Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38342e3132302e302f32322d3234203d3e203238333433.roa
File:                     3137302e38342e3132302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          lvhScUJVBZCcI3PP0FdtDxRfK1vj23G8eULf0gtnFCY=
Subject key identifier:   81:E8:E1:90:A1:D9:4F:AD:9F:95:24:17:A1:89:0E:76:E3:A4:E7:6E
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       4783145F5BD486E8B3C858310E1E2A48A100D8A8
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38342e3132302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        170.84.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:14:5f:5b:d4:86:e8:b3:c8:58:31:0e:1e:2a:48:a1:00:d8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:da:dc:61:3a:72:c5:84:35:ea:b6:1f:c5:
                    37:3d:90:4f:30:b0:72:c4:8f:7f:b8:28:aa:46:1d:
                    3d:11:84:b4:79:3c:0e:e1:19:63:f9:c1:a8:07:30:
                    f3:b2:9e:63:dc:24:b4:e8:37:d7:ce:6e:11:16:c6:
                    74:ec:0f:87:1b:04:4c:c5:24:28:a7:06:28:9f:ef:
                    37:18:da:e0:59:28:a8:b1:02:bf:d8:a4:e5:da:85:
                    e0:df:98:fb:85:1e:bc:7e:db:7f:92:65:a2:6b:f0:
                    91:a7:c9:53:1e:7f:30:42:d4:7f:ec:c8:83:ae:22:
                    11:9f:76:eb:66:90:df:46:51:fc:02:cf:9c:c5:39:
                    4c:46:6c:33:c6:2f:f4:6f:f6:04:7b:5b:75:cd:b0:
                    c0:37:c7:34:57:fd:e9:af:36:3b:f3:7b:44:3d:64:
                    18:53:76:15:c4:d5:f0:82:3c:d2:7b:f7:ac:3b:5c:
                    c0:36:0e:df:6a:da:af:6d:6f:95:9d:04:e0:08:6e:
                    16:56:96:d9:7c:bf:79:f2:68:9b:e4:f0:20:f4:9b:
                    57:ce:b2:fa:ae:da:c8:c8:d9:8d:f0:20:22:d9:92:
                    30:0b:ce:0f:00:a7:ee:e8:79:08:ae:6d:15:fd:70:
                    b9:98:49:8d:10:fa:3b:e2:d1:e0:df:9c:58:70:0f:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:E1:90:A1:D9:4F:AD:9F:95:24:17:A1:89:0E:76:E3:A4:E7:6E
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e38342e3132302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:5e:32:63:b5:c0:02:1e:51:95:bd:1c:51:9a:aa:fc:d9:69:
         7c:9a:22:38:1d:5d:78:51:b8:15:bf:b5:7e:12:a8:b9:1a:d3:
         b3:cc:3a:8a:a3:2e:df:9d:94:b8:76:8f:75:33:df:8f:67:21:
         c0:4a:33:fc:33:a8:d9:df:47:cf:f4:cd:a4:45:ae:f5:f0:4a:
         26:0c:1e:15:61:3a:07:5f:ff:87:da:9a:3d:fc:8b:19:ed:ec:
         5e:23:df:45:c2:77:0a:37:ac:9b:7f:1d:f0:31:c2:4b:82:9e:
         bd:ee:a7:b6:d3:9b:16:73:72:4c:15:ab:9a:9e:9a:6f:a4:f3:
         ac:54:4b:67:9c:a8:34:6c:58:8c:d3:9a:0b:18:97:f7:fd:f9:
         28:96:91:fa:1d:c2:0f:a1:01:7f:08:e8:7d:92:fe:c0:11:b6:
         cf:23:a5:7f:d2:87:d6:bc:16:db:30:81:91:3f:be:37:bf:e3:
         00:57:96:36:28:cc:77:7d:c2:bb:8e:84:ff:70:8f:dc:87:20:
         a6:18:83:10:53:22:92:ab:5f:87:ee:91:49:13:4b:d9:a1:f1:
         02:41:81:58:4d:8c:97:e5:60:2f:64:a8:d3:50:e3:25:8a:29:
         12:72:f4:17:ab:14:9f:ba:41:bf:d8:ad:e1:36:36:a8:36:71:
         e2:0e:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org