Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e35322e3234302e302f32312d3234203d3e203238333433.roa
File:                     3139312e35322e3234302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          E1n/8uCREixp96LC5uDMMB0V17SQyoqHSKZ6DQMovTA=
Subject key identifier:   D4:6A:10:9D:E2:14:7C:2B:A9:0F:A6:23:12:B2:05:E1:D3:77:B1:18
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1528E8DE7096B560A0F45F8E194B75768F37F048
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e35322e3234302e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        191.52.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:28:e8:de:70:96:b5:60:a0:f4:5f:8e:19:4b:75:76:8f:37:f0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:f4:ec:5b:72:e3:3e:86:c6:df:8d:1c:4c:
                    f8:34:a9:9e:bf:b2:dd:4f:4c:8c:c7:91:61:0f:d4:
                    64:a0:13:9f:e4:d9:f0:49:9e:ee:4d:16:c3:b8:88:
                    50:47:0c:3e:d4:a9:81:b8:a3:d2:58:77:09:7f:41:
                    b1:a1:8c:2d:df:62:97:dd:b6:80:c0:e2:03:14:6c:
                    f9:e7:0b:7c:95:9f:e8:c9:26:97:aa:9c:f9:49:3b:
                    78:81:85:87:79:e5:9b:17:f7:2a:13:ff:97:bd:29:
                    3d:93:40:49:b6:b8:23:91:e9:bb:51:db:68:5a:08:
                    88:72:52:56:1d:95:40:0b:04:83:9f:77:3c:22:5c:
                    26:7c:16:8c:0b:2e:a3:27:5c:bb:e6:99:3b:a3:9f:
                    69:d1:c3:85:14:a4:71:75:37:84:a3:98:61:a3:0f:
                    c9:e8:d5:98:b8:65:e7:79:c5:72:d7:ab:5c:57:cf:
                    d9:49:06:34:df:e7:e9:51:0a:26:32:28:86:85:75:
                    7d:6d:65:e3:f3:03:c3:87:4c:bf:89:f8:fa:b0:23:
                    5c:95:40:4d:bc:13:17:29:b6:9b:91:b8:8b:7d:64:
                    3b:aa:6b:27:0a:8d:66:b6:8d:4a:e8:4c:28:2d:3a:
                    9e:74:80:a6:8f:2a:ad:73:29:ce:b9:1a:34:77:5c:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:10:9D:E2:14:7C:2B:A9:0F:A6:23:12:B2:05:E1:D3:77:B1:18
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e35322e3234302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:9d:50:f9:46:95:5c:96:2c:a8:59:b8:cf:f4:07:f4:f8:
         6b:1c:ff:eb:c2:3e:4d:98:26:b6:34:53:86:d1:0f:bb:47:75:
         25:5c:e4:88:9f:3f:c4:74:fa:60:ba:6e:5b:e1:86:ce:c3:78:
         b0:ad:2e:19:95:43:ff:82:77:f7:dc:ee:7f:73:a3:eb:19:15:
         0b:79:9c:c8:31:c3:d6:75:06:ee:9d:1a:2a:23:0e:6c:55:27:
         a6:16:68:ce:8b:98:56:64:83:38:73:0e:18:05:e8:17:1d:0b:
         31:d0:ca:5c:18:6d:19:90:e7:ef:ac:41:87:69:18:a2:66:cb:
         c1:82:b6:c3:ea:fc:ac:79:86:88:56:8a:fb:52:ed:bc:87:38:
         bd:8d:8d:4a:90:fb:69:0e:24:14:3d:34:f2:5f:b7:a8:57:32:
         f3:40:d0:80:96:5b:86:81:e7:33:59:a8:ce:bc:ae:11:2c:32:
         06:ec:8b:77:b5:0f:e7:8b:7f:eb:55:00:52:74:95:e0:03:1c:
         78:fe:02:70:59:ee:3f:4d:ba:30:8d:a1:64:3d:30:f7:dd:0b:
         6e:e3:fa:1b:70:cc:fd:94:7b:f9:04:17:7e:18:fd:1b:e8:7b:
         0d:70:c7:08:c7:5c:14:55:0b:f7:21:cf:37:7b:19:6f:65:e0:
         34:3a:c0:1c
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUFSjo3nCWtWCg9F+OGUt1do838EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjBaFw0yMzA0MjcxMzI5MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI4NUY0RUM1QjcyRTMzRTg2
QzZERjhEMUM0Q0Y4MzRBOTlFQkZCMkRENEY0QzhDQzc5MTYxMEZENDY0QTAxMzlG
RTREOUYwNDk5RUVFNEQxNkMzQjg4ODUwNDcwQzNFRDRBOTgxQjhBM0QyNTg3NzA5
N0Y0MUIxQTE4QzJEREY2Mjk3RERCNjgwQzBFMjAzMTQ2Q0Y5RTcwQjdDOTU5RkU4
QzkyNjk3QUE5Q0Y5NDkzQjc4ODE4NTg3NzlFNTlCMTdGNzJBMTNGRjk3QkQyOTNE
OTM0MDQ5QjZCODIzOTFFOUJCNTFEQjY4NUEwODg4NzI1MjU2MUQ5NTQwMEIwNDgz
OUY3NzNDMjI1QzI2N0MxNjhDMEIyRUEzMjc1Q0JCRTY5OTNCQTM5RjY5RDFDMzg1
MTRBNDcxNzUzNzg0QTM5ODYxQTMwRkM5RThENTk4Qjg2NUU3NzlDNTcyRDdBQjVD
NTdDRkQ5NDkwNjM0REZFN0U5NTEwQTI2MzIyODg2ODU3NTdENkQ2NUUzRjMwM0Mz
ODc0Q0JGODlGOEZBQjAyMzVDOTU0MDREQkMxMzE3MjlCNjlCOTFCODhCN0Q2NDNC
QUE2QjI3MEE4RDY2QjY4RDRBRTg0QzI4MkQzQTlFNzQ4MEE2OEYyQUFENzMyOUNF
QjkxQTM0Nzc1Qzg5OEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4oX07Fty4z6Gxt+NHEz4NKmev7LdT0yMx5FhD9RkoBOf5NnwSZ7u
TRbDuIhQRww+1KmBuKPSWHcJf0GxoYwt32KX3baAwOIDFGz55wt8lZ/oySaXqpz5
STt4gYWHeeWbF/cqE/+XvSk9k0BJtrgjkem7UdtoWgiIclJWHZVACwSDn3c8Ilwm
fBaMCy6jJ1y75pk7o59p0cOFFKRxdTeEo5hhow/J6NWYuGXnecVy16tcV8/ZSQY0
3+fpUQomMiiGhXV9bWXj8wPDh0y/ifj6sCNclUBNvBMXKbabkbiLfWQ7qmsnCo1m
to1K6EwoLTqedICmjyqtcynOuRo0d1yJiwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNRqEJ3iFHwrqQ+mIxKyBeHTd7EYMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzkzMTJlMzUzMjJlMzIzNDMw
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA780
8DANBgkqhkiG9w0BAQsFAAOCAQEAocadUPlGlVyWLKhZuM/0B/T4axz/68I+TZgm
tjRThtEPu0d1JVzkiJ8/xHT6YLpuW+GGzsN4sK0uGZVD/4J399zuf3Oj6xkVC3mc
yDHD1nUG7p0aKiMObFUnphZozouYVmSDOHMOGAXoFx0LMdDKXBhtGZDn76xBh2kY
ombLwYK2w+r8rHmGiFaK+1LtvIc4vY2NSpD7aQ4kFD008l+3qFcy80DQgJZbhoHn
M1mozryuESwyBuyLd7UP54t/61UAUnSV4AMceP4CcFnuP026MI2hZD0w990LbuP6
G3DM/ZR7+QQXfhj9G+h7DXDHCMdcFFUL9yHPN3sZb2XgNDrAHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org