Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa
File:                     3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          /AfaunlB09MifqWvr8ZKfDqI4zWcVJseZj9CxJCNjsw=
Subject key identifier:   D8:F2:55:44:D3:FF:3A:0D:CE:1F:A9:9A:4C:9A:E5:E9:8D:B9:DD:38
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       43E78C433B306EC5C62BD42DBFE2C3CBD25D361D
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        177.200.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e7:8c:43:3b:30:6e:c5:c6:2b:d4:2d:bf:e2:c3:cb:d2:5d:36:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:4d:99:65:d4:09:c3:ac:c9:b9:f5:ff:4d:
                    d8:cb:eb:62:ee:33:ad:5a:42:e6:02:83:f4:29:9a:
                    4f:43:d9:88:e4:fc:a4:1f:63:6f:61:cc:ae:38:16:
                    f8:3d:7d:1f:23:82:d4:59:22:55:2f:ce:52:4f:42:
                    89:5e:74:38:a6:37:18:6c:15:7f:82:e2:de:8e:35:
                    06:03:b1:0d:e5:97:f4:d7:10:ae:d1:ca:2b:42:16:
                    a7:15:4e:8b:95:bf:82:22:90:dd:35:cf:94:f9:10:
                    57:c8:b9:ba:af:03:0a:1c:d6:92:aa:7b:27:31:86:
                    2a:2b:4a:a1:62:52:66:81:47:23:76:bf:ad:d1:5b:
                    5c:8d:43:44:b2:88:b4:c7:b0:ae:1f:38:de:e1:dc:
                    b3:26:38:21:d5:91:4c:41:a5:2f:6b:25:7f:26:47:
                    ce:fb:d1:69:bd:81:65:69:17:eb:1b:17:ed:5a:aa:
                    d4:22:07:58:83:e0:79:9a:9e:11:83:7d:29:00:dd:
                    5d:91:9b:db:29:a5:37:43:4c:59:89:1b:6b:33:93:
                    1d:14:91:14:ec:5e:6a:9f:03:b4:5c:f8:8b:32:a6:
                    81:2f:57:31:1a:eb:c4:93:43:44:e0:8d:2b:51:7d:
                    43:6f:a4:b1:c4:c2:c1:79:70:85:81:45:07:4a:42:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F2:55:44:D3:FF:3A:0D:CE:1F:A9:9A:4C:9A:E5:E9:8D:B9:DD:38
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:13:70:b8:2c:52:af:8f:ac:f6:5d:6f:1b:cc:d3:b0:34:
         20:11:b0:d3:12:58:41:b8:45:59:66:9e:1c:83:af:7e:33:01:
         eb:86:ba:57:e3:e6:31:63:af:2c:d2:0b:86:99:e5:e5:31:9b:
         0f:68:8e:c3:45:43:28:d2:e9:ac:ec:01:fa:50:09:24:78:d0:
         87:c5:5e:58:c4:6a:a7:2a:be:12:0a:45:98:36:e9:af:42:4b:
         55:96:99:75:f0:27:8a:b0:51:2c:e2:f7:f2:8c:f9:44:bc:79:
         c1:4c:54:6a:6d:c0:fa:83:9c:88:33:ab:b2:27:82:63:44:b5:
         74:ba:cb:24:dc:28:63:15:9a:47:db:5c:cb:86:8d:ca:9c:c7:
         fc:9e:4e:29:15:d4:f6:4d:26:76:d0:d7:f6:ed:ef:c0:50:b4:
         9c:b5:db:53:1c:db:c9:11:6d:f5:e4:a2:1d:d2:70:8a:e7:26:
         67:db:57:b8:45:62:28:f4:41:54:1c:ad:f1:d4:ff:50:d8:4d:
         af:a5:16:da:5a:1b:35:ae:9c:93:e3:47:59:4b:8b:c6:f7:96:
         7d:41:8d:bf:ea:85:d0:fe:4e:74:cb:cb:41:37:b6:dd:eb:e7:
         a0:66:bf:a3:72:f5:a7:5b:4e:2e:73:45:5e:26:ee:6c:11:ec:
         24:1f:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org