Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e382e3234302e302f32312d3234203d3e203238333433.roa
File:                     3137372e382e3234302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          W2w7NJkEFRhacEVF3P55jnCyjWNU2wjBedvtPxdOZ8Y=
Subject key identifier:   D0:24:58:11:A5:0D:3D:54:8A:81:64:C6:92:05:09:64:03:E0:7E:B2
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       6916B7E675465EBBDF94611BBB105C8E1511804E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e382e3234302e302f32312d3234203d3e203238333433.roa
Signing time:             Tue 03 Jan 2023 11:21:10 +0000
ROA not before:           Tue 03 Jan 2023 11:16:10 +0000
ROA not after:            Tue 02 Jan 2024 11:21:10 +0000
asID:                     28343
IP address blocks:        177.8.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:16:b7:e6:75:46:5e:bb:df:94:61:1b:bb:10:5c:8e:15:11:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan  3 11:16:10 2023 GMT
            Not After : Jan  2 11:21:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:74:00:87:dc:c8:11:23:53:49:de:c1:e2:
                    7f:2e:0a:55:bb:9c:d2:82:bf:ae:82:fd:3f:61:d6:
                    77:06:d3:0a:fa:68:7b:8b:ba:2c:56:cd:99:d3:dc:
                    66:2e:e5:98:3f:80:63:6e:bd:40:16:6c:70:67:40:
                    b3:f0:fb:c8:47:83:0b:1b:54:1b:fd:e8:d0:8b:7d:
                    88:6e:0e:8f:06:f0:1e:10:e5:a8:9c:91:7d:86:3e:
                    6d:76:2f:68:2b:95:a2:af:42:cc:fd:ca:f3:aa:fa:
                    6f:a4:eb:82:91:27:d6:6c:51:cf:61:fc:bd:eb:d4:
                    e7:2c:28:c7:86:97:f3:74:a0:a6:07:bc:04:f5:33:
                    7c:e5:a4:d6:dc:eb:12:06:17:61:a2:5a:d7:94:6e:
                    97:e9:27:8b:b1:dd:29:9c:18:fe:90:44:75:3d:94:
                    4b:9d:dc:08:90:b1:0e:73:41:9b:1f:80:aa:71:4b:
                    1c:5e:09:8d:1b:11:5a:e9:a4:97:21:20:67:cd:a1:
                    b9:b8:31:8f:c1:69:fc:22:4e:0d:33:c0:fc:ec:7c:
                    9a:d6:57:56:d7:72:03:31:61:0b:95:96:0d:80:0c:
                    fb:4e:52:45:b4:ef:09:f9:23:9b:f1:e3:5e:ab:b9:
                    2c:42:ff:34:15:9d:39:9e:b8:12:1a:a1:5e:6a:e9:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:24:58:11:A5:0D:3D:54:8A:81:64:C6:92:05:09:64:03:E0:7E:B2
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e382e3234302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:00:fe:13:48:5b:30:4a:be:1a:eb:e4:0b:18:98:ef:cf:
         dc:96:5e:38:52:56:98:c0:0c:a2:30:de:6d:dc:69:05:22:a2:
         b7:07:02:e0:ef:a6:ee:09:9d:99:59:ec:ae:f7:40:a3:06:c1:
         c9:16:1a:40:04:ff:05:87:65:0a:25:bc:9d:64:76:c1:cc:5d:
         9b:05:71:2c:f5:91:5a:e6:2a:97:33:fe:ba:6e:f5:5c:1b:b9:
         a2:ae:38:ab:06:25:13:5b:8b:a4:fc:33:54:c9:4c:20:2b:f7:
         07:62:e1:50:50:bb:fe:e1:f7:3f:90:d5:1c:6f:67:5e:03:29:
         58:1d:b2:8b:6c:96:dd:5e:15:d5:70:8c:20:10:62:75:42:a3:
         4c:fe:f1:32:27:2b:99:ab:f0:6a:b1:7a:ea:e2:b4:ff:34:4f:
         ff:fc:8b:5d:b3:3f:4d:07:45:d2:47:bf:12:f0:3b:bd:f2:75:
         50:e0:e2:d9:ba:07:fe:ae:d9:a6:03:ac:70:89:e6:df:ee:46:
         7c:88:7b:c0:77:fb:c4:04:56:14:10:37:d1:14:5a:99:97:3e:
         43:cf:46:b9:2c:d7:86:0b:91:6e:4f:45:bb:95:5d:a5:89:71:
         ae:9d:18:63:ef:ef:84:9e:4d:98:a1:54:04:3e:84:f2:db:d7:
         be:46:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org