Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e36372e3230302e302f32312d3234203d3e203238333433.roa
File:                     3137372e36372e3230302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          rgJNnrzWjeVyOr8S0pdNKjMLyHteLRQkMcVdb/G6gl4=
Subject key identifier:   1B:FC:C0:DE:F1:92:96:79:A8:08:5B:C0:8A:8D:AF:C3:81:40:E7:B8
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       48D6A475F55EB89B12220B4FDE629147E33261C1
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e36372e3230302e302f32312d3234203d3e203238333433.roa
Signing time:             Fri 20 Jan 2023 11:20:09 +0000
ROA not before:           Fri 20 Jan 2023 11:15:09 +0000
ROA not after:            Fri 19 Jan 2024 11:20:09 +0000
asID:                     28343
IP address blocks:        177.67.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d6:a4:75:f5:5e:b8:9b:12:22:0b:4f:de:62:91:47:e3:32:61:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 20 11:15:09 2023 GMT
            Not After : Jan 19 11:20:09 2024 GMT
        Subject: CN=3082010A0282010100B1CEF7A1F82CA34D5F3E0F10EC63458108C8423A3D81E92968638042EDE1471A3D16A9312403DF8A326D0F20D8C68B64B8BC16E1602CDD8DD6DC88A32E3795CD1BD7B995EF982C9B5FC3E8C7A70B868E3B986A7462D8DBF35C0C1B0E08BE3403DA3E84F295587E3E6D395DA28B4730D61DEE14412F2667103DD0EB51849C93781E278DDAD5D9E38FFAF815294AB06EA953C2CF429D5686E1106E69DB58EC96DD20E6EA21D747DD6E1CD34B230434E033D1143EE1F7A039C7231F1A0A03BED72791AA7C11B1C849DF5DA4BD75990D82064A43AD14325D4F59023A3A9E3D04DEE7028BA3A2295CA157DC8DE57B6645B6761D7B1FA56207A8ECABBDC838980133330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:f7:a1:f8:2c:a3:4d:5f:3e:0f:10:ec:63:
                    45:81:08:c8:42:3a:3d:81:e9:29:68:63:80:42:ed:
                    e1:47:1a:3d:16:a9:31:24:03:df:8a:32:6d:0f:20:
                    d8:c6:8b:64:b8:bc:16:e1:60:2c:dd:8d:d6:dc:88:
                    a3:2e:37:95:cd:1b:d7:b9:95:ef:98:2c:9b:5f:c3:
                    e8:c7:a7:0b:86:8e:3b:98:6a:74:62:d8:db:f3:5c:
                    0c:1b:0e:08:be:34:03:da:3e:84:f2:95:58:7e:3e:
                    6d:39:5d:a2:8b:47:30:d6:1d:ee:14:41:2f:26:67:
                    10:3d:d0:eb:51:84:9c:93:78:1e:27:8d:da:d5:d9:
                    e3:8f:fa:f8:15:29:4a:b0:6e:a9:53:c2:cf:42:9d:
                    56:86:e1:10:6e:69:db:58:ec:96:dd:20:e6:ea:21:
                    d7:47:dd:6e:1c:d3:4b:23:04:34:e0:33:d1:14:3e:
                    e1:f7:a0:39:c7:23:1f:1a:0a:03:be:d7:27:91:aa:
                    7c:11:b1:c8:49:df:5d:a4:bd:75:99:0d:82:06:4a:
                    43:ad:14:32:5d:4f:59:02:3a:3a:9e:3d:04:de:e7:
                    02:8b:a3:a2:29:5c:a1:57:dc:8d:e5:7b:66:45:b6:
                    76:1d:7b:1f:a5:62:07:a8:ec:ab:bd:c8:38:98:01:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FC:C0:DE:F1:92:96:79:A8:08:5B:C0:8A:8D:AF:C3:81:40:E7:B8
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e36372e3230302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:81:80:9d:0b:40:f3:df:bc:e7:07:8a:ed:7a:3f:19:8b:
         0c:f4:2f:c2:a4:d4:9a:8d:81:06:3e:21:74:01:e3:9f:9e:8e:
         95:02:4c:7f:b9:fa:f2:e6:a1:9f:86:83:08:64:47:ec:31:2f:
         8f:2e:12:5e:e2:68:f4:b5:5d:0b:14:c4:ff:a1:02:b4:d1:6e:
         d9:c2:4b:a7:3a:e8:b4:0a:f3:6c:e3:f3:9c:52:04:b7:b4:c3:
         1b:55:96:7e:2f:07:55:98:99:09:16:43:22:da:72:5f:66:b0:
         b1:49:39:34:98:5f:b6:4b:6f:0e:ad:46:db:cf:ef:96:51:0d:
         9b:00:a1:06:ae:28:a2:9f:4a:33:f9:e3:3d:f7:3f:12:10:d4:
         5d:88:97:fb:e9:f4:c4:e9:f4:97:42:02:af:16:51:9b:dc:47:
         ef:99:43:77:09:81:d1:6f:67:2b:e5:66:cb:b7:fe:c6:85:ea:
         4a:e8:af:6c:83:75:53:5c:6f:2f:86:d4:27:61:a3:5d:da:3f:
         ff:3b:40:b1:7a:81:a8:03:33:e1:2f:43:47:d0:48:02:98:f0:
         8d:59:44:be:38:2c:d4:6c:db:9c:c5:91:40:99:48:61:9e:66:
         7e:f3:df:a6:12:62:06:cf:19:2a:7e:fd:87:a8:b4:45:44:2b:
         ee:df:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org