                    c8:66:79:f8:e5:f3:14:e5:9a:59:be:e8:28:3f:2a:
                    f0:80:65:e9:7d:36:1d:3f:6a:ba:a2:a6:87:9c:5b:
                    84:e6:f9:9b:9b:6f:87:ce:78:80:30:ae:71:b0:54:
                    12:d4:d0:6e:5a:83:2b:b1:f6:a2:60:26:a0:65:e6:
                    a7:67:16:2e:3e:00:9c:00:3b:33:44:1d:6f:ff:ba:
                    80:33:33:87:db:61:9e:c0:b5:fe:09:31:a1:44:12:
                    70:81:f7:63:2e:b4:46:29:6f:cb:86:e5:ca:88:96:
                    01:3d:fd:bb:3c:40:21:1e:d0:03:44:0b:54:45:1b:
                    ae:dc:07:a8:4e:25:75:2b:4f:cb:77:98:9b:de:fe:
                    d7:87:f2:2c:1f:a1:4f:be:f2:34:01:ae:59:a9:ab:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C9:57:FA:A6:1A:84:6A:B9:23:67:83:D9:8A:2B:81:0D:48:D2:D6
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a633a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:7b:a2:3a:b5:4e:8c:6f:5e:46:ea:3e:97:eb:e7:01:ef:0a:
         98:e7:42:c4:a7:7b:13:e7:ce:a3:6e:4a:95:73:1a:da:12:d0:
         bb:81:73:b3:e8:81:76:70:de:ce:89:f2:37:c0:d7:7e:35:73:
         ee:23:c3:6e:6d:98:69:7a:fd:2b:b4:bf:87:68:3f:dc:e7:4b:
         8b:dd:20:91:55:31:57:00:fe:63:77:db:80:9a:cb:d7:b9:ff:
         33:3d:7e:36:1e:b7:fc:b1:d0:05:2b:c3:02:24:d9:f6:85:0f:
         0b:a7:6e:ac:b8:f1:7c:13:26:50:b3:6f:3c:d5:7c:cb:0a:41:
         aa:50:20:4c:ea:c4:38:4d:fa:48:3f:aa:3f:f8:6e:d2:b4:0b:
         61:27:55:7d:48:84:4f:dd:7c:b4:b5:98:14:e9:72:23:6c:c2:
         20:74:ab:60:4b:2f:ce:4d:49:f8:78:08:45:c8:73:1e:39:31:
         0d:ad:83:ea:0f:3f:aa:16:bf:15:cf:d1:49:1c:91:e6:ca:b3:
         e0:ab:02:40:fc:06:c6:70:7b:53:32:33:19:de:4c:62:cf:da:
         29:0d:7d:3b:27:7c:c5:fc:c6:6c:3e:6d:38:3d:5b:d2:c2:76:
         bd:b0:55:a1:e6:da:2e:e3:ea:07:fe:76:fb:91:fa:f0:60:2a:
         ce:5e:58:2f
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUSPGDByctL3ydBBLaayz869wlDwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTNaFw0yMjEyMjkxODIyMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM4MjA1RTQ5QTlDRTE0NzBB
ODgxMEY4NDkwQkI5MjI5QzcwODg5NTc2MTY4MTJBQjA5NUJDNjY1RDcwMkI5MTg0
M0IyMjk4NEQ1OTRBMzkxMTUyNTAyMzZDNTMwRUM3OTRDM0Q2QzYxMEVGQUY4RUIz
NEIyQzUwMjVGNEQzQTI0Qzk1RDdERURCMDlGRkE0ODREMDA4MkYwNkJGQzYyNTgx
Mjc0Mjk3MEE3MzdCMzg4MUZFNzc3NTFCMDU2RTYzOTYwNThCODRFMzRBNTlGQUM4
NjY3OUY4RTVGMzE0RTU5QTU5QkVFODI4M0YyQUYwODA2NUU5N0QzNjFEM0Y2QUJB
QTJBNjg3OUM1Qjg0RTZGOTlCOUI2Rjg3Q0U3ODgwMzBBRTcxQjA1NDEyRDREMDZF
NUE4MzJCQjFGNkEyNjAyNkEwNjVFNkE3NjcxNjJFM0UwMDlDMDAzQjMzNDQxRDZG
RkZCQTgwMzMzMzg3REI2MTlFQzBCNUZFMDkzMUExNDQxMjcwODFGNzYzMkVCNDQ2
Mjk2RkNCODZFNUNBODg5NjAxM0RGREJCM0M0MDIxMUVEMDAzNDQwQjU0NDUxQkFF
REMwN0E4NEUyNTc1MkI0RkNCNzc5ODlCREVGRUQ3ODdGMjJDMUZBMTRGQkVGMjM0
MDFBRTU5QTlBQkZDQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvIIF5Jqc4UcKiBD4SQu5IpxwiJV2FoEqsJW8Zl1wK5GEOyKYTVlK
ORFSUCNsUw7HlMPWxhDvr46zSyxQJfTTokyV197bCf+khNAILwa/xiWBJ0KXCnN7
OIH+d3UbBW5jlgWLhONKWfrIZnn45fMU5ZpZvugoPyrwgGXpfTYdP2q6oqaHnFuE
5vmbm2+HzniAMK5xsFQS1NBuWoMrsfaiYCagZeanZxYuPgCcADszRB1v/7qAMzOH
22GewLX+CTGhRBJwgfdjLrRGKW/LhuXKiJYBPf27PEAhHtADRAtURRuu3AeoTiV1
K0/Ld5ib3v7Xh/IsH6FPvvI0Aa5Zqav8tQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FKvJV/qmGoRquSNng9mKK4ENSNLWMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMyMzgzMDM0M2E2MzNhM2EyZjMz
MzIyZDM0MzgyMDNkM2UyMDMyMzgzMzM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBAAMMA0GCSqG
SIb3DQEBCwUAA4IBAQDUe6I6tU6Mb15G6j6X6+cB7wqY50LEp3sT586jbkqVcxra
EtC7gXOz6IF2cN7OifI3wNd+NXPuI8NubZhpev0rtL+HaD/c50uL3SCRVTFXAP5j
d9uAmsvXuf8zPX42Hrf8sdAFK8MCJNn2hQ8Lp26suPF8EyZQs2881XzLCkGqUCBM
6sQ4TfpIP6o/+G7StAthJ1V9SIRP3Xy0tZgU6XIjbMIgdKtgSy/OTUn4eAhFyHMe
OTENrYPqDz+qFr8Vz9FJHJHmyrPgqwJA/AbGcHtTMjMZ3kxiz9opDX07J3zF/MZs
Pm04PVvSwna9sFWh5tou4+oH/nb7kfrwYCrOXlgv
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org