Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa
File:                     3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          D1kSMt6HSLCjZzXh9bBIWnjfXiEqVxyhABY6oDVUgjQ=
Subject key identifier:   6D:24:12:A3:B7:0E:AD:ED:16:34:CB:E5:36:55:44:90:F6:72:C3:A3
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       320799DAC5955A89813F0C48E6B0A715C882C30B
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        177.184.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:07:99:da:c5:95:5a:89:81:3f:0c:48:e6:b0:a7:15:c8:82:c3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:0c:20:db:23:d8:24:45:ea:78:2e:d1:0d:
                    8e:57:2d:49:71:b4:1a:85:f2:38:6a:6c:10:03:53:
                    16:7b:d4:59:b2:31:2e:7e:10:09:e0:67:7e:fb:b1:
                    50:95:bf:93:c1:76:7f:cc:e6:f8:0a:83:d4:09:6e:
                    89:37:d3:25:74:b0:08:c8:1d:dd:7b:d8:f1:be:f1:
                    cc:a6:cd:37:86:77:19:6e:c0:29:96:bb:0b:38:7c:
                    99:72:db:e2:e7:ad:71:e0:b2:f2:1a:af:0d:e8:f5:
                    9e:eb:58:d6:48:91:4c:c5:7c:a9:cf:24:fd:e7:e5:
                    58:56:3b:50:cc:2d:1c:ac:2c:47:99:56:4f:13:9d:
                    bc:9b:11:1c:b4:90:f0:91:90:ce:87:4a:f1:d8:27:
                    d7:37:d1:65:2a:76:01:0b:66:06:67:29:d1:ca:1a:
                    a7:4e:ce:bb:70:29:14:00:32:e1:7e:98:2a:88:2b:
                    d0:86:5e:de:9d:68:2c:53:8e:67:97:96:6f:6d:77:
                    77:22:92:0b:27:c0:c3:9f:ab:7e:84:b8:15:5f:df:
                    38:4b:3a:81:a3:7d:dd:a1:09:b9:2e:e4:1f:9d:0b:
                    b2:83:7e:4b:fc:84:48:fe:09:6d:e8:48:85:d4:a5:
                    0b:27:6d:7b:bf:33:a0:56:4c:54:dc:67:93:0d:97:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:12:A3:B7:0E:AD:ED:16:34:CB:E5:36:55:44:90:F6:72:C3:A3
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:18:3c:9a:99:cb:ca:f2:f8:f7:c4:85:26:11:6e:f8:02:2c:
         13:a8:44:fb:6e:04:e5:0d:83:99:28:fd:9b:a9:eb:1b:0d:8b:
         c7:49:5c:f0:5f:f4:f7:e0:20:1d:da:46:ce:47:83:2a:8d:c9:
         65:d2:31:52:c6:1a:a6:31:96:6b:d7:83:9a:cd:1d:7d:d9:16:
         c3:ed:88:8c:06:4b:03:c8:64:b4:f8:45:73:70:46:41:27:2e:
         b9:69:b8:70:f8:cf:1c:3d:db:40:a5:c6:9a:93:ee:60:56:0a:
         1a:b9:05:97:ca:9d:af:ce:cc:9a:29:de:f2:7d:43:ab:e0:2a:
         2a:d5:77:38:17:25:f5:2e:5d:cd:20:7c:e0:67:0b:90:f4:af:
         ff:03:99:7a:6f:93:d0:cf:fc:90:0c:7d:71:68:f1:50:0c:fa:
         25:b1:c6:6c:99:06:81:7d:33:52:47:12:5e:c9:af:ea:85:96:
         f2:39:3d:e7:c4:93:e8:cd:a3:9d:2a:f8:02:00:62:fd:26:42:
         18:f4:85:e6:58:e6:d7:78:79:16:87:89:58:6a:3c:f0:f2:0a:
         04:15:91:85:32:98:e0:03:88:a3:f7:1c:3a:70:69:7f:d2:57:
         a5:3d:d2:4c:08:35:b2:ef:03:9c:3d:9a:c0:0d:e1:49:78:60:
         8f:b3:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org