Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa
File:                     3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          oen6rXfxMJzzx45vQiema0mAeepM1rUYUFoebUzY6fE=
Subject key identifier:   55:19:63:2F:84:FB:70:DF:88:93:5F:00:CE:36:D8:5D:1A:88:0E:1F
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       2382E9A1FBD7EDBC086925761B6A1AFEB54EBE3C
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        177.130.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:82:e9:a1:fb:d7:ed:bc:08:69:25:76:1b:6a:1a:fe:b5:4e:be:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject: CN=3082010A0282010100C721BDD680C14E79D0D6EE5FC6BC071401A374F1DBA1007A43709FB39D5479E25346CB31CA61B2B7416D9258AE2278C384A6F88823CB91462A73DFDB1211EB5828B8FD177B262FD692477044074D1F024D2AB953311E78757254C5361541112059C041C1E23838A30FFBF057B3334A233F845A3EBB06F324DB98369CA90559226B80826DF8F91CC846E298E2B2A9A83F99B6D662388A16930E08B16AEC39A29120C53DFA8C6C1349F5033FC1A12A1EBD9FC8F38E20C21E3DDD66C21EA2C740DF8CD0E3F4BC961D6B42F69D47E2BCFB710A877FD2F95196F6DD98AFC0A243E93009EE294BC3A1740BCC3539F2DC07A64D6A5199F5DB6A5EFFC206B3D9970ED9C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:bd:d6:80:c1:4e:79:d0:d6:ee:5f:c6:bc:
                    07:14:01:a3:74:f1:db:a1:00:7a:43:70:9f:b3:9d:
                    54:79:e2:53:46:cb:31:ca:61:b2:b7:41:6d:92:58:
                    ae:22:78:c3:84:a6:f8:88:23:cb:91:46:2a:73:df:
                    db:12:11:eb:58:28:b8:fd:17:7b:26:2f:d6:92:47:
                    70:44:07:4d:1f:02:4d:2a:b9:53:31:1e:78:75:72:
                    54:c5:36:15:41:11:20:59:c0:41:c1:e2:38:38:a3:
                    0f:fb:f0:57:b3:33:4a:23:3f:84:5a:3e:bb:06:f3:
                    24:db:98:36:9c:a9:05:59:22:6b:80:82:6d:f8:f9:
                    1c:c8:46:e2:98:e2:b2:a9:a8:3f:99:b6:d6:62:38:
                    8a:16:93:0e:08:b1:6a:ec:39:a2:91:20:c5:3d:fa:
                    8c:6c:13:49:f5:03:3f:c1:a1:2a:1e:bd:9f:c8:f3:
                    8e:20:c2:1e:3d:dd:66:c2:1e:a2:c7:40:df:8c:d0:
                    e3:f4:bc:96:1d:6b:42:f6:9d:47:e2:bc:fb:71:0a:
                    87:7f:d2:f9:51:96:f6:dd:98:af:c0:a2:43:e9:30:
                    09:ee:29:4b:c3:a1:74:0b:cc:35:39:f2:dc:07:a6:
                    4d:6a:51:99:f5:db:6a:5e:ff:c2:06:b3:d9:97:0e:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:19:63:2F:84:FB:70:DF:88:93:5F:00:CE:36:D8:5D:1A:88:0E:1F
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:cc:bc:9c:4e:7d:5c:e5:ad:e9:ce:81:b4:7c:18:a0:0a:
         7e:dd:1f:23:e2:ea:2b:d8:5b:30:9b:79:66:d7:14:c5:a5:8c:
         4f:86:4f:4b:07:10:ed:f5:b0:d3:bf:01:49:de:1b:57:64:63:
         ec:28:14:c3:b8:12:6c:69:72:90:55:ec:39:62:6b:b4:eb:5e:
         f8:43:b0:8b:a4:1c:4b:51:04:a7:a2:e6:32:83:06:ed:8f:56:
         cb:6b:f6:67:b4:5b:35:3b:3b:4d:da:7d:25:f0:2e:c2:54:a3:
         1a:55:f9:df:61:49:18:6b:a9:31:77:0e:47:ae:52:a1:f5:47:
         3e:4d:c4:6a:07:05:7f:6f:7e:59:5e:e6:a6:25:e4:c2:12:3d:
         e2:f3:64:b9:24:c2:e1:15:dd:43:54:7f:23:26:93:a0:b2:58:
         58:65:84:aa:33:50:f5:96:62:1d:11:3e:68:7b:5f:f0:86:ef:
         3d:21:f7:68:60:f8:70:d4:a7:52:15:77:ef:c0:91:ff:24:b6:
         6c:75:03:4a:ab:8d:24:df:b8:d1:7e:d6:a8:49:cd:c7:04:73:
         57:7f:13:34:6e:4b:dc:61:48:d3:2e:87:80:85:46:bf:b4:52:
         0e:91:b7:f8:33:ef:fa:12:e2:4e:bf:83:6a:f4:14:ec:48:8f:
         34:34:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org