Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3134302e302f32322d3234203d3e203238333433.roa
File:                     3137372e37332e3134302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          MenF91rfaESzrDpJLffvLjsjlPm3CIWSH3QO4k/pNBc=
Subject key identifier:   71:00:95:FA:77:06:D8:F8:38:6C:26:E1:0C:91:4B:3E:C6:1C:17:5F
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1FCDC7E8A7F80265A2A50A0CB658AFDD435C8ACF
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3134302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        177.73.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cd:c7:e8:a7:f8:02:65:a2:a5:0a:0c:b6:58:af:dd:43:5c:8a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:83:d5:99:70:3f:90:21:b5:15:d7:95:e4:
                    aa:37:ca:03:f4:82:ac:e7:e6:35:63:61:9e:d8:82:
                    e5:25:04:80:84:8d:69:db:bb:12:fc:5a:a8:bf:49:
                    2c:48:30:25:76:22:cc:11:67:66:3e:0a:5b:e8:fd:
                    26:eb:62:cb:b0:95:e9:85:d8:42:e7:03:e3:d3:02:
                    7f:62:da:9f:7c:77:4e:cc:60:db:6a:39:02:56:76:
                    7a:b9:b9:6a:46:27:b6:21:92:27:cb:60:23:63:80:
                    d6:32:0e:c0:26:2a:c9:fe:94:ae:db:54:07:98:ab:
                    97:a7:7c:ae:a7:7e:71:0a:aa:d9:ee:a7:43:a4:eb:
                    7f:06:4f:ad:bf:da:9c:6f:8a:75:22:9b:51:e5:70:
                    72:b2:d7:97:71:8f:dc:52:4a:bc:38:d9:b2:84:46:
                    10:9e:4a:2e:0c:42:2a:d5:0e:22:26:70:5b:d6:ce:
                    cc:37:7d:1e:24:42:ba:0b:53:56:f1:56:6d:6c:7f:
                    4e:48:14:57:c5:f6:2e:a7:c9:86:3e:c6:e2:bd:87:
                    45:f9:b5:1a:76:a6:ea:f8:60:b5:52:ca:52:50:6b:
                    14:86:fc:f5:ee:f8:46:6f:bb:49:4a:c2:ec:77:72:
                    79:ec:5e:58:ff:95:bb:f4:f3:77:6b:14:7c:8a:e0:
                    b5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:00:95:FA:77:06:D8:F8:38:6C:26:E1:0C:91:4B:3E:C6:1C:17:5F
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3134302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:06:8b:32:50:7d:d0:22:23:d4:e7:90:f3:dd:95:44:6f:
         0a:89:a2:25:56:64:74:41:53:56:9e:96:a7:cd:22:f7:f0:c4:
         32:87:b8:b6:59:91:a1:fc:af:a0:a6:cb:6b:13:29:11:98:00:
         d0:54:36:35:1b:d8:be:a0:f9:9d:22:b1:7f:2f:9a:fb:a0:64:
         68:df:00:8f:f2:e9:8a:51:16:3e:da:1e:c3:47:fe:d6:13:32:
         0b:0a:a6:f9:64:41:78:1e:22:b9:7a:8f:06:aa:c5:8b:43:1a:
         29:2e:c0:02:4e:53:6d:ef:f9:f1:38:9e:cf:74:b5:5c:b9:0d:
         ea:96:75:7a:4e:1c:1d:65:91:99:dc:58:01:8c:0b:b4:d1:56:
         01:92:b4:76:9d:30:7d:a8:e5:d2:ae:01:0c:b7:55:60:bb:a3:
         98:a8:b6:6f:e1:03:bb:a3:47:c7:27:a7:54:d6:19:3b:9b:74:
         3a:50:2b:39:65:ab:ad:c7:84:44:2d:01:87:ef:24:f1:93:79:
         a8:65:55:50:aa:d0:79:76:94:22:b2:25:0f:bb:3a:b9:00:ee:
         98:22:fb:b5:44:72:02:18:67:84:05:0f:5c:5d:ad:b3:57:7a:
         6b:d6:b6:2a:4a:2e:57:52:dd:c4:63:c4:a6:98:f0:42:29:c1:
         ab:8d:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org