Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3130312e39362e302f31392d3234203d3e203238333433.roa
File:                     3137372e3130312e39362e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          yvf9KyStZSotx/IoPJnBwtBdQ/1bJfVJmFuuSihOiDA=
Subject key identifier:   D1:C9:D8:05:3E:7B:48:E1:3F:E7:81:30:4B:73:71:5E:1B:C3:0F:CA
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       70D5F8D2EA032F3AC36D4DF8CF98FA37E916BF44
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3130312e39362e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        177.101.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d5:f8:d2:ea:03:2f:3a:c3:6d:4d:f8:cf:98:fa:37:e9:16:bf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:46:81:02:6b:1a:5b:31:3c:a7:26:ad:f1:3f:
                    f7:0a:80:c1:4d:8d:56:d0:41:0e:e1:90:3d:8d:d3:
                    2b:36:ec:e9:ac:09:08:c6:3b:4e:a5:7c:1b:77:f2:
                    00:c0:11:8d:82:d9:fc:61:aa:1e:45:06:fd:6d:95:
                    31:65:9b:67:cb:36:cf:b3:42:9d:fe:d0:57:17:ff:
                    be:c8:7b:a8:44:2d:5f:7c:f3:e0:16:cc:10:b4:6a:
                    30:7f:56:fe:5a:3d:13:73:b0:40:61:7f:7f:47:33:
                    6f:4a:f6:d1:2d:4c:19:c8:3c:2c:6a:53:3e:b0:61:
                    61:f7:ca:14:28:9d:c5:fd:e7:08:ad:e7:b5:ab:fa:
                    34:42:2e:54:a4:63:21:71:3a:54:7f:83:f1:0e:40:
                    4f:ba:25:c6:95:69:ea:c2:e8:0f:06:72:46:a3:35:
                    82:69:64:ce:93:76:ef:30:ad:d7:b3:1c:8a:4c:d9:
                    69:94:a1:8d:7e:f4:f7:fd:93:dd:10:12:13:79:38:
                    b3:39:db:f7:6f:9f:57:f4:c7:d9:59:23:97:37:36:
                    00:11:7d:1d:15:4e:ec:e9:dd:c6:23:7f:20:6b:ff:
                    11:02:a5:77:61:a5:c8:dc:5d:90:7e:93:53:a7:fc:
                    de:06:da:4f:ca:20:24:3c:e6:28:a1:10:f6:60:20:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C9:D8:05:3E:7B:48:E1:3F:E7:81:30:4B:73:71:5E:1B:C3:0F:CA
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3130312e39362e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:3b:93:a1:5f:17:f4:1e:23:ad:99:19:4b:e7:1e:99:ca:
         73:5f:3c:be:a5:34:2d:33:9a:06:f9:f3:90:11:65:f4:35:fa:
         2f:44:84:0d:da:03:c6:26:19:22:0e:60:7a:a7:4c:b5:bf:dd:
         84:d9:37:aa:f8:99:b5:58:a2:74:61:22:91:2a:a6:c5:5f:7e:
         4c:f4:d0:c9:96:5b:b5:2a:a3:13:c4:df:82:49:14:ea:31:79:
         1c:f9:ff:1e:67:22:1d:5c:ee:19:dc:c5:66:49:6e:b6:66:bb:
         c6:f9:1f:6c:6a:fd:11:3c:33:50:d8:48:f1:56:22:f3:69:e5:
         8d:65:93:f6:53:66:78:12:69:c5:45:66:bb:f3:9d:61:ad:f9:
         e2:1e:50:46:28:30:aa:a9:ce:23:68:dc:13:88:77:ea:3f:b4:
         ec:df:e6:d4:ba:70:e0:41:c2:15:07:94:26:71:0b:0c:f0:5f:
         01:a6:47:de:12:03:4e:be:8b:89:28:d6:84:3a:61:20:5c:b6:
         b1:45:07:c3:77:4d:da:7e:91:af:d8:2f:67:74:6a:f0:12:3f:
         fc:9e:2c:20:bc:67:15:aa:aa:1c:d5:27:1a:90:53:44:1e:65:
         7c:b5:43:ae:d4:a2:b4:75:86:a1:64:4c:37:05:70:69:a9:04:
         b1:1a:c5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org