Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e37382e3231322e302f32322d3234203d3e203238333433.roa
File:                     3137302e37382e3231322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          CF6eR4QqyRsdt3Lyg6qdgivHSlq3CvBQfU5oqtHQhh8=
Subject key identifier:   2A:6F:3B:99:97:11:8C:F5:27:B0:0A:AB:72:AE:70:C8:E1:B9:67:51
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       71EEFE4C51649FD6D3F13556CFC6B77F222D8D6E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e37382e3231322e302f32322d3234203d3e203238333433.roa
Signing time:             Tue 30 Aug 2022 16:20:39 +0000
ROA not before:           Tue 30 Aug 2022 16:15:39 +0000
ROA not after:            Tue 29 Aug 2023 16:20:39 +0000
asID:                     28343
IP address blocks:        170.78.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ee:fe:4c:51:64:9f:d6:d3:f1:35:56:cf:c6:b7:7f:22:2d:8d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Aug 30 16:15:39 2022 GMT
            Not After : Aug 29 16:20:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:31:cc:cb:7b:2e:1b:f0:59:54:6c:b6:f6:
                    07:af:45:ae:bb:eb:b3:06:5c:5e:02:22:f2:b9:23:
                    96:2c:3d:f6:41:b6:60:4e:5b:f4:c4:aa:2e:1e:70:
                    63:91:4d:1a:a0:9e:7b:03:26:c4:f1:3b:65:68:f9:
                    81:83:a6:bb:ee:c3:17:39:f9:75:33:85:02:38:7f:
                    7d:43:14:fb:48:96:e7:2d:5a:e1:ad:12:6c:62:f4:
                    91:47:68:5a:a3:9e:28:59:e3:68:93:2a:6e:70:4e:
                    af:96:2c:d5:30:7a:56:ad:e2:38:d1:fd:5e:b8:7d:
                    d9:f1:de:9d:cf:a9:cf:2f:aa:d7:97:56:f4:14:72:
                    56:25:ed:56:85:0e:02:d3:ec:5d:e0:b3:4f:cd:27:
                    97:90:b3:1e:e9:1f:c5:dd:37:93:3d:be:34:23:e0:
                    9a:79:ce:f4:8f:04:4a:3a:40:3c:77:f3:26:9e:46:
                    62:0c:22:39:44:cf:4f:ea:1c:4d:b1:bc:a5:42:a8:
                    02:41:64:64:23:97:f0:e6:2f:a8:c2:ba:f4:83:cd:
                    0d:5c:a3:83:b4:a1:66:84:77:5f:2f:1c:cb:6f:69:
                    00:0d:3c:03:f3:7f:a2:19:cb:0e:09:cc:f1:6f:ef:
                    03:25:ba:51:ce:cb:a5:32:31:a6:1c:21:0c:ac:1b:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:3B:99:97:11:8C:F5:27:B0:0A:AB:72:AE:70:C8:E1:B9:67:51
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e37382e3231322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:38:d9:b8:35:3d:d0:b9:0e:4f:c3:53:88:46:61:2b:9d:
         e2:dc:0b:f1:d2:e6:5f:d5:73:8c:2a:33:69:7e:59:d3:f8:cb:
         10:66:ea:f4:e7:1a:5c:16:db:49:5f:5a:e3:d0:34:c7:ef:fb:
         4c:11:f2:6c:ee:73:4f:40:1c:82:b9:05:40:94:a0:d1:e0:77:
         ef:e3:3b:ae:00:e5:82:92:fb:00:f7:08:fc:ce:58:3d:92:15:
         cf:62:bf:f9:6c:47:b4:bc:7a:a0:e5:26:f1:b3:2d:fa:da:6a:
         d4:76:02:fd:df:ed:d6:39:cf:bb:6d:0c:03:ff:ea:90:41:36:
         4d:aa:16:8d:06:91:f7:2e:9a:cc:b7:dd:65:cf:0b:be:74:c0:
         33:3a:3e:98:02:5e:6a:05:ca:1b:9a:7a:20:65:c4:08:77:37:
         7c:ef:7a:8a:5d:43:e5:a3:c4:c5:64:ba:53:ef:fa:07:9e:5c:
         e5:3a:47:12:45:48:73:7f:7c:4a:39:ae:4d:b7:ae:5b:88:6f:
         31:01:5e:95:34:ed:53:7b:05:e2:1c:48:b8:3a:40:aa:05:f2:
         52:aa:16:b9:00:be:63:8b:04:6f:a5:9b:ba:3a:81:7e:ed:59:
         39:46:00:a3:3b:e9:e4:31:6b:88:f5:38:b2:8a:a0:57:db:c9:
         79:a7:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org