Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3132352e3130342e302f32322d3234203d3e203238333433.roa
File:                     3137372e3132352e3130342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          dy+PllFg3oZvKpZFSCxCDzIFvgotXP3J2vtHSL/3zcI=
Subject key identifier:   10:DA:EF:EE:4C:C5:E2:9C:16:C6:22:69:58:35:B9:9D:6D:C4:E9:A9
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       164692AB6F2BDA6D7B6B7ED31B2D9982BADC4142
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3132352e3130342e302f32322d3234203d3e203238333433.roa
Signing time:             Fri 27 Jan 2023 13:17:34 +0000
ROA not before:           Fri 27 Jan 2023 13:12:34 +0000
ROA not after:            Fri 26 Jan 2024 13:17:34 +0000
asID:                     28343
IP address blocks:        177.125.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:46:92:ab:6f:2b:da:6d:7b:6b:7e:d3:1b:2d:99:82:ba:dc:41:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 27 13:12:34 2023 GMT
            Not After : Jan 26 13:17:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7e:22:02:c7:a7:1b:1d:72:3b:10:47:fd:05:
                    1f:4b:e7:3d:3d:81:e5:53:b3:72:99:44:33:95:dd:
                    ff:fc:9e:84:4e:b6:33:34:80:6a:3c:fa:f6:fe:52:
                    1d:57:bf:9f:f6:9e:2f:f4:64:d9:14:ca:40:7f:fd:
                    65:56:cb:40:a7:d1:f2:69:0e:d8:e6:c9:2d:af:b0:
                    7b:6a:b0:0d:27:fb:fd:8c:7f:7d:1d:aa:7a:a5:89:
                    84:7a:93:72:e5:c1:61:4d:65:69:91:02:cd:de:64:
                    a9:cb:b3:bb:9d:1d:73:c2:7c:a1:19:8e:64:c9:20:
                    f7:d9:46:32:95:e5:de:7b:ac:1f:b3:6c:97:58:97:
                    2c:f1:49:fe:c5:b8:cb:fd:4a:77:45:33:b5:73:55:
                    e9:31:71:1f:b6:4f:47:5c:74:95:a9:f1:2b:7e:ec:
                    fe:a4:38:1c:bf:6e:e2:75:d7:b4:01:61:c1:ba:1d:
                    5a:1d:f5:e5:24:54:c3:a4:ce:ae:e6:40:23:d4:0a:
                    0e:88:ab:01:cb:c5:d2:c9:61:62:4a:5d:3c:12:1e:
                    ec:ce:38:2d:6a:c8:ac:c5:e9:2c:a9:da:ab:fd:c8:
                    8f:48:ad:9f:06:d6:e2:a3:ee:4c:49:39:df:8e:1e:
                    da:08:12:1c:c8:c8:5b:0d:9c:9c:67:ea:6a:1a:23:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DA:EF:EE:4C:C5:E2:9C:16:C6:22:69:58:35:B9:9D:6D:C4:E9:A9
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3132352e3130342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:50:0f:28:75:8c:c0:77:97:6d:5c:7c:d7:7c:39:3f:fd:
         04:51:21:e5:ab:c5:9c:bd:3a:be:57:bb:53:a0:6f:d0:f7:5d:
         e0:4f:58:e0:9f:d8:3a:1d:b4:a2:e1:76:e0:08:18:93:b2:7e:
         d3:fe:4d:63:4d:19:f2:e8:fd:42:28:e2:f4:7d:d4:56:11:dc:
         a2:43:63:a7:80:88:06:92:35:58:72:40:c6:bc:64:1e:6a:ab:
         af:07:c7:23:61:1e:29:1e:02:64:05:00:f8:44:9d:9c:05:72:
         1c:1f:47:5e:7b:ca:3d:a3:e7:06:43:a6:34:7c:5f:18:15:95:
         6d:32:0b:66:d0:c0:40:9c:c9:06:10:6f:83:01:8d:1d:12:e5:
         d9:12:d1:75:f5:4a:dc:27:5d:49:65:af:3f:81:2f:95:2b:ee:
         f3:72:c5:50:02:a9:a4:86:1d:ae:07:eb:86:41:48:33:ce:8a:
         b8:6d:fd:88:c6:4f:c7:09:91:ec:f7:81:28:44:41:ec:f5:37:
         8a:6c:55:92:d8:be:87:2e:b7:c5:04:cb:61:ba:bc:29:82:14:
         07:17:fe:75:c9:93:2e:98:93:22:b9:7e:09:f3:ef:7d:b5:40:
         4d:08:3d:c2:82:81:3c:32:6f:f4:00:e6:b0:f0:a6:ca:90:1d:
         fd:bb:2b:8d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFkaSq28r2m17a37TGy2ZgrrcQUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMzAxMjcxMzEyMzRaFw0yNDAxMjYxMzE3MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUQ3RTIyMDJDN0E3MUIxRDcy
M0IxMDQ3RkQwNTFGNEJFNzNEM0Q4MUU1NTNCMzcyOTk0NDMzOTVEREZGRkM5RTg0
NEVCNjMzMzQ4MDZBM0NGQUY2RkU1MjFENTdCRjlGRjY5RTJGRjQ2NEQ5MTRDQTQw
N0ZGRDY1NTZDQjQwQTdEMUYyNjkwRUQ4RTZDOTJEQUZCMDdCNkFCMDBEMjdGQkZE
OEM3RjdEMURBQTdBQTU4OTg0N0E5MzcyRTVDMTYxNEQ2NTY5OTEwMkNEREU2NEE5
Q0JCM0JCOUQxRDczQzI3Q0ExMTk4RTY0QzkyMEY3RDk0NjMyOTVFNURFN0JBQzFG
QjM2Qzk3NTg5NzJDRjE0OUZFQzVCOENCRkQ0QTc3NDUzM0I1NzM1NUU5MzE3MTFG
QjY0RjQ3NUM3NDk1QTlGMTJCN0VFQ0ZFQTQzODFDQkY2RUUyNzVEN0I0MDE2MUMx
QkExRDVBMURGNUU1MjQ1NEMzQTRDRUFFRTY0MDIzRDQwQTBFODhBQjAxQ0JDNUQy
Qzk2MTYyNEE1RDNDMTIxRUVDQ0UzODJENkFDOEFDQzVFOTJDQTlEQUFCRkRDODhG
NDhBRDlGMDZENkUyQTNFRTRDNDkzOURGOEUxRURBMDgxMjFDQzhDODVCMEQ5QzlD
NjdFQTZBMUEyMzE4MTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7X4iAsenGx1yOxBH/QUfS+c9PYHlU7NymUQzld3//J6ETrYzNIBq
PPr2/lIdV7+f9p4v9GTZFMpAf/1lVstAp9HyaQ7Y5sktr7B7arANJ/v9jH99Hap6
pYmEepNy5cFhTWVpkQLN3mSpy7O7nR1zwnyhGY5kySD32UYyleXee6wfs2yXWJcs
8Un+xbjL/Up3RTO1c1XpMXEftk9HXHSVqfErfuz+pDgcv27idde0AWHBuh1aHfXl
JFTDpM6u5kAj1AoOiKsBy8XSyWFiSl08Eh7szjgtasisxeksqdqr/ciPSK2fBtbi
o+5MSTnfjh7aCBIcyMhbDZycZ+pqGiMYFQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBDa7+5MxeKcFsYiaVg1uZ1txOmpMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzEzMjM1MmUzMTMw
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sX1oMA0GCSqGSIb3DQEBCwUAA4IBAQAuGVAPKHWMwHeXbVx813w5P/0EUSHlq8Wc
vTq+V7tToG/Q913gT1jgn9g6HbSi4XbgCBiTsn7T/k1jTRny6P1CKOL0fdRWEdyi
Q2OngIgGkjVYckDGvGQeaquvB8cjYR4pHgJkBQD4RJ2cBXIcH0dee8o9o+cGQ6Y0
fF8YFZVtMgtm0MBAnMkGEG+DAY0dEuXZEtF19UrcJ11JZa8/gS+VK+7zcsVQAqmk
hh2uB+uGQUgzzoq4bf2Ixk/HCZHs94EoREHs9TeKbFWS2L6HLrfFBMthurwpghQH
F/51yZMumJMiuX4J8+99tUBNCD3CgoE8Mm/0AOaw8KbKkB39uyuN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org