Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3133362e302f32322d3234203d3e203238333433.roa
File:                     3137372e37332e3133362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          S2CXdK23j/hMp5CzOqK7XoYAWwbD/lTaVMQ1EcZezKA=
Subject key identifier:   D3:02:2A:55:21:6D:D2:CB:85:19:42:29:7E:9A:80:87:CD:DA:98:EE
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0ABB436AC2B45B89AE1ADB9BF92ECF58BC774A2E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3133362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        177.73.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:43:6a:c2:b4:5b:89:ae:1a:db:9b:f9:2e:cf:58:bc:77:4a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:20:cd:79:fc:7b:4d:75:03:3a:8f:5a:3f:
                    28:aa:4a:55:98:76:90:3d:1f:21:5f:b2:93:6b:80:
                    31:e5:5d:39:2c:80:a4:20:a7:6f:45:5f:d1:8e:d4:
                    5d:8c:1c:e5:55:5e:bf:4f:b5:f1:8e:34:c1:c8:a6:
                    5a:af:a6:b8:f6:1d:77:6c:5a:7c:d0:8e:a5:f4:9d:
                    c5:18:06:31:b8:dc:91:05:6f:92:40:eb:bc:df:a3:
                    82:5a:48:2f:73:5e:8f:a9:e1:09:9d:37:e8:88:5e:
                    d9:dd:7b:dd:77:8a:fd:d6:ca:80:03:3d:c0:d7:b4:
                    e1:c3:54:f2:8c:0f:86:77:9d:16:f8:17:ab:15:9e:
                    ae:99:b9:a3:a2:c5:8e:68:00:ea:2b:15:23:3e:9c:
                    42:44:31:2a:f1:53:33:83:8d:23:6c:dc:73:28:48:
                    63:47:29:da:4d:15:e6:89:94:26:e7:94:ea:87:75:
                    c7:65:03:e9:f9:6b:28:fe:6b:d0:a8:8b:64:a8:69:
                    02:00:d3:e5:1e:ad:c5:71:ae:76:01:fd:6e:08:14:
                    5a:ae:24:60:71:ad:67:12:50:5c:48:7c:d3:d4:2e:
                    d3:13:20:3c:37:d8:c8:b9:df:40:88:6a:23:83:ac:
                    34:54:57:d3:22:c1:95:87:68:17:1f:64:03:2b:55:
                    f0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:2A:55:21:6D:D2:CB:85:19:42:29:7E:9A:80:87:CD:DA:98:EE
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3133362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:cb:8e:56:df:bc:70:60:cc:b5:71:68:e6:8d:39:39:1a:
         2b:69:d2:c0:95:7a:a1:27:5e:8e:7d:c7:a9:a3:d1:c9:ad:10:
         04:d4:28:c7:82:cf:ca:ca:af:ab:25:6e:e5:bf:6a:81:fd:0b:
         72:33:25:81:5d:38:d6:6e:60:b7:91:54:17:c4:5c:8c:ea:8e:
         ee:42:bf:91:54:6e:c0:fd:bb:6b:61:bd:2c:96:d2:e0:c1:2d:
         06:43:85:60:e6:75:cd:9f:5d:7f:86:f5:77:1e:36:2d:57:80:
         d5:6b:28:8e:b4:5d:f9:64:88:b2:d9:41:25:4f:c0:dd:53:0d:
         71:63:5c:2d:40:d3:de:ce:6e:7a:00:79:c3:29:aa:3f:1e:12:
         57:82:a5:bf:11:08:87:95:14:42:fe:b4:e8:53:ff:87:38:26:
         b7:13:c6:a4:f4:5a:2e:6d:48:1e:85:3b:87:ca:85:b9:2e:86:
         91:a2:c4:80:58:99:28:35:a8:5c:93:00:0f:cb:8b:ac:29:2e:
         8d:16:6b:3b:3e:d6:4f:ae:33:27:5f:69:45:8f:cc:64:df:90:
         c2:d3:22:16:28:4e:a4:0c:f3:4c:2c:cc:f0:8e:10:5a:49:69:
         56:be:c1:7a:c6:4c:43:a8:6d:36:76:37:8e:3b:65:f8:e3:5b:
         71:06:f7:36
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUCrtDasK0W4muGtub+S7PWLx3Si4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjBaFw0yMzA0MjcxMzI5MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0RGODIwQ0Q3OUZDN0I0RDc1
MDMzQThGNUEzRjI4QUE0QTU1OTg3NjkwM0QxRjIxNUZCMjkzNkI4MDMxRTU1RDM5
MkM4MEE0MjBBNzZGNDU1RkQxOEVENDVEOEMxQ0U1NTU1RUJGNEZCNUYxOEUzNEMx
QzhBNjVBQUZBNkI4RjYxRDc3NkM1QTdDRDA4RUE1RjQ5REM1MTgwNjMxQjhEQzkx
MDU2RjkyNDBFQkJDREZBMzgyNUE0ODJGNzM1RThGQTlFMTA5OUQzN0U4ODg1RUQ5
REQ3QkRENzc4QUZERDZDQTgwMDMzREMwRDdCNEUxQzM1NEYyOEMwRjg2Nzc5RDE2
RjgxN0FCMTU5RUFFOTlCOUEzQTJDNThFNjgwMEVBMkIxNTIzM0U5QzQyNDQzMTJB
RjE1MzMzODM4RDIzNkNEQzczMjg0ODYzNDcyOURBNEQxNUU2ODk5NDI2RTc5NEVB
ODc3NUM3NjUwM0U5Rjk2QjI4RkU2QkQwQTg4QjY0QTg2OTAyMDBEM0U1MUVBREM1
NzFBRTc2MDFGRDZFMDgxNDVBQUUyNDYwNzFBRDY3MTI1MDVDNDg3Q0QzRDQyRUQz
MTMyMDNDMzdEOEM4QjlERjQwODg2QTIzODNBQzM0NTQ1N0QzMjJDMTk1ODc2ODE3
MUY2NDAzMkI1NUYwMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzfggzXn8e011AzqPWj8oqkpVmHaQPR8hX7KTa4Ax5V05LICkIKdv
RV/RjtRdjBzlVV6/T7XxjjTByKZar6a49h13bFp80I6l9J3FGAYxuNyRBW+SQOu8
36OCWkgvc16PqeEJnTfoiF7Z3Xvdd4r91sqAAz3A17Thw1TyjA+Gd50W+BerFZ6u
mbmjosWOaADqKxUjPpxCRDEq8VMzg40jbNxzKEhjRynaTRXmiZQm55Tqh3XHZQPp
+Wso/mvQqItkqGkCANPlHq3Fca52Af1uCBRariRgca1nElBcSHzT1C7TEyA8N9jI
ud9AiGojg6w0VFfTIsGVh2gXH2QDK1XwCQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNMCKlUhbdLLhRlCKX6agIfN2pjuMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzczMzJlMzEzMzM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArFJ
iDANBgkqhkiG9w0BAQsFAAOCAQEAkejLjlbfvHBgzLVxaOaNOTkaK2nSwJV6oSde
jn3HqaPRya0QBNQox4LPysqvqyVu5b9qgf0LcjMlgV041m5gt5FUF8RcjOqO7kK/
kVRuwP27a2G9LJbS4MEtBkOFYOZ1zZ9df4b1dx42LVeA1WsojrRd+WSIstlBJU/A
3VMNcWNcLUDT3s5uegB5wymqPx4SV4KlvxEIh5UUQv606FP/hzgmtxPGpPRaLm1I
HoU7h8qFuS6GkaLEgFiZKDWoXJMAD8uLrCkujRZrOz7WT64zJ19pRY/MZN+QwtMi
FihOpAzzTCzM8I4QWklpVr7BesZMQ6htNnY3jjtl+ONbcQb3Ng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org