Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3233312e32342e302f32322d3234203d3e203238333433.roa
File:                     3137302e3233312e32342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          M91+AIrec9UnGZnR0U3gsrHSxj/kgRZoUNGRiy1E8UA=
Subject key identifier:   43:F6:9C:FF:3E:2A:CF:55:C7:79:93:E5:C6:C2:BE:45:69:47:9E:13
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1285FA46BEEF12D394466DB04F5F355B000A3954
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3233312e32342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        170.231.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:85:fa:46:be:ef:12:d3:94:46:6d:b0:4f:5f:35:5b:00:0a:39:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:67:c1:94:18:79:03:73:bb:82:90:4f:95:
                    66:3f:06:49:e1:77:0d:86:a5:ea:a5:bd:e1:7f:8e:
                    83:16:2b:34:ff:dd:23:c8:ba:12:0f:fd:81:2a:5c:
                    66:5f:39:c4:0c:03:43:93:87:a9:01:32:ea:82:4c:
                    ac:70:fd:b1:56:9f:50:a3:c5:0f:9b:b6:61:9b:fd:
                    44:3c:f8:bb:57:19:6a:b4:e5:8a:f3:0d:b6:ec:06:
                    a2:92:6e:22:5f:27:e4:15:fd:7d:31:c0:8c:c3:b5:
                    eb:11:92:24:a6:2d:6c:39:df:3f:9f:25:07:6a:28:
                    52:51:6f:48:57:e1:ee:79:81:dc:8e:05:cc:71:c3:
                    2e:31:06:7b:36:06:5b:72:51:44:b1:71:38:07:be:
                    b7:36:b0:e4:8e:c0:0e:44:de:fe:1e:46:74:48:b2:
                    c8:e8:15:20:3e:fd:32:db:28:67:b6:4a:1a:1a:a9:
                    eb:d5:3a:57:6a:1f:08:59:ee:4d:12:7d:ab:40:49:
                    bb:a4:8b:c8:6b:c9:e1:1c:ce:fb:f6:68:ae:f1:ba:
                    12:a6:b1:86:85:73:0d:cd:09:29:a9:1f:48:f5:7e:
                    b7:39:b5:49:7c:d9:e3:2b:19:bf:23:04:6e:84:6a:
                    3b:26:d9:0a:fb:1e:9d:18:eb:ef:fe:5a:01:b4:00:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F6:9C:FF:3E:2A:CF:55:C7:79:93:E5:C6:C2:BE:45:69:47:9E:13
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3233312e32342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:b7:bf:e3:70:64:4e:24:69:2c:de:32:21:ac:4e:1c:ab:
         d2:e4:36:09:8b:91:ed:b6:df:aa:99:c0:13:ec:70:6f:d4:f5:
         af:35:25:e3:3f:6b:60:10:4d:5d:d6:1f:ce:31:fe:77:53:33:
         f6:da:0d:18:6c:d0:ac:13:b7:15:a4:97:63:52:09:f1:fb:7a:
         e6:85:8b:ac:94:98:09:a8:4d:54:1b:4c:26:57:c6:a2:fa:26:
         33:42:50:45:ef:97:a9:5b:be:b7:90:89:4c:35:f6:17:a4:58:
         52:62:ed:c3:a9:6b:15:5c:42:39:14:30:1a:7c:cd:92:4d:c8:
         ab:85:aa:b8:ac:6d:24:9c:2b:5f:6e:d1:03:c7:78:75:e0:82:
         5b:fb:17:27:66:1f:be:3f:dc:72:c5:8f:9d:9f:14:e2:1a:a0:
         f1:9e:26:21:0b:59:94:f8:89:04:1e:5f:a6:ea:f6:13:db:57:
         fa:b4:ae:1e:93:34:cc:7a:bc:c1:c4:60:4d:25:17:98:a6:ff:
         8f:8b:fb:95:34:46:e7:af:02:3e:25:d4:34:11:9a:3b:35:24:
         f7:44:b6:c7:37:f0:73:c5:5b:f6:e4:0b:69:30:90:cd:f5:89:
         cf:9c:24:cb:3a:70:87:c3:76:86:0c:52:52:d0:75:3f:a5:5f:
         68:68:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org