Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3235342e3232302e302f32322d3234203d3e203238333433.roa
File:                     3137302e3235342e3232302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          7lzz/C6+UVd7Ozst6GKZiAXdy2FPyp+rQ5JtVFWfl3Q=
Subject key identifier:   A3:34:BF:BA:3E:37:B4:ED:6F:C0:6F:24:FD:74:F4:5A:AE:53:DF:35
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       7E814ADE2000FE3DFB1757F82512A84DF2646071
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3235342e3232302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        170.254.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:81:4a:de:20:00:fe:3d:fb:17:57:f8:25:12:a8:4d:f2:64:60:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:db:a9:60:c8:7c:67:cf:44:dc:ad:7a:b3:
                    4c:5c:fb:6d:10:b2:2e:18:81:6f:f5:68:6c:58:27:
                    88:bf:52:f0:8d:af:a4:11:17:ca:24:79:fd:aa:c9:
                    63:65:4f:f8:f3:ba:79:18:e5:18:c0:a6:68:a2:eb:
                    99:e5:0e:84:d8:71:31:ef:22:4a:03:e3:d9:5c:cb:
                    4d:a0:08:56:b9:9b:1e:de:8f:ef:6f:2e:aa:2f:5c:
                    f7:72:36:fe:43:ce:a7:c1:39:4c:bf:88:fd:1b:3e:
                    c4:75:04:f0:40:ea:ef:6f:ef:7f:d1:d1:5c:f1:0f:
                    73:c0:f2:d7:ce:08:db:84:a6:cd:c7:27:16:7c:52:
                    94:13:34:b8:74:d7:83:d1:1b:a7:9e:c6:05:8c:0a:
                    00:eb:88:41:15:ef:88:d1:2a:e1:b5:f8:fa:5a:cc:
                    22:f4:95:29:77:6a:62:e3:22:1b:9b:bd:6f:93:5f:
                    f7:f6:85:21:8c:92:52:26:5e:5b:4a:2e:56:35:c0:
                    21:43:4b:ba:50:4a:74:2f:74:50:9d:68:33:fe:b5:
                    90:b3:ab:c4:cc:4c:f3:ea:2e:39:3a:11:f1:70:98:
                    7d:73:fe:17:c1:2d:17:10:0a:a3:55:65:d6:e7:ba:
                    f5:61:3e:bd:d6:b9:18:87:47:82:21:72:0f:66:10:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:34:BF:BA:3E:37:B4:ED:6F:C0:6F:24:FD:74:F4:5A:AE:53:DF:35
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e3235342e3232302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:3b:0d:4a:aa:ed:df:99:f4:3b:05:01:4e:92:11:ef:6c:
         dd:ec:b6:6c:70:4c:38:12:2c:a5:b4:d4:a2:ff:fa:c1:41:22:
         27:a0:88:9f:93:49:69:cf:99:02:b7:b5:80:e8:c9:91:ae:14:
         00:b1:12:fa:ea:6d:6c:ad:34:5b:83:3b:50:c2:4d:5a:0e:96:
         0a:65:54:8d:21:73:0f:84:42:9f:52:04:2d:d1:a6:c1:9c:88:
         0a:ae:de:3b:3a:ad:fb:b0:03:e8:69:e0:dd:65:fd:ac:31:64:
         3e:ba:85:fe:a8:c8:a3:5f:36:9d:97:7e:5b:4f:e9:f7:ad:e0:
         73:87:bd:d9:eb:99:11:a8:b9:4e:56:30:73:e1:66:05:37:3b:
         42:f7:fa:53:7f:57:6f:26:7e:df:11:07:82:c6:90:cc:b0:73:
         f8:54:70:b5:eb:03:33:1d:51:28:a8:61:f7:2a:8d:ff:ec:af:
         39:61:9a:02:29:ae:cf:a7:21:73:9a:10:38:7e:1d:39:0b:9b:
         d6:e2:c0:b3:8e:e9:6e:77:5f:73:6d:09:52:59:af:17:eb:bf:
         28:e2:c6:22:8c:45:89:9f:65:91:55:e1:94:7b:1e:4c:2b:84:
         a2:e6:5f:52:9f:18:48:24:b0:0d:75:cf:e9:aa:a0:6b:51:2b:
         5e:42:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org