Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa
File:                     3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          Rq0Nco+IKi6YVyfM5Cevjz8QwHppdFz2oI3Uc8W1kHg=
Subject key identifier:   DB:A1:11:9F:82:FB:0B:E7:A7:1E:F2:47:04:B2:D8:78:5F:1C:75:4B
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       654D73C8257E1A00C52797466325226C5827B8F7
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        170.238.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:73:c8:25:7e:1a:00:c5:27:97:46:63:25:22:6c:58:27:b8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:5a:14:ad:96:3a:ce:db:14:d4:52:69:08:
                    ec:ae:4c:02:6a:52:cb:9e:3f:f3:43:59:46:81:b4:
                    00:8f:27:d2:c7:bf:d1:9c:ca:b6:fe:3a:18:ef:dd:
                    9e:2a:0e:b6:64:c2:fb:26:a2:43:a5:a3:aa:f2:ea:
                    dc:8d:ef:de:06:09:8c:bc:aa:80:d2:76:5a:bd:53:
                    6a:6c:38:92:f2:47:36:a8:64:14:14:27:94:c6:6d:
                    bc:07:30:60:6b:92:66:2e:c5:ba:2e:57:7e:6e:82:
                    c1:26:bc:c6:79:bd:3c:6f:19:8a:26:e9:ba:b3:e4:
                    f2:c8:de:7e:dd:df:48:a3:ea:3b:a3:62:88:2a:0f:
                    20:01:3b:4d:d6:8d:cb:b5:d8:d6:c3:76:23:cd:51:
                    33:d6:32:ce:33:dc:a4:be:8c:46:64:01:e4:5c:8c:
                    48:3a:c9:c7:d5:6e:e5:8f:6d:a5:03:35:2d:ef:f2:
                    7e:f6:47:19:d1:c4:1d:5a:5b:fa:4a:45:cc:67:87:
                    a3:8d:6d:81:d0:d3:f7:6f:d8:c6:9e:17:20:7d:fa:
                    2c:f1:f6:09:6f:a4:df:cb:62:02:7f:6c:4c:52:e8:
                    61:e3:79:0a:ec:70:37:61:07:44:f7:0b:b3:8f:a5:
                    c6:64:46:2b:0a:93:d5:34:79:ae:f1:61:0d:83:4a:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A1:11:9F:82:FB:0B:E7:A7:1E:F2:47:04:B2:D8:78:5F:1C:75:4B
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:aa:65:af:ad:57:9b:20:71:64:31:dd:fa:74:d0:ab:45:
         c3:df:68:24:61:46:56:ed:2b:f3:7c:7c:0b:3d:9e:9b:ae:77:
         3b:7d:b5:af:39:52:60:2e:00:33:8b:3b:5d:1c:2f:93:b6:9e:
         1b:af:1b:d7:33:c7:69:bd:39:4c:bd:fe:58:37:db:81:c7:e1:
         0a:a8:68:6e:b3:c2:c1:0b:a3:e7:48:18:ce:99:3a:f4:94:42:
         a8:93:71:d6:ac:b5:78:99:9d:c5:dd:07:54:ff:cc:b2:fd:ba:
         b3:e3:6c:b3:87:6f:fc:5e:ea:8e:be:1e:3c:4a:62:e4:dd:fb:
         38:20:9c:58:df:72:29:0a:9b:a8:d0:cf:9b:5b:08:16:16:75:
         de:94:7f:a7:3f:7a:81:57:75:aa:21:79:7a:a1:59:7d:ba:9a:
         d9:7f:36:07:1c:0a:f8:32:cd:e5:c2:22:94:c2:f0:9b:4e:06:
         51:99:71:01:78:d6:c0:d6:be:ed:4d:97:f5:ff:8e:43:cd:2e:
         0b:35:d7:9a:d4:f1:7a:ea:9c:20:2b:85:a5:67:96:6b:29:70:
         45:01:c8:da:a7:1f:ef:72:27:4d:d9:84:cd:ce:d7:20:8f:e5:
         37:3c:49:b5:b5:80:4b:e2:f2:0e:90:e7:ea:27:b9:1b:82:66:
         ec:3f:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org