Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133362e3136302e302f32312d3234203d3e203238333433.roa
File:                     3137372e3133362e3136302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          sVIn7nLcY85Ehtzmc5ddvdh+h2dl8u2DykVRYk8RIGY=
Subject key identifier:   BB:AF:72:C4:F6:0A:E7:75:DA:E5:CB:81:C8:90:AD:EE:65:E5:6B:73
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       15492F21397290A5E3D800A30BE48C2B881B3F36
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133362e3136302e302f32312d3234203d3e203238333433.roa
Signing time:             Fri 20 Jan 2023 11:20:09 +0000
ROA not before:           Fri 20 Jan 2023 11:15:09 +0000
ROA not after:            Fri 19 Jan 2024 11:20:09 +0000
asID:                     28343
IP address blocks:        177.136.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:49:2f:21:39:72:90:a5:e3:d8:00:a3:0b:e4:8c:2b:88:1b:3f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 20 11:15:09 2023 GMT
            Not After : Jan 19 11:20:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:2e:ec:c2:a1:31:56:60:c2:dd:8d:46:58:
                    85:c2:22:d4:4a:9b:49:29:fc:6a:3b:81:4d:a4:05:
                    fe:8f:25:ae:2f:f7:50:6a:9f:48:04:a9:6a:12:12:
                    96:98:05:84:cf:57:cd:09:2a:a3:71:4b:ce:59:e4:
                    8e:71:31:04:7e:45:dc:0d:ea:b6:72:65:03:61:0b:
                    56:34:16:b9:af:93:f4:07:7b:fd:96:03:c5:bd:d4:
                    c5:e0:83:72:e9:ca:19:dd:15:85:0b:50:16:a3:a0:
                    3d:2e:90:49:18:30:92:dc:17:84:93:fa:f4:cb:ba:
                    a9:3c:fe:8e:94:71:e1:47:3c:d9:f2:03:da:77:2c:
                    76:b7:a5:78:4f:eb:eb:10:4e:25:b2:f3:ee:d0:fe:
                    8e:88:1f:50:ac:43:aa:64:e7:c4:eb:6e:63:eb:1c:
                    75:cb:f6:8b:8e:75:ab:8c:e2:08:d3:8a:c3:09:77:
                    10:07:6f:fa:c9:db:3f:48:8b:c9:a6:45:f9:46:36:
                    26:a6:51:d2:00:a8:9a:dd:29:8f:d5:3c:bb:31:df:
                    23:99:9e:5b:f8:ac:f1:7e:89:9a:55:fa:f2:2d:81:
                    00:a1:74:13:67:a0:e0:d7:62:cf:d9:2c:50:0a:d8:
                    5e:71:53:f7:e9:ac:59:c6:05:c6:19:92:e6:9b:4b:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AF:72:C4:F6:0A:E7:75:DA:E5:CB:81:C8:90:AD:EE:65:E5:6B:73
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3133362e3136302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:78:6f:85:49:44:ed:9c:ec:48:66:f6:42:d0:45:8a:5b:ce:
         3b:2d:ea:8f:d3:46:c2:aa:75:8b:1b:f8:ae:7e:ac:cb:0d:cf:
         1e:a7:46:2e:a7:b0:20:77:fa:33:f9:9d:93:93:ca:16:02:b1:
         9d:7a:b8:fc:7e:50:95:5b:09:c6:0a:73:c7:25:66:81:25:5c:
         1c:3f:af:ef:4c:5e:7f:82:d3:5b:00:7b:c5:27:ca:06:e3:29:
         2a:54:93:df:62:36:c5:33:f9:26:74:10:5f:ba:91:0b:7f:bb:
         d7:d3:ce:84:45:94:d8:af:8e:24:07:7a:68:1f:19:86:1b:9c:
         b6:c4:44:12:96:2c:cd:56:ee:9f:4f:68:07:ed:17:05:65:1a:
         f3:0b:ef:79:46:1f:d8:21:e4:81:a2:7b:dc:d6:77:9f:72:21:
         fd:f0:b8:d2:9e:4f:0a:4c:6d:29:b1:15:bd:3d:b2:c1:31:f2:
         49:1f:25:7a:4f:31:e6:5a:4a:9c:3d:56:0e:83:fc:2f:b5:e6:
         7f:9c:5e:81:c7:cc:92:71:96:64:fd:6e:29:02:12:6e:11:ad:
         a1:18:f6:c7:05:f2:91:66:86:32:84:2b:fa:ca:a3:aa:64:84:
         2b:aa:fa:e5:ff:6f:4d:6a:d2:09:91:a1:65:29:d0:84:02:d5:
         05:8e:1e:64
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFUkvITlykKXj2ACjC+SMK4gbPzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMzAxMjAxMTE1MDlaFw0yNDAxMTkxMTIwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTZBRjJFRUNDMkExMzE1NjYw
QzJERDhENDY1ODg1QzIyMkQ0NEE5QjQ5MjlGQzZBM0I4MTREQTQwNUZFOEYyNUFF
MkZGNzUwNkE5RjQ4MDRBOTZBMTIxMjk2OTgwNTg0Q0Y1N0NEMDkyQUEzNzE0QkNF
NTlFNDhFNzEzMTA0N0U0NURDMERFQUI2NzI2NTAzNjEwQjU2MzQxNkI5QUY5M0Y0
MDc3QkZEOTYwM0M1QkRENEM1RTA4MzcyRTlDQTE5REQxNTg1MEI1MDE2QTNBMDNE
MkU5MDQ5MTgzMDkyREMxNzg0OTNGQUY0Q0JCQUE5M0NGRThFOTQ3MUUxNDczQ0Q5
RjIwM0RBNzcyQzc2QjdBNTc4NEZFQkVCMTA0RTI1QjJGM0VFRDBGRThFODgxRjUw
QUM0M0FBNjRFN0M0RUI2RTYzRUIxQzc1Q0JGNjhCOEU3NUFCOENFMjA4RDM4QUMz
MDk3NzEwMDc2RkZBQzlEQjNGNDg4QkM5QTY0NUY5NDYzNjI2QTY1MUQyMDBBODlB
REQyOThGRDUzQ0JCMzFERjIzOTk5RTVCRjhBQ0YxN0U4OTlBNTVGQUYyMkQ4MTAw
QTE3NDEzNjdBMEUwRDc2MkNGRDkyQzUwMEFEODVFNzE1M0Y3RTlBQzU5QzYwNUM2
MTk5MkU2OUI0QjMwOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlq8u7MKhMVZgwt2NRliFwiLUSptJKfxqO4FNpAX+jyWuL/dQap9I
BKlqEhKWmAWEz1fNCSqjcUvOWeSOcTEEfkXcDeq2cmUDYQtWNBa5r5P0B3v9lgPF
vdTF4INy6coZ3RWFC1AWo6A9LpBJGDCS3BeEk/r0y7qpPP6OlHHhRzzZ8gPadyx2
t6V4T+vrEE4lsvPu0P6OiB9QrEOqZOfE625j6xx1y/aLjnWrjOII04rDCXcQB2/6
yds/SIvJpkX5RjYmplHSAKia3SmP1Ty7Md8jmZ5b+KzxfomaVfryLYEAoXQTZ6Dg
12LP2SxQCthecVP36axZxgXGGZLmm0swiwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLuvcsT2Cud12uXLgciQre5l5WtzMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzEzMzM2MmUzMTM2
MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sYigMA0GCSqGSIb3DQEBCwUAA4IBAQCFeG+FSUTtnOxIZvZC0EWKW847LeqP00bC
qnWLG/iufqzLDc8ep0Yup7Agd/oz+Z2Tk8oWArGderj8flCVWwnGCnPHJWaBJVwc
P6/vTF5/gtNbAHvFJ8oG4ykqVJPfYjbFM/kmdBBfupELf7vX086ERZTYr44kB3po
HxmGG5y2xEQSlizNVu6fT2gH7RcFZRrzC+95Rh/YIeSBonvc1nefciH98LjSnk8K
TG0psRW9PbLBMfJJHyV6TzHmWkqcPVYOg/wvteZ/nF6Bx8yScZZk/W4pAhJuEa2h
GPbHBfKRZoYyhCv6yqOqZIQrqvrl/29NatIJkaFlKdCEAtUFjh5k
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org