Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3138342e302f32322d3234203d3e203238333433.roa
File:                     3137372e37332e3138342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          ssV48R/6509cGk3G+Dn0WsUltfF1CAFzX6hU07ZK5q0=
Subject key identifier:   45:FA:20:9B:E1:9E:A8:A1:BB:3C:45:CE:49:68:50:22:B7:AA:09:1B
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       4F49841316616104576F8A66743D93DD25438DC7
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3138342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        177.73.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:49:84:13:16:61:61:04:57:6f:8a:66:74:3d:93:dd:25:43:8d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:a4:03:fe:9a:b2:cf:28:62:bd:ba:27:9d:
                    d1:73:7d:ce:1c:c5:d8:7b:3e:47:ce:2c:0e:29:7c:
                    c8:45:62:e0:3b:ef:3a:6e:f7:2c:1a:7f:4d:0b:34:
                    43:18:62:6f:74:60:69:ca:5c:70:77:f1:29:c1:13:
                    3e:fd:41:42:e1:19:76:60:b9:44:84:6c:0b:ad:02:
                    1f:e9:64:2e:ac:b8:18:3a:a1:48:0a:85:93:ca:b6:
                    2a:3b:f9:96:ba:ac:a5:08:4c:6d:de:52:2e:0b:c4:
                    21:44:5d:3d:7c:71:dc:3e:83:46:9c:ea:88:1b:c4:
                    68:9a:1b:9d:73:a9:e6:34:5b:c0:5e:9c:b8:4e:e6:
                    9b:cb:66:05:0e:52:55:95:df:60:05:70:5b:f4:90:
                    88:52:11:ea:69:e0:6e:69:87:ff:7b:3e:bb:1c:0b:
                    24:ef:1f:18:03:94:12:95:b3:65:91:80:96:4a:fc:
                    1f:db:51:27:0e:c9:16:2c:df:f0:8f:62:c9:7f:97:
                    ea:66:37:4f:46:09:c6:85:77:88:09:e4:ab:68:09:
                    54:05:8c:50:9d:2c:9f:b1:bc:0a:0b:01:14:d4:1c:
                    78:b9:6b:65:09:21:d3:96:87:10:6d:d8:17:89:ed:
                    6f:60:d3:94:3f:29:cb:50:b1:37:ed:ac:80:ce:2d:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:20:9B:E1:9E:A8:A1:BB:3C:45:CE:49:68:50:22:B7:AA:09:1B
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37332e3138342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:b9:a3:20:00:1e:37:b6:6d:cc:2a:7e:a2:39:fa:43:1c:
         59:34:2f:b2:9b:3e:d1:5d:73:b8:68:4f:6d:a2:df:29:6e:af:
         86:53:23:b3:90:e0:ca:b0:7f:0a:fc:7c:73:a1:4e:df:aa:df:
         32:09:0b:60:3c:1f:93:07:5d:9b:ef:d0:76:7e:2e:82:55:ae:
         8e:bd:72:54:b8:b3:05:14:62:ba:81:e6:b3:cb:47:05:74:57:
         4f:02:b0:81:cf:f1:68:73:0d:65:1a:e9:36:5f:84:5f:f6:de:
         de:08:a6:6b:4f:a4:a0:f0:39:32:9f:9b:03:db:b4:56:df:ca:
         1b:0b:25:09:9b:a1:cf:24:8a:ff:38:20:64:8c:ab:94:07:3f:
         28:8f:f0:1a:cc:c2:f0:d4:fd:9b:d5:e2:9d:1e:ef:6c:ff:8d:
         16:58:0f:d4:25:9d:35:e5:1b:3f:33:e8:ff:ed:46:56:ff:9a:
         23:2a:47:dd:10:a2:bd:43:bf:df:7f:c9:88:21:a2:90:5b:33:
         c6:6e:85:88:a0:b6:f2:95:7c:d6:4e:b2:4b:bf:a2:0d:d2:5b:
         01:68:e9:08:88:3e:23:9a:18:f7:41:ac:d3:ba:17:ce:59:fa:
         91:32:c1:52:49:d7:fa:f8:ad:48:cd:9d:12:ab:2a:81:a1:b1:
         7d:3b:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org