Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38322e3137362e302f32322d3234203d3e203238333433.roa
File:                     3137302e38322e3137362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          akZ38Sm22AXWYKHm9wbQ1E15rBR6JpLTPq3AsZVwv1A=
Subject key identifier:   26:BB:71:32:16:E8:DD:C2:8F:5B:72:BD:5F:10:C0:EA:92:E4:97:C8
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3AA8C7C2CF462781038E35DAD10E7A0357D50B63
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38322e3137362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        170.82.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a8:c7:c2:cf:46:27:81:03:8e:35:da:d1:0e:7a:03:57:d5:0b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:ca:fa:88:46:bd:0b:8d:45:25:f9:37:13:
                    5a:ef:58:ef:6a:d4:e0:aa:4a:c5:82:ed:cd:90:7f:
                    8c:bb:ec:9a:37:52:8e:04:70:2f:91:b1:ce:cf:6f:
                    9c:45:a2:ce:4e:bf:0c:ee:81:05:59:2c:b0:fd:9a:
                    c0:15:a1:67:c1:2d:30:d1:24:bb:ca:20:b4:df:14:
                    c6:d1:f5:b4:e1:e6:ac:d5:72:e2:f6:bb:91:bb:af:
                    6c:a6:70:35:2c:16:c0:68:98:dc:79:42:2c:31:3e:
                    d0:41:3c:47:da:70:03:a5:84:71:62:af:3c:2f:20:
                    fe:50:5f:be:28:c7:c6:01:fb:f6:15:12:a3:71:5a:
                    97:a9:fc:ea:45:d9:ec:7a:04:cc:61:e9:aa:18:dc:
                    3d:2a:c2:a5:0f:5c:e1:b9:c7:0d:2d:25:e0:4c:b5:
                    80:69:bf:86:a7:4c:c8:a5:c3:0a:7c:dc:73:f6:2e:
                    d4:90:23:39:7e:62:87:29:99:b7:46:59:d9:ae:2c:
                    e6:07:b7:85:47:09:0d:35:71:6b:e6:60:7e:63:40:
                    d2:c1:79:4b:dc:0c:c7:b5:50:43:62:f9:9d:59:38:
                    ef:48:d3:a7:0d:c8:de:1b:91:44:64:8a:55:9b:9b:
                    08:21:4a:39:9a:92:4c:97:43:18:18:2f:ab:e1:a7:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:71:32:16:E8:DD:C2:8F:5B:72:BD:5F:10:C0:EA:92:E4:97:C8
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38322e3137362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:84:26:8c:14:11:4a:80:ed:a1:03:70:ae:c7:e5:16:84:be:
         f2:6c:00:6e:91:65:cd:8d:55:4d:48:2b:18:5c:44:7c:a0:45:
         82:70:8d:9f:ac:d1:79:74:ed:19:66:bb:9e:38:50:8f:31:94:
         8c:4c:9a:1a:21:95:82:10:54:0a:e4:b6:38:12:3d:a2:c9:73:
         36:44:39:c1:e3:4d:b3:3b:06:ee:7a:59:94:04:5c:86:a3:58:
         62:06:f7:2b:6c:fa:82:02:e3:3f:e5:78:b0:f1:30:18:fa:7b:
         68:1b:ab:3d:f5:f6:44:3e:1d:01:58:bf:d0:11:cd:f7:b3:3e:
         8c:a8:4d:49:01:9a:4d:15:40:9f:ef:ad:e0:5e:7c:7c:95:e4:
         01:e3:40:4e:16:cb:6a:6d:b7:b8:86:a3:91:46:af:a6:3f:89:
         43:fc:75:92:52:26:e0:33:ec:ef:76:e0:0e:db:a0:d4:e6:d7:
         f6:0f:91:d6:ee:18:37:bb:a4:e4:b8:ca:66:6d:25:3f:cf:b0:
         74:c6:70:45:0d:4b:c7:6a:d7:90:a0:48:ed:ab:75:55:83:fd:
         09:da:8d:51:5b:2e:5e:bc:19:62:e9:dd:07:b2:c3:9a:99:14:
         5a:6a:bf:dc:a8:51:fb:65:49:77:ce:0b:f7:e5:13:76:66:9c:
         26:78:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org