Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa
File:                     3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          ZOCuFahOBWuSIBO3lHt14hAuM/KRKmypsvc8I84dB1c=
Subject key identifier:   39:29:8F:BA:A0:97:04:79:16:F9:B9:14:A3:AA:B7:CD:F2:EC:7D:BA
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       23F63C163255953AA28F4BE0C2870A58F2FC8107
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        177.221.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f6:3c:16:32:55:95:3a:a2:8f:4b:e0:c2:87:0a:58:f2:fc:81:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:10:23:f5:5b:74:8f:f0:3b:5b:03:53:f4:
                    a4:9f:94:82:4d:f7:49:1f:6a:56:29:94:6c:15:3e:
                    a9:b7:f5:e3:68:c1:3b:ac:58:64:be:6f:19:8c:d1:
                    af:8d:d4:1e:6d:44:5a:c8:70:40:70:ce:88:50:f6:
                    0e:dd:9d:d0:e2:90:de:02:e1:fe:d9:4a:49:97:b6:
                    f4:79:8a:0b:9b:8f:7f:37:8f:7e:42:06:7d:6e:95:
                    e8:79:00:d9:52:00:a7:37:ff:3a:4a:b0:e8:44:ef:
                    12:ed:08:9a:e6:da:8a:a8:b0:6c:40:95:20:02:aa:
                    5e:d0:a6:8f:29:ff:e3:7c:bc:b0:ce:96:92:fa:c9:
                    ba:6e:4e:d3:36:4d:7f:01:e1:0b:b4:bd:a4:ce:ca:
                    d0:39:99:ad:53:18:4e:91:c2:f5:29:85:2a:25:24:
                    d0:58:58:96:94:43:24:c4:94:fc:4e:f4:ad:99:1d:
                    2f:9a:60:c9:e3:a0:d7:88:65:d7:50:6c:1e:a9:6b:
                    dc:0b:a4:f3:a1:35:4d:e5:17:31:e3:60:b9:c3:96:
                    ca:cf:b9:ab:3a:2e:ac:64:9d:05:6c:10:5f:f6:e2:
                    42:83:21:78:d5:90:ce:26:ff:f9:14:ce:f9:2b:4e:
                    fc:9a:03:85:5c:da:52:81:02:3a:06:5e:67:20:48:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:29:8F:BA:A0:97:04:79:16:F9:B9:14:A3:AA:B7:CD:F2:EC:7D:BA
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:c6:4c:91:dc:72:08:5a:a8:8d:22:7f:ab:07:8c:3d:e6:
         e5:d2:39:da:4a:94:d5:55:4b:7b:5e:c4:60:8f:b2:31:14:bb:
         22:d3:a7:c7:1f:02:a0:ea:fd:06:e8:a8:3a:93:e4:36:77:f5:
         ad:e6:6f:b3:2e:6b:51:13:cb:e6:cb:ed:22:30:21:d2:05:de:
         da:a6:5e:c5:fc:17:38:a1:98:30:25:6c:5f:37:ad:17:7c:0e:
         ec:54:e0:3e:92:0c:50:9b:2f:72:ce:93:f3:fd:8c:25:6e:a8:
         6a:4c:35:dc:5a:d1:7e:a7:98:a1:02:64:f0:61:ac:b6:4d:8b:
         03:fe:ef:ba:78:95:2d:3b:a8:a8:da:3c:9c:bb:32:73:17:db:
         d7:52:2e:1b:a6:d3:30:4b:7a:17:26:b2:76:45:16:18:16:76:
         fa:db:0e:ae:bb:7a:94:1b:1d:dc:e2:f5:8b:ee:e8:ef:e6:70:
         45:39:34:4a:60:92:54:04:2d:88:99:80:15:1d:0c:e8:ab:a2:
         29:10:6d:8e:4e:74:f7:50:51:7c:93:d5:37:50:4f:03:1a:ca:
         04:0f:9c:bf:b8:d9:0f:e4:ea:ae:15:61:df:17:69:e3:1c:e7:
         86:ad:82:6f:17:4e:a0:63:32:0e:70:96:44:d9:f4:04:9b:28:
         87:16:cf:02
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUI/Y8FjJVlTqij0vgwocKWPL8gQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjRaFw0yMzA0MjcxMzI5MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ1NDEwMjNGNTVCNzQ4RkYw
M0I1QjAzNTNGNEE0OUY5NDgyNERGNzQ5MUY2QTU2Mjk5NDZDMTUzRUE5QjdGNUUz
NjhDMTNCQUM1ODY0QkU2RjE5OENEMUFGOERENDFFNkQ0NDVBQzg3MDQwNzBDRTg4
NTBGNjBFREQ5REQwRTI5MERFMDJFMUZFRDk0QTQ5OTdCNkY0Nzk4QTBCOUI4RjdG
Mzc4RjdFNDIwNjdENkU5NUU4NzkwMEQ5NTIwMEE3MzdGRjNBNEFCMEU4NDRFRjEy
RUQwODlBRTZEQThBQThCMDZDNDA5NTIwMDJBQTVFRDBBNjhGMjlGRkUzN0NCQ0Iw
Q0U5NjkyRkFDOUJBNkU0RUQzMzY0RDdGMDFFMTBCQjRCREE0Q0VDQUQwMzk5OUFE
NTMxODRFOTFDMkY1Mjk4NTJBMjUyNEQwNTg1ODk2OTQ0MzI0QzQ5NEZDNEVGNEFE
OTkxRDJGOUE2MEM5RTNBMEQ3ODg2NUQ3NTA2QzFFQTk2QkRDMEJBNEYzQTEzNTRE
RTUxNzMxRTM2MEI5QzM5NkNBQ0ZCOUFCM0EyRUFDNjQ5RDA1NkMxMDVGRjZFMjQy
ODMyMTc4RDU5MENFMjZGRkY5MTRDRUY5MkI0RUZDOUEwMzg1NUNEQTUyODEwMjNB
MDY1RTY3MjA0ODU2NTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxFQQI/VbdI/wO1sDU/Skn5SCTfdJH2pWKZRsFT6pt/XjaME7rFhk
vm8ZjNGvjdQebURayHBAcM6IUPYO3Z3Q4pDeAuH+2UpJl7b0eYoLm49/N49+QgZ9
bpXoeQDZUgCnN/86SrDoRO8S7Qia5tqKqLBsQJUgAqpe0KaPKf/jfLywzpaS+sm6
bk7TNk1/AeELtL2kzsrQOZmtUxhOkcL1KYUqJSTQWFiWlEMkxJT8TvStmR0vmmDJ
46DXiGXXUGweqWvcC6TzoTVN5Rcx42C5w5bKz7mrOi6sZJ0FbBBf9uJCgyF41ZDO
Jv/5FM75K078mgOFXNpSgQI6Bl5nIEhWUQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDkpj7qglwR5Fvm5FKOqt83y7H26MB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzIzMjMxMmUzMTM2
MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sd2gMA0GCSqGSIb3DQEBCwUAA4IBAQAXusZMkdxyCFqojSJ/qweMPebl0jnaSpTV
VUt7XsRgj7IxFLsi06fHHwKg6v0G6Kg6k+Q2d/Wt5m+zLmtRE8vmy+0iMCHSBd7a
pl7F/Bc4oZgwJWxfN60XfA7sVOA+kgxQmy9yzpPz/YwlbqhqTDXcWtF+p5ihAmTw
Yay2TYsD/u+6eJUtO6io2jycuzJzF9vXUi4bptMwS3oXJrJ2RRYYFnb62w6uu3qU
Gx3c4vWL7ujv5nBFOTRKYJJUBC2ImYAVHQzoq6IpEG2OTnT3UFF8k9U3UE8DGsoE
D5y/uNkP5OquFWHfF2njHOeGrYJvF06gYzIOcJZE2fQEmyiHFs8C
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org