Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/3137372e37332e3136302e302f32322d3232203d3e20323632353731.roa
File:                     3137372e37332e3136302e302f32322d3232203d3e20323632353731.roa (raw, json)
Hash identifier:          oMsmYc1bWPhIDdK5hIm301okYScFGhn6N+Az1074ZU8=
Subject key identifier:   77:E4:37:D7:CD:F2:71:61:84:97:0C:FF:AF:24:86:34:5B:D1:E8:0A
Certificate issuer:       /CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
Certificate serial:       3EF591F1DF0BAFD13311127F989C8E0ACB4E830C
Authority key identifier: 98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/3137372e37332e3136302e302f32322d3232203d3e20323632353731.roa
Signing time:             Mon 06 Dec 2021 19:10:09 +0000
ROA not before:           Mon 06 Dec 2021 19:05:09 +0000
ROA not after:            Mon 05 Dec 2022 19:10:09 +0000
asID:                     262571
IP address blocks:        177.73.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f5:91:f1:df:0b:af:d1:33:11:12:7f:98:9c:8e:0a:cb:4e:83:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
        Validity
            Not Before: Dec  6 19:05:09 2021 GMT
            Not After : Dec  5 19:10:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a1:bf:4e:d4:7f:12:18:8c:e2:55:5a:4b:b4:
                    56:cf:39:16:d3:cd:4b:0d:c3:90:dd:d3:35:d6:89:
                    b1:ca:76:1c:e7:2f:a3:78:16:b7:4e:c3:0b:26:c7:
                    de:93:48:72:45:73:93:72:91:d4:7a:8e:4e:9d:33:
                    e9:fb:e9:03:84:4d:c5:d7:0a:93:e9:c6:67:08:b6:
                    0a:eb:2a:96:78:71:c6:eb:0c:b6:19:cc:2a:36:83:
                    20:ef:92:16:a6:e2:09:e1:71:1d:e4:ea:86:e0:0c:
                    02:52:18:d9:a4:18:7a:e5:22:c9:f3:94:a7:bf:8f:
                    e7:27:ff:4e:39:ec:f3:77:c6:f8:9a:5f:92:1d:3f:
                    8c:2f:9c:00:9f:df:ce:ca:a1:21:86:95:64:46:b2:
                    6a:d2:b7:a2:5f:1f:99:53:ab:dc:83:1f:31:1d:60:
                    a1:4e:7c:7b:db:6d:aa:1a:36:81:8e:e2:04:1f:97:
                    0c:e0:ac:47:28:c6:d5:f6:df:38:a0:85:6a:29:e2:
                    37:c1:03:5b:e1:b8:43:86:d7:fe:4f:2f:76:71:1a:
                    a4:b4:a1:77:1b:15:21:b0:f0:6d:ac:94:a9:0f:77:
                    7d:be:1c:5d:7e:54:01:a7:a3:a9:df:31:c2:d7:68:
                    34:99:a8:78:e0:88:de:cf:f5:48:be:99:47:79:75:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:37:D7:CD:F2:71:61:84:97:0C:FF:AF:24:86:34:5B:D1:E8:0A
            X509v3 Authority Key Identifier:
                keyid:98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/3137372e37332e3136302e302f32322d3232203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:86:f6:e6:53:ac:51:62:62:22:9e:48:f7:b6:a1:98:83:
         f9:b7:63:1c:ea:b5:4f:db:e3:1c:93:9b:7b:73:42:9d:15:48:
         7c:e8:4f:c6:62:ee:87:74:c7:ac:ec:0f:87:88:fb:c4:02:aa:
         ac:a6:11:e6:cb:71:95:32:ef:a4:27:81:44:e9:68:29:ff:94:
         db:c7:2a:b1:19:61:db:44:eb:58:f6:0a:37:e1:f1:9a:b6:2a:
         7e:dd:c0:d3:c3:cb:eb:97:b5:3d:b1:44:c0:4d:6d:37:4d:d1:
         6b:0c:b0:25:97:f4:02:50:14:24:bd:54:32:01:5e:2d:e5:45:
         90:4a:ad:67:12:6d:4e:0f:b2:ab:44:ae:72:ba:99:4f:8c:b2:
         9e:24:c7:e8:04:c8:7a:50:15:4b:14:80:02:a2:f5:e2:0e:a7:
         7e:76:45:69:1e:61:8e:ba:45:17:a7:7c:b4:f0:23:0d:73:2b:
         ed:43:50:9e:e5:7f:fb:29:02:77:61:9e:5c:0d:ba:1d:6c:3b:
         cd:52:c9:14:5d:c5:39:0e:7e:38:af:4b:fa:31:b9:d4:e3:a5:
         34:fe:b3:38:3b:08:25:c9:89:c2:0e:86:fd:e2:d4:52:e3:86:
         90:a9:67:5c:d3:12:60:59:e1:1c:17:00:19:b9:90:6b:4e:1b:
         fd:12:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org