Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e33372e3137322e302f32322d3234203d3e203238333433.roa
File:                     3139312e33372e3137322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          wPa2NL0sIL8KiYX38CVywLNW9iWzXeoTmp0WaIaJ2zQ=
Subject key identifier:   05:67:D2:88:1D:C5:8B:4D:55:0E:29:56:02:9E:35:20:45:CD:8E:0A
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       11D104281F8AF8E9E587F432B8FCE29F3B2A4BC1
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e33372e3137322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        191.37.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d1:04:28:1f:8a:f8:e9:e5:87:f4:32:b8:fc:e2:9f:3b:2a:4b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:89:d9:c3:10:4e:5b:24:74:0d:10:9b:c1:
                    5a:37:00:6f:30:b6:dd:83:66:dc:57:7b:cb:87:b1:
                    4a:83:cb:d3:08:f4:68:80:28:6a:33:b5:63:19:f7:
                    52:3f:21:bc:3d:82:fe:69:bb:9d:78:28:91:4b:a9:
                    39:5e:8d:24:1a:61:15:b3:ae:17:01:ca:70:f5:9a:
                    17:0a:41:4c:29:10:ba:9a:d4:20:75:7e:02:83:71:
                    28:dd:4c:ae:a5:d0:90:08:b5:a5:8b:59:9e:55:aa:
                    aa:dc:46:47:a2:22:00:a8:4c:6f:f7:76:a8:f1:53:
                    e4:74:56:f0:6c:a2:d2:b7:97:0d:0f:78:2d:26:71:
                    0d:f3:97:4a:6c:ba:1d:45:99:6e:42:2a:0e:fa:82:
                    f8:cf:37:80:41:c6:5e:fa:83:64:e5:61:49:e5:9a:
                    1e:15:c2:d3:10:4c:3b:6b:96:ef:85:20:e3:27:84:
                    0d:c0:d2:1a:b6:c8:d1:66:54:75:fa:7c:94:cf:6e:
                    c4:55:4d:a5:63:de:7a:cb:d4:c3:50:3c:cf:c7:7c:
                    0e:76:63:08:cc:1c:ca:96:2c:ae:ff:e2:29:48:fc:
                    1b:c2:60:21:e7:46:df:5e:d9:ed:3a:73:86:8a:d6:
                    6f:84:a0:ae:ec:db:7a:3f:93:00:dd:cb:e0:7a:56:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:D2:88:1D:C5:8B:4D:55:0E:29:56:02:9E:35:20:45:CD:8E:0A
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e33372e3137322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:6b:d2:50:56:32:35:88:39:8c:c9:3a:e6:be:27:7b:9d:
         41:0b:b0:7d:80:9e:56:63:00:8b:8a:e8:f5:91:d6:12:85:77:
         9d:08:6d:96:fd:14:e2:56:8a:70:95:4a:33:e2:f8:76:e2:5c:
         3c:00:c5:69:24:00:37:b7:ab:5c:19:2d:de:13:c3:fc:ca:da:
         a7:88:b1:96:63:f6:f3:d4:9c:fd:e5:2f:fb:3d:2c:f6:ad:80:
         cf:92:78:3b:33:20:24:73:13:41:84:7b:c0:63:ef:01:64:82:
         48:c1:bc:56:0c:ef:97:58:be:d5:19:7c:3f:9a:08:7a:d9:68:
         2d:0a:b3:62:94:da:bc:7e:e7:57:23:fe:e7:08:84:0d:30:7f:
         2f:ca:ff:a2:4c:db:1a:be:ba:0c:bf:a3:bd:d4:d5:af:84:20:
         e0:85:77:3e:5a:74:d5:e6:eb:08:9e:e9:48:35:c4:0c:bd:70:
         28:07:84:60:ac:78:2f:1a:85:45:78:cd:89:af:4d:f9:2b:e1:
         b0:96:a5:4c:4c:55:4d:7e:a3:33:60:a5:35:bf:91:5b:73:be:
         bd:c4:9a:cd:2e:87:d3:c5:a7:14:d0:fe:bf:58:b0:14:ce:d8:
         c9:7e:e2:d7:6a:46:88:3d:d6:26:1b:29:62:84:d9:e9:8c:f8:
         94:56:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org