Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3130342e302e302f32302d3234203d3e203238333433.roa
File:                     3137372e3130342e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          GefwtBYKHK/iKRgeZ00Ue+ERTXIS78uFfIGuurpBj9w=
Subject key identifier:   0A:40:19:16:F5:91:BF:06:7C:E3:84:0B:93:0E:9E:E3:7B:04:05:6F
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3F41870CC5189DA8DABBF24356FCF3DCEE75C9B5
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3130342e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        177.104.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:87:0c:c5:18:9d:a8:da:bb:f2:43:56:fc:f3:dc:ee:75:c9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:42:a2:f5:f4:cd:d9:6c:1f:b2:fe:21:b8:
                    3e:a0:57:76:41:b2:3b:1e:1d:63:f7:9f:73:eb:36:
                    66:4f:35:51:71:6e:49:71:2e:63:0d:11:0c:c2:da:
                    58:d6:77:76:35:8d:c3:d9:78:1b:38:f9:f3:d8:5b:
                    e5:9b:c2:83:32:28:6e:b8:a1:3b:de:36:b0:6d:2a:
                    02:95:d3:e3:b9:7f:82:33:15:65:f5:7e:6b:67:46:
                    25:3b:9a:92:af:0f:0d:9a:3a:a2:0e:1c:99:fe:3d:
                    4e:fc:34:51:fb:79:45:fd:6b:bf:01:b6:e5:d3:ee:
                    c5:3d:bf:ee:12:a8:bc:f5:c2:ca:40:5e:f7:97:1a:
                    f2:8a:66:45:9f:08:46:81:e3:c1:5d:c1:b8:82:4b:
                    f4:b3:e2:bd:a2:e8:ca:c8:1a:63:7e:5f:7b:da:e8:
                    a1:13:47:a3:38:da:24:2d:97:49:e9:af:a4:ff:a9:
                    23:0d:36:27:e4:bc:bc:97:23:cf:8e:ff:0b:8d:82:
                    77:87:f5:fd:1c:56:d6:ed:24:47:fa:62:b1:d4:97:
                    21:35:84:fa:1b:fc:f9:2f:1c:1c:a0:cb:ea:c4:a5:
                    87:1b:4b:09:0e:3d:1d:ed:3b:1c:07:66:15:62:ff:
                    ad:b9:d3:5a:41:5e:61:e2:a3:c7:9c:38:cb:59:a9:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:19:16:F5:91:BF:06:7C:E3:84:0B:93:0E:9E:E3:7B:04:05:6F
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3130342e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:c8:a8:e5:dd:cc:50:1a:af:63:7e:8a:36:9e:e8:6e:9a:
         6b:20:e1:9a:f5:bf:3e:26:47:92:c8:d8:64:fc:e1:bc:2b:94:
         39:20:4b:d8:7c:17:50:5d:6d:51:b7:89:b0:df:76:82:bb:00:
         99:23:63:70:02:7c:62:0a:98:7a:c8:44:90:a8:83:8d:cb:5c:
         71:e7:a6:72:35:34:e6:fe:19:90:3c:9a:fc:ab:dd:b0:21:14:
         2d:56:f5:1a:1a:3b:15:0c:03:65:7b:07:7d:b3:92:1b:ee:b7:
         3b:58:a3:57:0c:ed:32:cf:03:bb:95:91:7c:68:d4:f6:96:0e:
         82:d0:41:67:e3:fc:82:73:c7:f3:71:9e:65:20:01:b6:e8:53:
         c7:8c:63:a0:37:56:68:4c:3a:8b:9c:fe:5e:31:e8:aa:8d:55:
         0e:59:2e:fe:d0:43:fa:dc:b2:5f:bb:43:65:c0:00:35:21:13:
         9d:04:e8:cc:76:b5:e5:a2:bf:de:8a:6f:8b:06:4d:c6:f5:57:
         ab:6c:e2:0d:e4:ae:a8:63:cd:19:cb:3b:c8:aa:7a:6a:32:3f:
         05:67:22:02:d6:f7:68:78:d6:cd:17:79:c2:ac:7e:5f:9e:49:
         fa:90:52:7f:f7:95:01:77:4b:7a:0c:56:1d:d1:80:95:a0:3c:
         9d:0e:1d:59
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUP0GHDMUYnajau/JDVvzz3O51ybUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MTlaFw0yMzA0MjcxMzI5MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZCRDQyQTJGNUY0Q0REOTZD
MUZCMkZFMjFCODNFQTA1Nzc2NDFCMjNCMUUxRDYzRjc5RjczRUIzNjY2NEYzNTUx
NzE2RTQ5NzEyRTYzMEQxMTBDQzJEQTU4RDY3Nzc2MzU4REMzRDk3ODFCMzhGOUYz
RDg1QkU1OUJDMjgzMzIyODZFQjhBMTNCREUzNkIwNkQyQTAyOTVEM0UzQjk3Rjgy
MzMxNTY1RjU3RTZCNjc0NjI1M0I5QTkyQUYwRjBEOUEzQUEyMEUxQzk5RkUzRDRF
RkMzNDUxRkI3OTQ1RkQ2QkJGMDFCNkU1RDNFRUM1M0RCRkVFMTJBOEJDRjVDMkNB
NDA1RUY3OTcxQUYyOEE2NjQ1OUYwODQ2ODFFM0MxNURDMUI4ODI0QkY0QjNFMkJE
QTJFOENBQzgxQTYzN0U1RjdCREFFOEExMTM0N0EzMzhEQTI0MkQ5NzQ5RTlBRkE0
RkZBOTIzMEQzNjI3RTRCQ0JDOTcyM0NGOEVGRjBCOEQ4Mjc3ODdGNUZEMUM1NkQ2
RUQyNDQ3RkE2MkIxRDQ5NzIxMzU4NEZBMUJGQ0Y5MkYxQzFDQTBDQkVBQzRBNTg3
MUI0QjA5MEUzRDFERUQzQjFDMDc2NjE1NjJGRkFEQjlEMzVBNDE1RTYxRTJBM0M3
OUMzOENCNTlBOTNBRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr71CovX0zdlsH7L+Ibg+oFd2QbI7Hh1j959z6zZmTzVRcW5JcS5j
DREMwtpY1nd2NY3D2XgbOPnz2Fvlm8KDMihuuKE73jawbSoCldPjuX+CMxVl9X5r
Z0YlO5qSrw8NmjqiDhyZ/j1O/DRR+3lF/Wu/Abbl0+7FPb/uEqi89cLKQF73lxry
imZFnwhGgePBXcG4gkv0s+K9oujKyBpjfl972uihE0ejONokLZdJ6a+k/6kjDTYn
5Ly8lyPPjv8LjYJ3h/X9HFbW7SRH+mKx1JchNYT6G/z5LxwcoMvqxKWHG0sJDj0d
7TscB2YVYv+tudNaQV5h4qPHnDjLWak61QIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FApAGRb1kb8GfOOEC5MOnuN7BAVvMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzEzMDM0MmUzMDJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMzM0MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASxaAAw
DQYJKoZIhvcNAQELBQADggEBAK7XyKjl3cxQGq9jfoo2nuhummsg4Zr1vz4mR5LI
2GT84bwrlDkgS9h8F1BdbVG3ibDfdoK7AJkjY3ACfGIKmHrIRJCog43LXHHnpnI1
NOb+GZA8mvyr3bAhFC1W9RoaOxUMA2V7B32zkhvutztYo1cM7TLPA7uVkXxo1PaW
DoLQQWfj/IJzx/NxnmUgAbboU8eMY6A3VmhMOouc/l4x6KqNVQ5ZLv7QQ/rcsl+7
Q2XAADUhE50E6Mx2teWiv96Kb4sGTcb1V6ts4g3krqhjzRnLO8iqemoyPwVnIgLW
92h41s0XecKsfl+eSfqQUn/3lQF3S3oMVh3RgJWgPJ0OHVk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org