Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37342e3234302e302f32302d3234203d3e203238333433.roa
File:                     3137372e37342e3234302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          sOV+395xesnb/kmu4Z7Owm0GjvNZoRfhKNzY9oi8cdg=
Subject key identifier:   99:28:D4:B6:8D:B0:E6:46:CA:F3:F1:DF:71:37:D9:CA:26:32:62:42
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1FF1281509863007C48EA49E62AC960843F390D7
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37342e3234302e302f32302d3234203d3e203238333433.roa
Signing time:             Tue 30 Aug 2022 12:01:49 +0000
ROA not before:           Tue 30 Aug 2022 11:56:49 +0000
ROA not after:            Tue 29 Aug 2023 12:01:49 +0000
asID:                     28343
IP address blocks:        177.74.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f1:28:15:09:86:30:07:c4:8e:a4:9e:62:ac:96:08:43:f3:90:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Aug 30 11:56:49 2022 GMT
            Not After : Aug 29 12:01:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:36:dc:ff:b9:56:18:99:25:7c:d0:1b:44:
                    b5:af:35:b0:af:a3:73:62:bf:ce:23:06:78:d2:6b:
                    b9:4c:e7:56:44:e5:5c:72:f3:c2:b1:f1:f8:f2:ac:
                    8b:19:eb:43:2c:a0:15:1f:73:74:b1:16:d4:f2:01:
                    7b:d3:0f:7e:56:1d:85:77:7f:d6:53:76:31:8b:36:
                    46:88:ae:50:49:22:26:e8:9d:8d:4c:fa:02:20:04:
                    4a:d6:dc:6f:79:3a:e3:da:73:eb:e1:0b:33:4e:6a:
                    c5:60:f6:00:aa:96:68:95:41:9e:d9:b4:27:be:13:
                    86:0d:29:b0:1c:08:2c:07:9d:ba:00:26:92:92:09:
                    86:65:99:7a:3d:6d:90:1e:a0:fb:04:9b:79:f3:f5:
                    eb:0d:c3:71:c6:6d:a3:3a:c3:9f:3e:2f:9c:03:ac:
                    17:33:b2:3b:97:1c:9c:08:2f:7e:16:d1:08:c0:0b:
                    f1:e8:dc:ba:27:07:9f:59:6f:71:20:a0:4a:a4:68:
                    a0:bc:7a:f8:f7:76:3c:79:55:44:07:22:71:47:a2:
                    43:55:1a:96:4b:6b:5e:70:24:40:5f:f2:ad:87:26:
                    42:ab:7e:6a:2b:b5:a6:de:f5:45:30:2f:55:89:f5:
                    96:91:25:e1:75:90:88:8d:9a:89:ff:b6:db:d4:39:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:D4:B6:8D:B0:E6:46:CA:F3:F1:DF:71:37:D9:CA:26:32:62:42
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37342e3234302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:f6:7b:9e:c8:ed:81:c2:20:e5:6f:56:49:26:3f:53:98:
         85:2b:5e:f3:cc:40:e2:01:4f:22:a4:89:a6:bc:ba:3b:3e:08:
         3a:f0:14:40:82:06:cb:42:04:60:ea:f2:6c:f8:a7:98:6f:a8:
         5d:53:5b:1c:97:bc:c5:34:ab:a8:80:9d:d2:8b:4b:91:9c:2c:
         43:3e:cd:78:15:3b:62:ea:b3:7e:ea:6f:2b:46:4f:14:fb:d9:
         45:fa:f2:ea:8b:2a:cb:57:4d:63:04:d9:ac:f5:e7:40:2a:cb:
         ac:54:1f:d0:2b:81:a9:6c:79:ed:30:37:b1:c8:86:47:5b:11:
         c0:d5:1a:57:3b:8d:2c:4c:12:24:94:3b:ee:2a:69:a4:c7:86:
         d2:fb:4d:cb:89:6e:06:15:08:44:26:73:a8:d2:4c:5a:08:a8:
         17:74:6a:b3:1a:0c:ad:f7:16:36:5b:ab:89:04:fe:95:84:26:
         5d:14:0f:d1:78:59:70:51:6e:25:3f:f6:82:49:ae:d5:04:82:
         51:4f:64:ac:28:2d:b1:2d:b0:44:8e:71:88:c3:c3:52:eb:dd:
         db:b3:bd:60:61:85:d0:70:f3:c2:59:e4:0b:9d:2c:ab:5c:ce:
         69:12:f4:95:d9:a8:52:09:12:66:18:ee:8c:fb:38:f0:94:ae:
         26:eb:a2:17
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUH/EoFQmGMAfEjqSeYqyWCEPzkNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA4MzAxMTU2NDlaFw0yMzA4MjkxMjAxNDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM3NDM2RENGRkI5NTYxODk5
MjU3Q0QwMUI0NEI1QUYzNUIwQUZBMzczNjJCRkNFMjMwNjc4RDI2QkI5NENFNzU2
NDRFNTVDNzJGM0MyQjFGMUY4RjJBQzhCMTlFQjQzMkNBMDE1MUY3Mzc0QjExNkQ0
RjIwMTdCRDMwRjdFNTYxRDg1Nzc3RkQ2NTM3NjMxOEIzNjQ2ODhBRTUwNDkyMjI2
RTg5RDhENENGQTAyMjAwNDRBRDZEQzZGNzkzQUUzREE3M0VCRTEwQjMzNEU2QUM1
NjBGNjAwQUE5NjY4OTU0MTlFRDlCNDI3QkUxMzg2MEQyOUIwMUMwODJDMDc5REJB
MDAyNjkyOTIwOTg2NjU5OTdBM0Q2RDkwMUVBMEZCMDQ5Qjc5RjNGNUVCMERDMzcx
QzY2REEzM0FDMzlGM0UyRjlDMDNBQzE3MzNCMjNCOTcxQzlDMDgyRjdFMTZEMTA4
QzAwQkYxRThEQ0JBMjcwNzlGNTk2RjcxMjBBMDRBQTQ2OEEwQkM3QUY4Rjc3NjND
Nzk1NTQ0MDcyMjcxNDdBMjQzNTUxQTk2NEI2QjVFNzAyNDQwNUZGMkFEODcyNjQy
QUI3RTZBMkJCNUE2REVGNTQ1MzAyRjU1ODlGNTk2OTEyNUUxNzU5MDg4OEQ5QTg5
RkZCNkRCRDQzOTExOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArHQ23P+5VhiZJXzQG0S1rzWwr6NzYr/OIwZ40mu5TOdWROVccvPC
sfH48qyLGetDLKAVH3N0sRbU8gF70w9+Vh2Fd3/WU3YxizZGiK5QSSIm6J2NTPoC
IARK1txveTrj2nPr4QszTmrFYPYAqpZolUGe2bQnvhOGDSmwHAgsB526ACaSkgmG
ZZl6PW2QHqD7BJt58/XrDcNxxm2jOsOfPi+cA6wXM7I7lxycCC9+FtEIwAvx6Ny6
JwefWW9xIKBKpGigvHr493Y8eVVEByJxR6JDVRqWS2tecCRAX/KthyZCq35qK7Wm
3vVFMC9VifWWkSXhdZCIjZqJ/7bb1DkRlwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJko1LaNsOZGyvPx33E32comMmJCMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzczNDJlMzIzNDMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLFK
8DANBgkqhkiG9w0BAQsFAAOCAQEAan72e57I7YHCIOVvVkkmP1OYhSte88xA4gFP
IqSJpry6Oz4IOvAUQIIGy0IEYOrybPinmG+oXVNbHJe8xTSrqICd0otLkZwsQz7N
eBU7YuqzfupvK0ZPFPvZRfry6osqy1dNYwTZrPXnQCrLrFQf0CuBqWx57TA3sciG
R1sRwNUaVzuNLEwSJJQ77ipppMeG0vtNy4luBhUIRCZzqNJMWgioF3RqsxoMrfcW
NluriQT+lYQmXRQP0XhZcFFuJT/2gkmu1QSCUU9krCgtsS2wRI5xiMPDUuvd27O9
YGGF0HDzwlnkC50sq1zOaRL0ldmoUgkSZhjujPs48JSuJuuiFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org