Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3232312e3137362e302f32322d3234203d3e203238333433.roa
File:                     3133312e3232312e3137362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          pEPN4Qit0VsCOJbnA4a8zPZwHOhoYhbW1yfQyxv2yc0=
Subject key identifier:   58:D2:56:14:91:78:B9:75:11:41:52:10:04:F2:7D:3A:D2:69:03:A1
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       2F2024A8D87B8F1AB961B99CEC7FC2480BAEEDD4
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3232312e3137362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 02 Jun 2022 13:12:01 +0000
ROA not before:           Thu 02 Jun 2022 13:07:01 +0000
ROA not after:            Thu 01 Jun 2023 13:12:01 +0000
asID:                     28343
IP address blocks:        131.221.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:20:24:a8:d8:7b:8f:1a:b9:61:b9:9c:ec:7f:c2:48:0b:ae:ed:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jun  2 13:07:01 2022 GMT
            Not After : Jun  1 13:12:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:e7:52:d4:fb:99:47:40:b3:8d:0a:3c:37:
                    f7:33:e5:84:a8:ec:7d:ba:cc:a7:89:c3:78:9d:bf:
                    c3:96:48:16:25:7e:64:e7:de:49:c3:11:86:83:67:
                    af:8f:db:6d:78:37:7e:6e:b1:3b:9c:f2:44:7d:d5:
                    7b:b3:03:5f:38:fe:69:fa:ab:c5:ce:10:93:8c:3a:
                    c0:22:cc:7e:e4:bd:46:ca:5b:4a:3e:0e:2a:c7:85:
                    4d:5a:e5:2a:17:5c:2b:96:98:5e:a0:2b:b9:2a:83:
                    da:f2:78:44:10:65:9f:a2:b0:ff:13:cc:df:f8:47:
                    6e:4a:c5:e5:e6:d9:c2:38:9d:54:e8:32:54:bc:29:
                    83:45:5c:a8:22:c3:47:97:fe:e4:88:d0:99:d0:13:
                    41:2a:f5:b2:b8:29:10:84:7f:e8:8b:ed:6f:8f:8d:
                    b5:cb:17:4e:d4:7a:48:ff:8e:30:59:1a:25:a8:16:
                    d9:dd:ba:60:69:7d:3a:53:f0:fe:ba:85:2c:9f:8e:
                    8b:c5:6f:c3:ae:44:ee:24:dd:1a:d3:47:32:a9:90:
                    17:f2:24:23:26:46:be:85:06:fc:19:8e:47:e5:68:
                    34:32:6d:73:f5:f4:45:4d:94:88:6a:80:28:48:6e:
                    aa:73:75:bb:c4:6f:5c:02:94:49:6c:e3:dd:8d:2b:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D2:56:14:91:78:B9:75:11:41:52:10:04:F2:7D:3A:D2:69:03:A1
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3232312e3137362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:34:e6:97:c2:54:d1:81:90:9d:1d:be:68:72:63:74:84:
         f8:a5:7c:41:c4:10:45:af:6b:45:e2:99:32:02:78:b4:89:6c:
         a9:51:7b:1e:c0:20:ba:45:d6:aa:e5:e4:0e:f4:54:68:98:42:
         c8:e0:de:ec:46:c3:77:f1:31:07:04:39:e4:a9:e3:f6:e1:01:
         79:86:11:4b:3c:c1:35:78:47:67:77:fc:55:2b:ba:14:9e:1c:
         16:b4:49:ae:a6:8d:c2:9e:68:7c:9c:89:e1:21:e7:db:b6:5d:
         ae:73:10:df:c3:a7:75:51:e0:2e:3e:a9:52:ec:8c:99:58:15:
         f2:c6:37:73:05:fc:ba:fa:4d:aa:39:bf:53:39:70:74:64:a5:
         42:c8:1c:6f:61:41:5e:89:69:4b:ed:f6:98:d6:33:e6:55:85:
         70:b3:9d:0a:85:43:0a:09:71:9d:ba:72:ed:9d:d1:98:98:0b:
         0e:00:12:ad:6b:21:0d:70:b0:24:f9:c9:fd:5c:a3:ba:5c:96:
         87:df:d0:00:81:17:48:63:66:be:3f:04:a0:d7:54:3f:83:d3:
         24:b5:21:e4:94:22:a0:3f:2a:4a:42:6c:44:c4:20:ef:82:b8:
         a4:50:e2:95:dd:7f:fe:57:82:ea:19:2e:01:a1:86:d2:70:e6:
         8c:30:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org