Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6635383a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a6635383a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          2mTjms6iqJkWlKQuXSdHdJFVLkVvIGD6OEkUPUWYl+o=
Subject key identifier:   CB:FB:FE:BE:D1:61:63:79:D5:93:88:D5:8D:00:D8:DD:20:97:6E:8D
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       08691D8A11E29E691ECF731E98374292EAB2AB44
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6635383a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        2804:f58::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:1d:8a:11:e2:9e:69:1e:cf:73:1e:98:37:42:92:ea:b2:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject: CN=3082010A0282010100E1EB93DFD910D5DFBB52D5160A5309CC23022E6CCCD46512520D47F5E78E07EB9EA0B170A585A5332D95EA7CA910E5995607D91DEC35F9F7F2818AD063CAC893ACCCEC8E375DB4137D3FB98A34B773B7B34ADC339C674CD7BD9507C8542283DFA739AF15D4F28DBE51A0310914D2578F508C457EDDD0BA188334F5292083D46EDEF6A4B019853AE3F5E771282353A13291A28C40A64516A247236604F5FF5467B21597A1BD5C7280DEDE0E0D798E6410E1FFA8BF2ED60BC8390B2143D8E4B01D77A76388F83CF5AB1D154F4F6FFA3F8BA91D47414C92D3B3BE09CCD31515DA7A1B90F472E7B1A2AE09BDB82B107734A409C977B64E5052C8A153378A86DE580B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:eb:93:df:d9:10:d5:df:bb:52:d5:16:0a:53:
                    09:cc:23:02:2e:6c:cc:d4:65:12:52:0d:47:f5:e7:
                    8e:07:eb:9e:a0:b1:70:a5:85:a5:33:2d:95:ea:7c:
                    a9:10:e5:99:56:07:d9:1d:ec:35:f9:f7:f2:81:8a:
                    d0:63:ca:c8:93:ac:cc:ec:8e:37:5d:b4:13:7d:3f:
                    b9:8a:34:b7:73:b7:b3:4a:dc:33:9c:67:4c:d7:bd:
                    95:07:c8:54:22:83:df:a7:39:af:15:d4:f2:8d:be:
                    51:a0:31:09:14:d2:57:8f:50:8c:45:7e:dd:d0:ba:
                    18:83:34:f5:29:20:83:d4:6e:de:f6:a4:b0:19:85:
                    3a:e3:f5:e7:71:28:23:53:a1:32:91:a2:8c:40:a6:
                    45:16:a2:47:23:66:04:f5:ff:54:67:b2:15:97:a1:
                    bd:5c:72:80:de:de:0e:0d:79:8e:64:10:e1:ff:a8:
                    bf:2e:d6:0b:c8:39:0b:21:43:d8:e4:b0:1d:77:a7:
                    63:88:f8:3c:f5:ab:1d:15:4f:4f:6f:fa:3f:8b:a9:
                    1d:47:41:4c:92:d3:b3:be:09:cc:d3:15:15:da:7a:
                    1b:90:f4:72:e7:b1:a2:ae:09:bd:b8:2b:10:77:34:
                    a4:09:c9:77:b6:4e:50:52:c8:a1:53:37:8a:86:de:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:FE:BE:D1:61:63:79:D5:93:88:D5:8D:00:D8:DD:20:97:6E:8D
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6635383a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:27:8b:a9:5f:ba:38:c7:25:04:e5:e8:51:bd:c1:c6:1a:44:
         68:0f:e4:89:f6:08:69:f3:91:bd:bf:b6:49:f0:b4:da:7d:8c:
         8e:da:36:80:72:1c:91:be:76:9b:7b:9d:19:ec:34:b2:ec:09:
         d3:91:de:c6:01:1e:2a:91:d9:7a:45:53:d4:f5:d0:a1:56:ad:
         9f:07:5d:64:85:fa:89:9f:f9:cf:da:e8:92:d8:e3:00:2e:1a:
         7b:03:17:03:30:10:ad:16:36:cb:7c:8e:d4:6d:5b:f8:3f:9f:
         b4:c5:bb:c8:66:2b:1b:c8:38:83:77:4b:bd:c8:ce:59:82:2b:
         27:05:38:89:ef:be:76:72:ef:cd:16:66:a7:1d:7c:a8:02:27:
         2e:96:01:92:18:ac:c6:3c:de:21:8c:4c:ff:6b:77:c0:1d:b5:
         88:e4:ad:fd:d5:71:72:e8:56:fd:ae:f5:6d:a4:74:e2:ce:81:
         37:2c:93:59:81:84:01:7e:1f:30:3b:b1:2e:8d:af:43:07:5d:
         b5:37:8e:88:71:83:4d:c0:90:b1:75:f7:c2:e8:5a:f3:c5:22:
         7c:c8:de:8a:95:60:5b:76:5a:32:9f:99:64:34:40:f2:ee:86:
         55:2a:78:69:b4:a0:18:a2:12:d5:f7:f8:d9:40:81:e5:5c:5f:
         11:ba:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org