Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa
File:                     3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          vuKl/zy8ehyuvFfTNeHp+iqOFvbpKaGqbvuBfCKALLw=
Subject key identifier:   DB:E4:8E:83:F9:5B:A0:C6:67:B4:4F:CF:67:E9:2D:DC:7C:46:82:AC
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3F5DD29771E04159F28DC59E3D0C398C4FFB2638
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        187.108.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5d:d2:97:71:e0:41:59:f2:8d:c5:9e:3d:0c:39:8c:4f:fb:26:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:17:de:cf:c5:f8:35:5c:ad:7f:3c:fc:4b:
                    dc:49:51:ca:85:db:2b:2b:30:4b:d0:2a:42:4f:a8:
                    68:2f:6e:09:56:d2:e5:75:08:99:7f:af:d7:0b:ac:
                    ff:67:69:0c:cc:ff:c6:46:f9:a8:3b:bc:42:db:28:
                    fe:37:af:dd:73:e4:eb:05:f6:d5:10:44:2d:c0:3e:
                    01:d8:06:32:d5:30:c0:a4:76:68:ba:68:3f:64:91:
                    06:08:77:63:01:ef:b6:72:0f:d4:51:cd:e3:78:f1:
                    5e:91:ab:71:fe:39:f0:5a:72:cb:47:6d:71:10:64:
                    b9:f8:66:31:4d:00:1c:cf:54:6f:b6:06:d9:1b:80:
                    30:40:4e:a6:ad:f9:e7:54:cf:c0:ec:4d:a2:9e:d1:
                    c4:66:c1:c2:df:58:40:05:de:15:9e:f1:f6:82:8a:
                    10:29:6d:70:07:51:59:f8:d9:c0:ed:7f:f7:25:b2:
                    02:57:c9:3d:01:ea:ca:d2:52:76:c0:6a:4d:61:84:
                    2d:07:50:20:95:b3:f0:1f:1f:45:02:d5:8f:23:1e:
                    88:98:50:aa:2d:30:bc:ee:24:39:ae:c4:88:bb:f1:
                    c5:c6:03:7e:05:9e:f4:59:bc:46:11:64:f1:ea:26:
                    2b:06:df:b3:85:bf:f5:57:f8:54:36:ba:45:36:d0:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:8E:83:F9:5B:A0:C6:67:B4:4F:CF:67:E9:2D:DC:7C:46:82:AC
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:84:e4:3e:6b:b4:79:43:ef:1a:dc:86:be:61:7d:72:a5:81:
         6c:af:f0:9b:43:ba:86:7c:19:71:64:a9:79:12:3c:cc:3d:35:
         8d:85:30:b2:9b:af:b4:92:ba:fa:b8:70:2a:d0:2b:5c:7a:3e:
         51:e7:c8:12:8a:77:3f:3a:98:48:35:76:e9:f0:2e:87:ea:76:
         07:8f:79:af:f4:04:fb:2b:c7:1e:9b:b8:cc:d0:a5:d6:85:f8:
         be:2e:31:0d:0c:a7:d5:35:7f:ba:32:c8:d4:69:30:0b:f0:ec:
         1e:e3:2b:9b:ad:da:47:4a:9c:34:a8:e9:36:1c:42:7b:ef:43:
         c6:7c:40:84:d7:37:c9:5c:12:b8:4e:27:ab:02:5f:09:7b:ae:
         44:84:23:b1:b3:5e:77:72:c4:4e:42:0e:d8:80:1c:ed:c0:6a:
         92:f8:d8:25:a9:17:a7:6a:7e:89:38:ec:f2:a6:84:80:53:8d:
         a6:f7:c3:36:bd:54:16:3f:18:8a:43:5f:a3:75:cd:9f:67:36:
         a9:a8:b8:da:41:47:e6:d4:59:15:b3:32:14:2c:e0:ad:63:fa:
         e8:0b:5b:ae:00:50:dc:d0:01:8e:c9:2d:62:08:c9:13:4f:02:
         c5:9b:8e:6c:58:fd:5d:00:10:2f:98:f1:f4:65:09:af:0b:42:
         21:19:c8:f6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUP13Sl3HgQVnyjcWePQw5jE/7JjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjBaFw0yMzA0MjcxMzI5MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUVGNjE3REVDRkM1RjgzNTVD
QUQ3RjNDRkM0QkRDNDk1MUNBODVEQjJCMkIzMDRCRDAyQTQyNEZBODY4MkY2RTA5
NTZEMkU1NzUwODk5N0ZBRkQ3MEJBQ0ZGNjc2OTBDQ0NGRkM2NDZGOUE4M0JCQzQy
REIyOEZFMzdBRkRENzNFNEVCMDVGNkQ1MTA0NDJEQzAzRTAxRDgwNjMyRDUzMEMw
QTQ3NjY4QkE2ODNGNjQ5MTA2MDg3NzYzMDFFRkI2NzIwRkQ0NTFDREUzNzhGMTVF
OTFBQjcxRkUzOUYwNUE3MkNCNDc2RDcxMTA2NEI5Rjg2NjMxNEQwMDFDQ0Y1NDZG
QjYwNkQ5MUI4MDMwNDA0RUE2QURGOUU3NTRDRkMwRUM0REEyOUVEMUM0NjZDMUMy
REY1ODQwMDVERTE1OUVGMUY2ODI4QTEwMjk2RDcwMDc1MTU5RjhEOUMwRUQ3RkY3
MjVCMjAyNTdDOTNEMDFFQUNBRDI1Mjc2QzA2QTRENjE4NDJEMDc1MDIwOTVCM0Yw
MUYxRjQ1MDJENThGMjMxRTg4OTg1MEFBMkQzMEJDRUUyNDM5QUVDNDg4QkJGMUM1
QzYwMzdFMDU5RUY0NTlCQzQ2MTE2NEYxRUEyNjJCMDZERkIzODVCRkY1NTdGODU0
MzZCQTQ1MzZEMDNFOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnvYX3s/F+DVcrX88/EvcSVHKhdsrKzBL0CpCT6hoL24JVtLldQiZ
f6/XC6z/Z2kMzP/GRvmoO7xC2yj+N6/dc+TrBfbVEEQtwD4B2AYy1TDApHZoumg/
ZJEGCHdjAe+2cg/UUc3jePFekatx/jnwWnLLR21xEGS5+GYxTQAcz1RvtgbZG4Aw
QE6mrfnnVM/A7E2intHEZsHC31hABd4VnvH2gooQKW1wB1FZ+NnA7X/3JbICV8k9
AerK0lJ2wGpNYYQtB1AglbPwHx9FAtWPIx6ImFCqLTC87iQ5rsSIu/HFxgN+BZ70
WbxGEWTx6iYrBt+zhb/1V/hUNrpFNtA+nwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNvkjoP5W6DGZ7RPz2fpLdx8RoKsMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzgzNzJlMzEzMDM4MmUzMjMw
MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
u2zQMA0GCSqGSIb3DQEBCwUAA4IBAQBAhOQ+a7R5Q+8a3Ia+YX1ypYFsr/CbQ7qG
fBlxZKl5EjzMPTWNhTCym6+0krr6uHAq0Ctcej5R58gSinc/OphINXbp8C6H6nYH
j3mv9AT7K8cem7jM0KXWhfi+LjENDKfVNX+6MsjUaTAL8Owe4yubrdpHSpw0qOk2
HEJ770PGfECE1zfJXBK4TierAl8Je65EhCOxs153csROQg7YgBztwGqS+NglqRen
an6JOOzypoSAU42m98M2vVQWPxiKQ1+jdc2fZzapqLjaQUfm1FkVszIULOCtY/ro
C1uuAFDc0AGOyS1iCMkTTwLFm45sWP1dABAvmPH0ZQmvC0IhGcj2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org