Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa
File:                     3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          6BPrZQ1+LsRsCXlqltczPEH4Fgm08so95I8Oub3+EUM=
Subject key identifier:   AF:69:BD:07:2C:80:DB:FF:CE:E4:0A:4E:26:29:97:09:9D:0D:A8:C1
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       6C8C479523063BF6CDCC9C36C5709D420F6436DC
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        167.250.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8c:47:95:23:06:3b:f6:cd:cc:9c:36:c5:70:9d:42:0f:64:36:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:bd:35:dd:da:6e:41:67:f1:8c:ef:2b:a0:
                    de:4f:9f:44:b6:19:05:d4:a8:9a:f1:f0:3c:91:a2:
                    64:7f:2d:ec:40:58:cf:4c:c9:9e:a0:aa:d6:f5:8d:
                    a9:50:16:d5:29:34:65:d8:53:df:b1:b1:cf:6a:be:
                    11:d6:34:ed:ca:6d:b0:44:c5:96:18:59:1a:0e:5c:
                    f0:73:44:d3:ba:06:eb:4a:90:f1:6e:59:1a:98:0d:
                    12:3b:1f:ef:97:22:72:cb:c7:20:58:8d:e5:8e:d3:
                    a9:5d:7b:3b:26:cb:db:30:06:c7:c6:13:a3:43:94:
                    b4:dc:8c:e5:7b:5e:22:68:8f:bd:b9:63:d8:7d:46:
                    1c:60:31:c8:fe:b3:6a:50:ab:a2:67:8f:d8:14:d7:
                    f4:3e:5c:9a:c3:ed:0d:8d:5f:4d:4f:c1:cd:a2:9f:
                    2c:0c:75:bb:fa:31:dc:7d:9f:01:e7:ca:93:6d:96:
                    fd:72:12:31:7f:05:36:68:38:22:88:98:43:13:10:
                    52:56:7a:ce:65:c8:35:71:a8:76:f2:9b:f1:c9:b6:
                    60:59:6a:11:59:77:9c:85:16:73:24:2a:e5:96:61:
                    85:ba:bb:0a:e1:53:b0:4a:c2:e7:1f:43:2b:60:c9:
                    28:a4:ea:9f:02:f4:60:46:23:4f:51:89:97:cd:0e:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:69:BD:07:2C:80:DB:FF:CE:E4:0A:4E:26:29:97:09:9D:0D:A8:C1
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:61:d8:3c:05:6e:74:e0:78:34:76:20:db:03:32:24:04:
         59:a4:af:81:f5:4a:4f:ee:5a:d3:3c:e2:0f:a4:e9:2e:99:59:
         53:e2:40:3f:b3:93:e4:16:2f:95:cd:d6:5b:d4:55:97:42:e8:
         6f:4c:28:de:7f:f6:7e:52:22:54:93:79:0a:6f:aa:66:c4:1a:
         08:05:17:64:06:21:46:85:42:13:02:03:48:a4:03:c1:9d:ae:
         a3:92:06:1e:72:70:34:5c:26:3f:e3:6b:9a:98:0c:f8:16:ba:
         50:72:62:20:6b:59:1a:da:37:90:3d:b3:a5:38:37:21:2f:62:
         c6:ed:3b:77:f3:8e:ac:c7:d6:63:b4:ee:45:ba:63:7f:d0:65:
         b1:63:53:8a:6b:54:cc:4b:eb:2a:3b:4e:41:93:b6:60:eb:13:
         a5:a2:6f:3e:7f:8e:84:82:4d:45:0c:28:5a:ef:06:c4:27:68:
         8a:99:51:99:7c:af:3c:62:44:f7:ad:ea:23:fc:c1:98:03:ca:
         a6:ca:13:1e:8d:07:ff:8c:db:51:a8:75:12:c6:dd:7f:2b:12:
         0c:c1:3c:90:02:0d:a2:68:d2:6e:70:8b:52:bb:43:09:a3:f5:
         c6:b8:31:12:66:c6:69:6e:7f:37:67:4d:07:22:f3:0d:85:de:
         41:52:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org