Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa
File:                     3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          M60eMwr4kfLo3GUi72KSOBIqzlrI14NgUyGH3YQFDf0=
Subject key identifier:   87:4A:D6:5E:76:84:F6:3B:A3:5E:45:4C:7C:BD:AC:E9:ED:E0:F5:8D
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       7DEA16516FE2228A29B18AE0B509045385D517F6
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        177.129.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ea:16:51:6f:e2:22:8a:29:b1:8a:e0:b5:09:04:53:85:d5:17:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:a1:bd:ab:89:70:98:92:ae:ad:98:7d:ad:
                    d0:05:36:58:49:05:07:37:a7:bb:bb:33:88:b4:bf:
                    08:ec:59:4e:28:5b:7a:22:ca:74:ba:a7:c0:19:3a:
                    7e:6f:99:94:8d:69:10:1b:df:26:ae:0d:04:f8:fe:
                    a3:40:15:2c:9a:ef:e8:3b:d0:c9:9a:1d:27:7d:34:
                    09:e8:e8:b9:cd:12:91:1c:5e:0f:88:51:d4:2c:3d:
                    68:82:6b:7a:d7:d4:26:03:c5:1e:db:6d:bb:65:5a:
                    cc:53:35:32:de:f2:3f:c2:f8:2a:2e:cd:67:27:e6:
                    da:d1:6e:32:2c:3a:3d:ef:fc:94:42:0a:43:24:78:
                    eb:f1:31:c6:fb:78:af:0f:8e:01:d4:5d:b3:a7:cc:
                    68:c7:ae:26:4d:92:9b:b2:d7:a9:0e:02:f9:9b:05:
                    25:b3:5a:3e:56:e2:cd:e8:98:7f:fb:6b:05:57:59:
                    eb:50:df:47:4b:94:38:b0:e1:8c:c6:c9:0b:45:3a:
                    3c:a5:bf:ae:72:5a:59:41:d4:14:94:57:3e:d7:09:
                    6c:fa:e1:9e:f5:1e:f7:57:21:67:15:29:9c:ed:94:
                    cf:8e:e3:60:33:40:9f:0f:e8:29:a6:79:67:f1:f4:
                    77:2d:45:9d:90:93:0c:be:88:9d:b7:72:f7:d6:78:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:D6:5E:76:84:F6:3B:A3:5E:45:4C:7C:BD:AC:E9:ED:E0:F5:8D
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:40:c6:ba:d3:c3:2d:cb:2a:72:26:d7:1f:d9:16:0e:f5:
         f1:4b:04:77:f4:47:3b:f9:0c:f5:f9:9f:42:64:39:66:26:bb:
         8b:7d:69:d8:a1:a9:bb:65:ab:88:0b:eb:a5:20:20:0d:41:49:
         82:cb:3a:c4:8b:e9:e0:ed:b5:51:4f:f2:ca:dd:19:53:29:a9:
         39:5b:75:2a:25:ea:94:21:13:fd:8e:da:90:d2:41:ee:8d:69:
         70:ce:78:4e:16:d6:aa:48:bc:cf:87:0e:48:38:ac:14:39:cc:
         c3:c4:8a:21:03:8c:b3:08:56:fd:6e:6a:2f:24:ca:fd:cf:39:
         e7:2a:19:1e:05:84:d4:da:9c:ee:ab:c9:b2:10:6b:7c:f5:6e:
         83:28:c9:99:83:44:14:46:1d:53:5a:4a:80:cc:5c:20:f6:57:
         be:e0:d5:ad:bf:1f:3f:36:0d:05:a5:6b:12:20:c3:3f:ff:04:
         35:f6:15:95:10:75:43:8f:e4:f2:af:4c:77:d6:36:eb:ee:38:
         0f:42:30:62:eb:be:5a:36:5a:0e:ed:d4:0b:68:28:54:07:a5:
         e3:15:d5:36:a4:27:6c:3a:d8:62:95:01:cc:b7:5d:b8:a8:14:
         c8:20:0a:a3:a5:71:ee:58:3d:a6:7c:8e:af:b9:0c:c0:d2:6e:
         c5:fd:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org