Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e39362e302f32322d3234203d3e203238333433.roa
File:                     3134332e3230382e39362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          2spR4sQySHzna/h0K8opnxWpz3m304oPGkx+1NE/cNY=
Subject key identifier:   F1:0A:73:CA:F2:92:4C:CA:DD:6C:B4:17:E3:FD:5E:59:6D:31:0F:B1
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       54CCF012E9D303A8543A437CBA90F071B8DAD434
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e39362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        143.208.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cc:f0:12:e9:d3:03:a8:54:3a:43:7c:ba:90:f0:71:b8:da:d4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:99:6c:2c:48:85:03:b6:bf:0b:df:55:e8:
                    b1:b0:b9:0c:ef:5b:7b:21:46:03:ea:09:c7:44:3c:
                    c8:6d:15:83:c7:43:c0:4c:82:8d:93:f3:27:24:8e:
                    16:df:ee:69:be:46:3b:e5:0f:29:4d:d1:cf:cb:17:
                    47:0b:ae:40:84:8d:6c:32:81:de:41:9b:a1:4b:04:
                    84:91:f5:2d:90:e5:a5:48:2c:ed:0d:b7:ba:0f:12:
                    6f:a8:8a:26:6e:e2:9d:1c:5d:ce:b7:0a:d4:32:5a:
                    f3:77:e5:4e:d2:c5:4f:d8:e3:78:d5:6e:11:c4:5f:
                    af:70:e5:14:4e:49:f9:3c:bb:07:e5:8d:e1:6f:e8:
                    42:ec:56:56:ed:d1:65:a9:17:27:d1:7e:1b:5d:86:
                    00:dc:69:0d:13:11:ea:7f:3f:4c:98:f1:8b:b7:0d:
                    e6:a6:97:5f:61:83:41:7c:ad:7a:88:f1:3e:1e:4b:
                    fc:2d:42:0a:25:a5:2d:8b:52:5c:1c:db:57:33:d6:
                    f0:c7:5f:d1:34:64:25:da:bd:fd:50:23:0e:45:d3:
                    69:09:b8:44:2b:b0:7b:86:c2:28:ed:80:7f:43:40:
                    f2:0d:15:d9:44:0f:55:4c:8c:ee:80:6a:24:b2:a7:
                    07:1b:87:6e:e7:df:65:a9:91:3b:96:9f:11:10:b8:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:73:CA:F2:92:4C:CA:DD:6C:B4:17:E3:FD:5E:59:6D:31:0F:B1
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e39362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:ae:7a:21:cb:3e:ff:d5:5c:38:10:2f:d0:b6:e4:16:30:
         6f:e5:a5:b8:4f:fb:d0:5f:cc:38:7f:88:19:d3:72:12:b6:21:
         e0:67:a3:0f:4e:81:e8:75:c2:de:31:01:0c:6f:90:ad:cd:39:
         52:23:ef:8f:ba:33:95:45:0b:83:51:0a:1f:1d:b2:b8:78:85:
         3b:f3:7f:2e:ef:2a:de:11:d5:30:03:ef:12:ad:5c:31:71:0c:
         07:d2:4b:15:fd:d9:3c:47:71:06:c0:6f:a0:0e:bc:1e:25:6a:
         9b:cb:e9:17:06:58:c4:d0:23:9b:68:74:d3:08:17:38:a8:4e:
         81:0e:64:e5:70:dd:98:a5:b0:46:89:aa:f5:4e:53:1d:73:42:
         6b:50:e2:18:e6:d3:14:67:c8:02:58:33:35:d6:c4:fa:d7:f8:
         04:95:62:e3:5a:77:46:4c:b2:f4:89:24:75:0c:69:de:12:78:
         9e:98:77:89:85:79:31:86:28:e3:8a:04:b4:ea:ae:46:67:b5:
         e2:89:d8:95:4c:bb:66:f2:83:31:48:71:12:34:ed:b3:8d:23:
         18:52:95:fc:35:ea:52:38:df:f3:02:ef:21:06:68:1f:73:33:
         8b:0e:bf:a9:ee:b4:0e:e7:a9:71:f2:77:e0:f6:12:8c:28:4f:
         73:b5:9b:e3
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUVMzwEunTA6hUOkN8upDwcbja1DQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjBaFw0yMzA0MjcxMzI5MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREFCMTk5NkMyQzQ4ODUwM0I2
QkYwQkRGNTVFOEIxQjBCOTBDRUY1QjdCMjE0NjAzRUEwOUM3NDQzQ0M4NkQxNTgz
Qzc0M0MwNEM4MjhEOTNGMzI3MjQ4RTE2REZFRTY5QkU0NjNCRTUwRjI5NEREMUNG
Q0IxNzQ3MEJBRTQwODQ4RDZDMzI4MURFNDE5QkExNEIwNDg0OTFGNTJEOTBFNUE1
NDgyQ0VEMERCN0JBMEYxMjZGQTg4QTI2NkVFMjlEMUM1RENFQjcwQUQ0MzI1QUYz
NzdFNTRFRDJDNTRGRDhFMzc4RDU2RTExQzQ1RkFGNzBFNTE0NEU0OUY5M0NCQjA3
RTU4REUxNkZFODQyRUM1NjU2RUREMTY1QTkxNzI3RDE3RTFCNUQ4NjAwREM2OTBE
MTMxMUVBN0YzRjRDOThGMThCQjcwREU2QTY5NzVGNjE4MzQxN0NBRDdBODhGMTNF
MUU0QkZDMkQ0MjBBMjVBNTJEOEI1MjVDMUNEQjU3MzNENkYwQzc1RkQxMzQ2NDI1
REFCREZENTAyMzBFNDVEMzY5MDlCODQ0MkJCMDdCODZDMjI4RUQ4MDdGNDM0MEYy
MEQxNUQ5NDQwRjU1NEM4Q0VFODA2QTI0QjJBNzA3MUI4NzZFRTdERjY1QTk5MTNC
OTY5RjExMTBCODM1NkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2rGZbCxIhQO2vwvfVeixsLkM71t7IUYD6gnHRDzIbRWDx0PATIKN
k/MnJI4W3+5pvkY75Q8pTdHPyxdHC65AhI1sMoHeQZuhSwSEkfUtkOWlSCztDbe6
DxJvqIombuKdHF3OtwrUMlrzd+VO0sVP2ON41W4RxF+vcOUUTkn5PLsH5Y3hb+hC
7FZW7dFlqRcn0X4bXYYA3GkNExHqfz9MmPGLtw3mppdfYYNBfK16iPE+Hkv8LUIK
JaUti1JcHNtXM9bwx1/RNGQl2r39UCMORdNpCbhEK7B7hsIo7YB/Q0DyDRXZRA9V
TIzugGoksqcHG4du599lqZE7lp8RELg1awIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPEKc8rykkzK3Wy0F+P9XlltMQ+xMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzQzMzJlMzIzMDM4MmUzOTM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/Q
YDANBgkqhkiG9w0BAQsFAAOCAQEACIyueiHLPv/VXDgQL9C25BYwb+WluE/70F/M
OH+IGdNyErYh4GejD06B6HXC3jEBDG+Qrc05UiPvj7ozlUULg1EKHx2yuHiFO/N/
Lu8q3hHVMAPvEq1cMXEMB9JLFf3ZPEdxBsBvoA68HiVqm8vpFwZYxNAjm2h00wgX
OKhOgQ5k5XDdmKWwRomq9U5THXNCa1DiGObTFGfIAlgzNdbE+tf4BJVi41p3Rkyy
9IkkdQxp3hJ4nph3iYV5MYYo44oEtOquRme14onYlUy7ZvKDMUhxEjTts40jGFKV
/DXqUjjf8wLvIQZoH3Mziw6/qe60DuepcfJ34PYSjChPc7Wb4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org