Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37322e34302e302f32312d3234203d3e203238333433.roa
File:                     3137372e37322e34302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          cTY+1/cuGSfvd5yrCjMQASpN1/vdKAQfn/9D1FO3xu8=
Subject key identifier:   81:71:D1:D5:EA:8F:2C:FF:84:88:47:3A:53:E3:5C:4B:F9:7A:A3:00
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3B0354F347665A16D9CE3C3B3205E41B5F1F728C
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37322e34302e302f32312d3234203d3e203238333433.roa
Signing time:             Tue 17 Jan 2023 17:23:36 +0000
ROA not before:           Tue 17 Jan 2023 17:18:36 +0000
ROA not after:            Tue 16 Jan 2024 17:23:36 +0000
asID:                     28343
IP address blocks:        177.72.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:03:54:f3:47:66:5a:16:d9:ce:3c:3b:32:05:e4:1b:5f:1f:72:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 17 17:18:36 2023 GMT
            Not After : Jan 16 17:23:36 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c9:62:79:aa:a7:d8:ab:6c:46:ed:5d:ee:d7:
                    8c:ee:ad:47:c5:7d:72:03:b3:9c:9c:6b:40:91:4c:
                    11:e8:62:36:b6:09:80:fb:7c:a1:39:f3:5b:9f:49:
                    2b:13:b0:6f:85:12:8e:4f:27:cd:f9:55:af:2f:a0:
                    e6:b1:3c:16:10:b5:83:a6:d0:fa:0c:14:9b:58:d2:
                    8a:73:be:74:b2:f3:15:cf:2e:64:16:e1:4e:ec:ce:
                    06:43:62:10:00:bf:6e:4b:98:86:8f:4f:ba:7d:73:
                    49:79:bb:31:1d:d3:cd:9d:98:17:fa:88:08:85:b7:
                    1e:b8:d1:bc:3d:04:0f:28:04:08:54:9b:07:50:49:
                    dc:5c:e0:d0:c6:f7:85:a6:08:ce:69:cd:f0:8a:09:
                    69:19:5d:7b:16:72:67:70:e4:bd:c1:e8:d1:d0:21:
                    cf:ec:33:81:24:a8:0d:67:34:02:ac:4d:e1:61:17:
                    e8:d7:92:a2:90:3f:cc:6b:84:2b:5b:80:b7:19:3c:
                    1a:bf:88:10:91:7e:9b:55:9e:31:31:50:ee:30:55:
                    62:a8:20:61:fe:8a:17:93:80:3b:d7:9f:32:6e:fe:
                    54:2a:ed:19:2b:77:1c:47:91:12:4e:4e:8f:82:c2:
                    e4:a7:f6:d4:ce:ee:e5:aa:61:f8:67:0c:33:d4:10:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:D1:D5:EA:8F:2C:FF:84:88:47:3A:53:E3:5C:4B:F9:7A:A3:00
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37322e34302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:af:d9:fe:22:0c:a0:41:a7:6a:82:e1:fd:0e:d0:45:0a:06:
         e1:03:a5:db:84:bc:e8:97:32:2d:22:a3:01:bc:bd:85:ce:d2:
         0c:ba:72:58:e8:9c:b0:12:47:4b:b3:53:bc:d6:a3:6d:4f:0b:
         30:76:85:c9:f8:b9:da:ce:43:21:56:49:97:36:72:7d:90:ee:
         1f:63:18:33:5c:c5:4f:74:86:c8:3b:36:36:5a:57:35:ae:83:
         cc:f8:b0:37:bb:04:6a:90:8e:00:08:47:96:dc:25:5b:0c:78:
         d1:8e:4f:0f:05:3c:7a:1f:fd:f7:fd:dc:fe:12:8e:31:64:f3:
         e6:39:c4:89:e3:1d:74:0d:d8:d8:83:d7:a2:22:da:7f:ab:82:
         39:1f:2e:b7:8a:9f:d1:f9:e2:e7:8e:6e:ea:dd:21:b2:e0:a7:
         4a:8b:42:4a:a9:cd:5f:39:25:39:9e:92:a7:c6:c7:de:20:00:
         a5:b7:3c:ff:39:02:03:c0:c6:dc:cc:6d:88:9d:cb:c1:1d:1e:
         d3:ff:fd:0c:76:e4:ba:8b:ba:47:3c:a3:79:09:ef:6d:e8:06:
         16:9f:a4:4c:61:bc:4d:7f:95:e3:90:f8:3e:77:55:03:b5:85:
         5a:63:31:66:bb:d1:52:69:5d:a6:3e:bd:65:8b:f2:d3:4e:9d:
         30:29:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org