Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e37322e3130382e302f32322d3234203d3e203238333433.roa
File:                     3133312e37322e3130382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          2qd1GonfdVyfLwLxpb9SpQyq8b5n8Qv4iK1NFWD2m/4=
Subject key identifier:   DC:CF:EE:D5:19:85:F8:D4:5C:B9:C6:CC:50:2A:90:89:17:43:96:7C
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       26A4DB245096EE760F3F25482AE4A54D005966C0
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e37322e3130382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        131.72.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a4:db:24:50:96:ee:76:0f:3f:25:48:2a:e4:a5:4d:00:59:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:15:4a:7a:f8:d9:0c:19:a3:2d:9e:1f:84:c7:
                    6c:13:57:42:79:17:cb:62:1c:b5:8f:44:3e:6b:49:
                    2f:a5:87:1f:bb:bf:58:96:2c:f2:48:31:31:c3:b3:
                    44:7e:96:cf:dc:8b:53:0f:ec:8f:df:02:17:82:88:
                    22:17:10:e2:a5:49:bf:8b:a8:d7:4b:9e:ae:28:79:
                    6d:18:e1:60:2b:b8:02:53:fe:50:91:1e:13:a7:23:
                    0b:a5:82:92:9b:5d:7a:01:57:35:86:8a:79:c8:fb:
                    f9:93:ba:69:1d:2b:6b:1a:82:7d:f1:63:32:cb:fe:
                    3f:f3:71:1a:e0:6c:ef:8a:40:0d:90:e7:2a:62:35:
                    03:f0:11:b8:73:36:4b:6a:3d:cd:2d:72:c1:cd:5a:
                    f3:15:58:3e:32:32:66:b9:6f:a1:a6:1d:49:37:38:
                    16:16:a2:09:a5:e3:07:d4:50:d0:2f:a4:4d:79:97:
                    7b:ed:8f:fb:80:e1:c6:37:a8:31:bc:f9:b9:55:70:
                    91:c5:c8:60:d6:22:fa:eb:72:ce:33:51:48:65:84:
                    5f:97:0d:ef:e3:db:e3:d0:2a:fe:fa:93:20:7f:72:
                    56:d3:20:3f:5d:3b:df:d5:30:e0:9b:95:c0:d5:a4:
                    ca:91:64:b8:6b:54:f6:e2:3c:43:7d:42:68:9d:9f:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:EE:D5:19:85:F8:D4:5C:B9:C6:CC:50:2A:90:89:17:43:96:7C
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e37322e3130382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:88:2f:1c:74:e3:96:bb:5b:5b:80:91:c8:5e:83:b9:a4:b0:
         4c:50:21:aa:f4:72:c1:bb:d3:d3:82:e6:3a:d1:f2:68:16:0a:
         cb:f1:b0:e4:51:8b:be:ee:bd:94:e7:48:ad:5a:ac:0a:7d:c5:
         43:f9:cc:94:f6:99:87:f4:b4:23:26:31:43:08:2a:ac:f5:24:
         73:4e:17:7d:7a:b3:ac:58:91:ef:d3:4e:6f:da:b5:65:e8:1d:
         f1:6f:96:a9:46:fc:c6:d1:39:77:3f:bc:89:86:4c:af:8d:e8:
         08:b8:0e:cb:d6:79:6d:ba:38:a1:3e:1a:3d:b0:e5:a4:8b:0d:
         24:84:47:a3:2f:2d:c9:b0:48:7c:48:69:3f:07:46:a9:e5:d2:
         00:78:d7:55:82:8c:ba:21:56:0b:f1:8f:b1:af:f4:8e:06:aa:
         15:58:43:67:00:67:8e:ab:ec:58:60:0e:5e:ec:05:64:c6:7c:
         0c:12:65:8c:6a:91:e3:ed:87:ee:bb:d8:2e:19:74:40:80:0a:
         85:dd:13:a7:61:96:d1:f7:b8:b8:56:1e:bb:50:be:8f:d8:64:
         33:c3:98:42:0a:1b:f4:d0:85:74:6d:90:24:40:97:7b:0c:95:
         d6:a3:ed:95:42:94:6f:83:36:8a:12:fc:aa:96:2f:3a:75:76:
         51:da:a1:65
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJqTbJFCW7nYPPyVIKuSlTQBZZsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjNaFw0yMzA0MjcxMzI5MjNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkExNTRBN0FGOEQ5MEMxOUEz
MkQ5RTFGODRDNzZDMTM1NzQyNzkxN0NCNjIxQ0I1OEY0NDNFNkI0OTJGQTU4NzFG
QkJCRjU4OTYyQ0YyNDgzMTMxQzNCMzQ0N0U5NkNGREM4QjUzMEZFQzhGREYwMjE3
ODI4ODIyMTcxMEUyQTU0OUJGOEJBOEQ3NEI5RUFFMjg3OTZEMThFMTYwMkJCODAy
NTNGRTUwOTExRTEzQTcyMzBCQTU4MjkyOUI1RDdBMDE1NzM1ODY4QTc5QzhGQkY5
OTNCQTY5MUQyQjZCMUE4MjdERjE2MzMyQ0JGRTNGRjM3MTFBRTA2Q0VGOEE0MDBE
OTBFNzJBNjIzNTAzRjAxMUI4NzMzNjRCNkEzRENEMkQ3MkMxQ0Q1QUYzMTU1ODNF
MzIzMjY2Qjk2RkExQTYxRDQ5MzczODE2MTZBMjA5QTVFMzA3RDQ1MEQwMkZBNDRE
Nzk5NzdCRUQ4RkZCODBFMUM2MzdBODMxQkNGOUI5NTU3MDkxQzVDODYwRDYyMkZB
RUI3MkNFMzM1MTQ4NjU4NDVGOTcwREVGRTNEQkUzRDAyQUZFRkE5MzIwN0Y3MjU2
RDMyMDNGNUQzQkRGRDUzMEUwOUI5NUMwRDVBNENBOTE2NEI4NkI1NEY2RTIzQzQz
N0Q0MjY4OUQ5Rjg1MjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+hVKevjZDBmjLZ4fhMdsE1dCeRfLYhy1j0Q+a0kvpYcfu79Ylizy
SDExw7NEfpbP3ItTD+yP3wIXgogiFxDipUm/i6jXS56uKHltGOFgK7gCU/5QkR4T
pyMLpYKSm116AVc1hop5yPv5k7ppHStrGoJ98WMyy/4/83Ea4GzvikANkOcqYjUD
8BG4czZLaj3NLXLBzVrzFVg+MjJmuW+hph1JNzgWFqIJpeMH1FDQL6RNeZd77Y/7
gOHGN6gxvPm5VXCRxchg1iL663LOM1FIZYRflw3v49vj0Cr++pMgf3JW0yA/XTvf
1TDgm5XA1aTKkWS4a1T24jxDfUJonZ+FJwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNzP7tUZhfjUXLnGzFAqkIkXQ5Z8MB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzMzMTJlMzczMjJlMzEzMDM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNI
bDANBgkqhkiG9w0BAQsFAAOCAQEAsIgvHHTjlrtbW4CRyF6DuaSwTFAhqvRywbvT
04LmOtHyaBYKy/Gw5FGLvu69lOdIrVqsCn3FQ/nMlPaZh/S0IyYxQwgqrPUkc04X
fXqzrFiR79NOb9q1Zegd8W+WqUb8xtE5dz+8iYZMr43oCLgOy9Z5bbo4oT4aPbDl
pIsNJIRHoy8tybBIfEhpPwdGqeXSAHjXVYKMuiFWC/GPsa/0jgaqFVhDZwBnjqvs
WGAOXuwFZMZ8DBJljGqR4+2H7rvYLhl0QIAKhd0Tp2GW0fe4uFYeu1C+j9hkM8OY
Qgob9NCFdG2QJECXewyV1qPtlUKUb4M2ihL8qpYvOnV2UdqhZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org