Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38312e3232302e302f32322d3234203d3e203238333433.roa
File:                     3137302e38312e3232302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          QNeRLaYMDrVfuDnXgYC2SMuuypk2g2iorRjuGslgzII=
Subject key identifier:   C0:F1:4F:6F:06:F2:E3:97:7F:FD:AA:A6:24:BB:A5:E5:94:1A:42:A1
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       58A6653E0C98768F81952ED1313933EB124EAA37
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38312e3232302e302f32322d3234203d3e203238333433.roa
Signing time:             Mon 26 Dec 2022 16:40:38 +0000
ROA not before:           Mon 26 Dec 2022 16:35:38 +0000
ROA not after:            Mon 25 Dec 2023 16:40:38 +0000
asID:                     28343
IP address blocks:        170.81.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:65:3e:0c:98:76:8f:81:95:2e:d1:31:39:33:eb:12:4e:aa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Dec 26 16:35:38 2022 GMT
            Not After : Dec 25 16:40:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8a:66:92:35:51:11:cd:76:f4:b6:93:27:26:
                    59:f8:d7:42:12:b8:f1:9d:68:64:0e:ed:d2:fd:f1:
                    ea:b3:70:6f:bb:1f:3d:db:22:0d:fe:64:49:4e:a8:
                    b3:56:fa:64:70:b0:4a:c1:fb:af:a0:32:e6:d0:61:
                    f2:7d:39:28:8b:be:54:a3:ac:14:a8:dc:7d:50:d7:
                    10:38:74:6c:64:1b:e2:0b:01:a5:64:d8:fa:87:0c:
                    f4:7f:94:c3:2c:fc:f7:d2:c9:4e:66:c4:29:7c:e2:
                    04:67:03:c2:f6:21:60:db:77:69:91:09:3b:c5:a9:
                    91:e5:f5:1b:82:4f:fa:e9:a4:19:00:4a:2e:76:33:
                    95:fb:51:6c:f8:b4:fe:e8:4f:a0:5e:4e:f1:37:f9:
                    14:2d:e3:b8:d2:b9:fc:d3:30:1a:51:fc:ff:07:c6:
                    61:4e:ab:6a:7c:28:8a:fc:58:a2:dc:e8:a8:e3:06:
                    26:8d:38:63:7c:9b:d5:f1:39:8f:1f:e0:4f:b5:38:
                    ed:2a:99:ad:d7:a8:54:9f:a6:16:b6:89:66:ca:2a:
                    cc:78:7d:ea:e0:56:49:4e:8d:0b:c0:92:5d:51:bf:
                    21:09:2f:f2:c6:6b:50:c1:f5:e6:fe:76:8c:b9:41:
                    d0:76:b8:b7:78:1f:10:88:cf:b0:fb:97:4e:30:d9:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:4F:6F:06:F2:E3:97:7F:FD:AA:A6:24:BB:A5:E5:94:1A:42:A1
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38312e3232302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:b4:ed:11:4c:3b:f6:17:19:af:1d:78:a5:10:59:c1:73:
         c1:e7:ec:6f:70:bc:e8:21:70:78:a6:da:02:f0:ce:26:28:c4:
         b3:6d:37:b5:7a:9d:ea:8e:c2:45:b8:91:44:01:b3:3d:b0:45:
         62:e3:73:8c:f7:76:4f:5d:f1:ee:52:48:a7:cb:cb:2a:5e:3d:
         7b:5f:89:30:9e:2c:ad:1e:bd:45:c5:18:01:d6:02:30:86:2a:
         e1:ef:e1:0c:e9:a1:19:1b:3b:49:a6:76:5b:94:a9:8c:22:f1:
         aa:ba:3c:48:19:43:5b:08:ab:5b:77:35:b9:ab:a4:3d:34:34:
         d0:92:51:30:8a:7d:36:f6:68:01:e1:ac:bc:7d:75:29:5a:aa:
         50:19:33:d7:88:8d:64:49:49:b0:ef:0b:0f:34:15:45:7c:f3:
         49:57:11:20:0b:a1:30:96:46:0e:7f:e0:52:1c:d5:32:23:4e:
         77:18:d7:30:60:88:e1:28:3a:38:f7:6d:19:ff:b7:a4:fb:e2:
         ca:ca:3b:fd:41:fe:9f:f0:34:29:53:47:1e:76:9c:48:93:5b:
         93:c4:e7:b9:53:33:47:5d:53:c7:d5:09:7c:17:cf:71:32:b3:
         6f:8a:e5:2f:3b:f3:8e:c4:24:0d:75:c8:0a:37:11:a9:ed:bb:
         63:89:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org