Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa
File:                     3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          SE2HYXyurunW9+MSE0coQ83zJGIWqdaRsfwhaORm7a0=
Subject key identifier:   57:55:26:B3:F2:70:EF:47:D9:78:1A:42:BD:40:22:B5:87:FE:18:B8
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       486B77420710940ADAAE50C0A42DD4EE7942FD2E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        177.221.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6b:77:42:07:10:94:0a:da:ae:50:c0:a4:2d:d4:ee:79:42:fd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:4f:a0:92:f6:d4:c6:d5:16:0b:bd:e4:45:
                    1f:46:4a:04:a0:2b:90:f3:77:05:1e:4c:e1:d5:eb:
                    20:a5:d3:c0:6c:72:52:8d:d3:d1:f4:ad:5a:b3:fd:
                    b2:9c:af:5e:1e:45:5e:cf:02:fb:09:b6:f9:dd:21:
                    4a:99:c2:36:f6:80:2e:4f:b9:bd:df:3b:bb:02:93:
                    e2:ec:a7:24:c9:17:98:08:28:43:4a:91:18:e5:d7:
                    75:cd:a7:4f:55:3a:91:d7:70:ee:cc:8a:1e:b9:19:
                    a8:90:2e:25:79:cd:53:fb:22:5c:85:9c:11:58:9b:
                    6a:f3:fa:b0:f5:02:4c:88:86:c5:6e:ba:a0:9c:e2:
                    66:0e:91:71:b5:e3:31:82:fd:bc:23:67:17:a9:cd:
                    34:99:53:b8:36:62:d0:68:8c:0a:8f:a9:16:d9:21:
                    28:b5:b0:a0:f2:f2:8a:8f:b1:a1:17:11:99:3d:47:
                    fe:ec:62:9d:6e:1c:bb:84:64:28:f2:30:8d:d7:1f:
                    65:9f:0e:1c:d0:2c:17:12:13:b9:fe:c8:a8:f9:6f:
                    f8:b1:e9:f4:05:11:d8:36:45:88:09:ae:50:8f:eb:
                    9b:fe:83:4d:9b:15:7e:04:0f:d1:12:57:0d:f9:b2:
                    de:30:39:59:84:71:b7:3e:a0:9c:5d:26:77:d2:4d:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:55:26:B3:F2:70:EF:47:D9:78:1A:42:BD:40:22:B5:87:FE:18:B8
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:57:cb:db:95:42:ef:d1:73:11:11:2e:f9:a5:c8:f0:30:
         ea:01:9e:23:e6:52:a6:78:3a:70:1c:c1:1c:4c:e8:c4:f3:39:
         d1:24:d6:93:c3:30:99:9e:9b:14:72:ff:09:b6:5e:97:cb:30:
         fc:a8:39:2b:40:fd:e4:f7:64:da:6e:d1:cf:1d:1c:93:c5:05:
         91:09:e4:84:4f:7f:e0:76:ae:1c:08:d6:ec:81:da:13:c0:bb:
         8a:a1:c5:0e:bc:1c:b0:f0:61:3d:e3:2e:f7:c2:c3:b4:05:b9:
         b2:ce:32:c8:77:ed:57:0b:e4:14:9c:01:1c:f8:6b:13:76:ff:
         36:b8:76:26:2b:67:c0:cd:a4:13:5a:fc:0c:ea:c6:82:98:f0:
         15:14:30:2e:71:af:82:23:cc:5d:17:fa:5b:ab:e3:25:d9:f3:
         9b:aa:b7:e4:39:2a:f2:5c:7b:ef:fd:ed:9f:a3:52:aa:44:17:
         08:43:0f:e3:4d:ab:7d:39:cf:b3:9e:ae:cd:d6:9a:cf:02:a1:
         69:d7:90:57:a1:dd:52:13:54:b4:4c:2c:c5:af:17:bd:76:ae:
         8f:a3:22:11:7d:e1:0f:d2:34:3c:fa:63:57:fd:12:5d:45:92:
         a7:ea:80:29:94:ed:4c:ce:20:ba:2d:ee:61:76:7e:28:bb:a6:
         12:1d:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org