Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e35332e3132342e302f32322d3234203d3e203238333433.roa
File:                     3137372e35332e3132342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          DuvQA7DyXApS+Lv6dWUz/G/B45qZhrbEunAN74NcsKE=
Subject key identifier:   A4:07:91:F0:8E:97:A3:E2:2A:1F:97:E8:7D:EE:06:94:F4:09:CD:97
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       2DF7D01773859DA92D44DF9E93F184588323F399
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e35332e3132342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:17 +0000
ROA not before:           Thu 28 Apr 2022 13:24:17 +0000
ROA not after:            Thu 27 Apr 2023 13:29:17 +0000
asID:                     28343
IP address blocks:        177.53.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f7:d0:17:73:85:9d:a9:2d:44:df:9e:93:f1:84:58:83:23:f3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:17 2022 GMT
            Not After : Apr 27 13:29:17 2023 GMT
        Subject: CN=3082010A0282010100D21012A950CF88D7C54F9E0F3FD1431C4EC0068DB1AB62055DC506F8A891A83540A65627BE76ADD3E030FBBEF8D3C5454453A2461D8469C5624CD6EEF642A33719BE61764C0E3C2ED7A4DE9BB70551D08DD9A0869703FC743ECD82000DD927918726597B04B85360FC839588DC6D318555F67C2F96F162402B4DF4F897F0C32BFB51A09E62BCAC35561A730B86321923AD7A80FD177D5222E787A95B5B4FDE93A658AF4E7A5F3AF543EE37DA68A638EC7A4E25A482822D77C555EDC735B2FD74355B8D582E8E6C42E2FBA87A63F4CA8373245AB5F4F82DA4C05069E219D95E02359B72BD87F5B0720F93CEBEE9E385CD11E9D3B8296C0412AB82C0F06CFB97830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:12:a9:50:cf:88:d7:c5:4f:9e:0f:3f:d1:
                    43:1c:4e:c0:06:8d:b1:ab:62:05:5d:c5:06:f8:a8:
                    91:a8:35:40:a6:56:27:be:76:ad:d3:e0:30:fb:be:
                    f8:d3:c5:45:44:53:a2:46:1d:84:69:c5:62:4c:d6:
                    ee:f6:42:a3:37:19:be:61:76:4c:0e:3c:2e:d7:a4:
                    de:9b:b7:05:51:d0:8d:d9:a0:86:97:03:fc:74:3e:
                    cd:82:00:0d:d9:27:91:87:26:59:7b:04:b8:53:60:
                    fc:83:95:88:dc:6d:31:85:55:f6:7c:2f:96:f1:62:
                    40:2b:4d:f4:f8:97:f0:c3:2b:fb:51:a0:9e:62:bc:
                    ac:35:56:1a:73:0b:86:32:19:23:ad:7a:80:fd:17:
                    7d:52:22:e7:87:a9:5b:5b:4f:de:93:a6:58:af:4e:
                    7a:5f:3a:f5:43:ee:37:da:68:a6:38:ec:7a:4e:25:
                    a4:82:82:2d:77:c5:55:ed:c7:35:b2:fd:74:35:5b:
                    8d:58:2e:8e:6c:42:e2:fb:a8:7a:63:f4:ca:83:73:
                    24:5a:b5:f4:f8:2d:a4:c0:50:69:e2:19:d9:5e:02:
                    35:9b:72:bd:87:f5:b0:72:0f:93:ce:be:e9:e3:85:
                    cd:11:e9:d3:b8:29:6c:04:12:ab:82:c0:f0:6c:fb:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:07:91:F0:8E:97:A3:E2:2A:1F:97:E8:7D:EE:06:94:F4:09:CD:97
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e35332e3132342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:da:25:06:0c:89:0d:44:f8:70:7e:cf:82:c2:0f:72:ff:
         8e:f4:12:88:93:78:c0:b5:88:63:e0:09:b5:b1:29:d3:f4:9b:
         10:ae:db:2d:e0:24:b0:b9:b8:bf:d2:33:b7:5e:36:02:d7:0a:
         8a:08:07:32:a9:4c:23:26:32:32:8a:d2:68:12:68:8f:07:db:
         5d:f9:43:e8:11:38:98:94:fb:f7:40:46:db:b0:ca:14:dd:86:
         8e:93:07:6e:63:63:63:f7:af:63:dc:91:f9:9a:19:b4:2e:79:
         9a:f6:91:7e:90:a8:67:68:d9:6a:4d:92:09:3c:a7:b1:51:ce:
         fd:70:4e:9f:02:cf:aa:67:66:71:05:b5:c1:41:6b:ab:13:23:
         95:69:0c:d6:d9:fa:d3:cd:12:2c:1b:82:78:6a:bb:20:7d:eb:
         2e:a2:d2:65:42:52:1a:52:a5:f6:6a:9b:d9:a0:2b:05:75:be:
         cd:60:9f:82:81:98:1d:2e:a7:94:bc:e3:42:43:ae:e8:a8:b9:
         da:cf:6a:6c:22:07:9c:90:a4:87:38:d5:6a:26:33:16:a0:5b:
         a1:73:23:b6:f8:e8:2c:2e:b0:b8:59:1b:b8:fb:af:0e:2e:15:
         ea:67:28:66:07:38:12:13:f7:7e:b1:6a:b5:6b:76:33:bb:43:
         a7:da:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org