Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa
File:                     3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          5EeGscNpKuQLB2zjv6PrEhscuWM+FsO+iXO4F7V+yXQ=
Subject key identifier:   7F:A7:F7:FB:AB:BB:88:A3:25:76:10:73:21:0A:9D:BE:10:35:5E:26
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       37277F160927C061C0E727212D2EAAE8C973C4A2
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        177.130.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:27:7f:16:09:27:c0:61:c0:e7:27:21:2d:2e:aa:e8:c9:73:c4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject: CN=3082010A0282010100D1D1B78B0ADBE28C34065F0DF771F7EEE730F44A67033ABEE8B95F3193F4457FBA64D6A652B9E6CB475E4F957B0D28A45FDAF31201B703BF2E0572E60386F85011B74FF195341D2C0499D74075B44DA4EF3D4298902EF862E521B636554B794F3C037DFE7473709C2728239A7427B0C89171E9831A35FB2B76158967EB0E92B736E3FB018869F29088CB1794D0F4B0399570D4A32125E167CFC7487448B38A8780DF20F3C424A83F4B5CB6458211127663B6957E9C9BE9C5C7F8A4CA73BD7A63F514EC9EE47E6D5CC71731991327BF6C7F7B5BDD0344C465D3034707B926B719191819803924BF756B59C8E1F649238E8E06F5B306F49F1B762A1FA5E69667970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:b7:8b:0a:db:e2:8c:34:06:5f:0d:f7:71:
                    f7:ee:e7:30:f4:4a:67:03:3a:be:e8:b9:5f:31:93:
                    f4:45:7f:ba:64:d6:a6:52:b9:e6:cb:47:5e:4f:95:
                    7b:0d:28:a4:5f:da:f3:12:01:b7:03:bf:2e:05:72:
                    e6:03:86:f8:50:11:b7:4f:f1:95:34:1d:2c:04:99:
                    d7:40:75:b4:4d:a4:ef:3d:42:98:90:2e:f8:62:e5:
                    21:b6:36:55:4b:79:4f:3c:03:7d:fe:74:73:70:9c:
                    27:28:23:9a:74:27:b0:c8:91:71:e9:83:1a:35:fb:
                    2b:76:15:89:67:eb:0e:92:b7:36:e3:fb:01:88:69:
                    f2:90:88:cb:17:94:d0:f4:b0:39:95:70:d4:a3:21:
                    25:e1:67:cf:c7:48:74:48:b3:8a:87:80:df:20:f3:
                    c4:24:a8:3f:4b:5c:b6:45:82:11:12:76:63:b6:95:
                    7e:9c:9b:e9:c5:c7:f8:a4:ca:73:bd:7a:63:f5:14:
                    ec:9e:e4:7e:6d:5c:c7:17:31:99:13:27:bf:6c:7f:
                    7b:5b:dd:03:44:c4:65:d3:03:47:07:b9:26:b7:19:
                    19:18:19:80:39:24:bf:75:6b:59:c8:e1:f6:49:23:
                    8e:8e:06:f5:b3:06:f4:9f:1b:76:2a:1f:a5:e6:96:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:F7:FB:AB:BB:88:A3:25:76:10:73:21:0A:9D:BE:10:35:5E:26
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:f9:ed:67:45:2b:d3:2c:69:8b:ca:5e:cf:72:93:3f:41:
         ab:33:76:ed:66:ff:ff:65:5f:05:ad:b4:dd:44:de:73:11:93:
         62:72:db:12:7d:07:79:23:65:cb:a0:42:36:f4:a9:de:77:2f:
         5b:f4:e0:35:48:46:b5:96:e9:cc:2a:1c:cd:0e:a3:e2:c8:04:
         6e:79:f4:87:18:81:65:6c:be:dc:c0:06:d8:25:32:dc:63:d1:
         92:b5:cd:26:22:0f:12:1a:fe:fa:1a:cc:5f:8a:00:b3:7b:0c:
         61:92:51:7a:75:30:7f:6b:60:af:69:04:02:1a:74:77:22:15:
         cc:9f:90:ab:61:48:3f:79:a5:b0:d3:98:d3:8d:b3:cb:77:9a:
         a1:94:ee:97:99:14:8d:0d:df:7b:3f:eb:73:d3:e3:27:87:2a:
         91:fc:22:68:0a:cc:96:ba:f2:ae:e7:5e:76:b2:92:c1:44:0c:
         9a:b2:26:de:7c:fd:b9:94:9d:23:d0:46:ca:d9:2a:ea:00:2f:
         9b:48:59:1b:1a:0b:72:0b:da:f7:2a:e8:f8:3e:c4:af:84:db:
         db:d4:37:a3:6f:b8:25:84:f8:3d:9a:5c:81:47:c4:5b:d5:21:
         53:5a:25:72:5b:3d:79:a4:50:21:0d:cb:11:0d:5d:b3:1c:48:
         7d:bb:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org