Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137392e3139302e39362e302f31392d3234203d3e203238333433.roa
File:                     3137392e3139302e39362e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          LMHNy5S2M2WCMg962BNoEu6/r7MoyCnXFAiEHD2ZKnA=
Subject key identifier:   33:27:AA:8A:06:51:62:8E:8F:F8:60:D0:3C:E5:F2:57:F3:46:81:D3
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0105567112139FB578FC19126E27D6ACA262D0E6
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137392e3139302e39362e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        179.190.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:05:56:71:12:13:9f:b5:78:fc:19:12:6e:27:d6:ac:a2:62:d0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:6a:7f:3e:35:b3:e5:b0:15:84:d8:43:0e:
                    3c:7e:f6:2b:4e:5c:74:ad:de:f3:9d:09:a7:a5:3c:
                    e0:13:bd:05:14:d7:58:4a:6e:a2:52:0d:f1:2b:04:
                    b4:99:7b:d9:12:36:04:22:69:db:57:fc:97:03:13:
                    a5:37:1e:c4:43:06:a8:f9:92:23:69:24:08:95:0a:
                    13:d4:7c:44:ba:0d:17:89:6c:a1:f5:9d:17:ca:3b:
                    b8:5b:e9:ff:b0:9c:0a:94:ee:b7:23:ac:10:f8:d2:
                    75:a2:9d:40:30:36:4d:c6:0e:04:02:8a:74:09:b0:
                    d2:0e:07:00:4d:58:2f:66:70:31:ac:5f:64:b1:90:
                    ec:39:94:0c:b4:bd:a5:c7:40:d6:9d:7c:97:45:8e:
                    c8:68:25:6e:69:44:61:8c:de:5c:33:70:d1:4f:d4:
                    67:3a:c1:ef:9d:e4:a1:74:03:79:c9:8d:b5:60:7f:
                    14:76:59:02:ab:83:ac:fb:03:f8:a8:3d:ef:c9:13:
                    83:fd:64:58:3e:6f:40:06:48:7c:0b:86:1b:dc:df:
                    51:52:7b:fa:aa:73:4a:56:1f:0a:d2:c8:7b:da:57:
                    82:2b:10:ed:5f:44:4d:57:a7:c8:13:f3:3d:ee:f6:
                    c5:86:e7:63:db:c9:07:d3:28:d9:38:af:92:b1:b1:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:27:AA:8A:06:51:62:8E:8F:F8:60:D0:3C:E5:F2:57:F3:46:81:D3
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137392e3139302e39362e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:d2:d2:a1:ca:a1:84:06:b0:ce:44:29:97:16:69:52:78:
         48:21:92:9f:d1:74:39:ef:2f:03:48:c2:16:ac:aa:05:8c:51:
         65:cd:ba:06:94:6d:58:a1:c5:06:da:00:47:b5:b6:0b:30:30:
         3b:d5:01:ae:44:df:a5:6d:d5:1d:99:83:d3:b6:4a:ca:d1:1d:
         58:e5:c5:fe:e7:ee:d9:b4:51:6a:3a:28:b6:fa:e2:ae:75:06:
         7d:c7:04:88:ce:23:94:a6:dc:47:07:20:d7:19:ce:47:f5:b2:
         c0:31:02:83:a9:4d:42:6d:f4:a5:d8:e8:fb:e9:b9:ac:f7:94:
         6d:60:cc:fc:11:d7:8e:55:05:9f:cc:e7:03:86:69:d1:16:eb:
         3d:d0:ae:09:70:13:18:4f:db:a2:a0:7f:bb:1c:d3:d9:06:7c:
         cb:a9:56:16:9e:10:32:99:d2:c5:9f:a7:54:2a:94:d2:30:44:
         c5:63:02:23:e7:2b:0e:cd:e7:e6:36:4a:64:ed:fc:e3:a8:56:
         1d:ac:c4:49:a7:84:29:9f:e7:86:27:b5:08:5a:89:44:54:64:
         89:d9:83:6e:bb:96:da:a8:a5:06:93:cb:48:0c:a1:9e:94:ea:
         03:67:34:7f:c8:98:0d:76:d9:16:b0:5d:d1:07:d5:89:a5:7d:
         10:fc:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org