Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230302e31302e342e302f32322d3234203d3e203238333433.roa
File:                     3230302e31302e342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          XFmofRZRZfxytCLaUOjJDkGoGeQNDzqmEjKSQUM1trY=
Subject key identifier:   55:72:36:AD:B4:5E:B1:CF:DA:C8:72:53:48:3E:11:43:AF:BC:0A:3A
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       454B87A014125C1DFF02A077BD3F20CBB97BCE6D
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230302e31302e342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:17 +0000
ROA not before:           Thu 28 Apr 2022 13:24:17 +0000
ROA not after:            Thu 27 Apr 2023 13:29:17 +0000
asID:                     28343
IP address blocks:        200.10.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:87:a0:14:12:5c:1d:ff:02:a0:77:bd:3f:20:cb:b9:7b:ce:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:17 2022 GMT
            Not After : Apr 27 13:29:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:c8:ef:b3:e1:c5:fd:38:b5:14:a9:e7:1e:
                    9d:ae:2e:73:aa:45:57:9a:64:71:69:eb:11:7b:dc:
                    2a:c0:95:8e:24:fe:9d:a3:74:4a:33:a4:a7:40:80:
                    e7:36:1e:9f:0a:d4:fc:b1:b3:aa:19:c7:17:53:11:
                    d5:11:58:92:da:2b:85:32:85:ce:92:af:12:fa:65:
                    80:d8:ec:b8:41:7e:10:97:73:7b:b5:2e:63:b3:eb:
                    88:1e:44:da:7d:41:56:d8:15:87:44:4b:0c:a6:c5:
                    1d:88:d3:95:fc:c7:96:86:a1:27:ec:17:7d:dd:86:
                    76:ad:ec:a6:cb:d9:f5:e7:71:31:0b:db:ff:6e:5d:
                    19:73:68:e0:4a:a8:17:a9:0f:6a:db:60:1e:de:65:
                    f7:8e:b0:7b:1b:5a:71:9b:fb:d9:ff:d5:f8:74:0c:
                    dd:10:aa:4d:fe:1e:26:f5:84:58:dc:26:f3:06:2e:
                    d7:de:7c:23:13:d2:d0:27:61:08:0f:cb:6d:13:24:
                    3f:59:80:20:4d:4c:76:f3:e2:5b:b8:b7:d3:c2:24:
                    69:68:72:d9:b5:2a:9a:5d:21:6e:b9:e6:9b:5d:c1:
                    04:4f:60:15:85:b3:a5:b4:bc:4a:9c:0d:4f:82:37:
                    a1:b2:76:15:59:ba:d3:08:01:8f:0c:c4:8d:3b:1a:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:72:36:AD:B4:5E:B1:CF:DA:C8:72:53:48:3E:11:43:AF:BC:0A:3A
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230302e31302e342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:55:15:5c:85:c8:77:b1:49:09:b4:ab:9e:4d:ca:0d:64:99:
         67:54:a8:e9:4f:be:06:d0:c8:6c:ee:a9:fd:42:06:b1:e4:20:
         ba:ed:8a:9f:de:39:9b:38:5a:aa:4d:19:7c:f8:b2:8c:be:98:
         58:84:bd:eb:4a:e7:75:b1:6b:5f:5a:ae:02:36:a5:bb:4b:a3:
         60:a7:55:a7:01:da:dd:a9:09:71:2c:07:b0:10:40:ec:68:6d:
         f1:7e:f1:60:e9:89:64:0b:57:ea:2d:69:6d:85:ba:5e:ab:3d:
         e8:38:c2:03:e9:39:ae:e0:29:44:c5:68:af:e3:e4:40:3d:df:
         9d:92:86:d2:f3:cc:20:d8:35:d6:2e:50:f9:b8:b8:dc:40:17:
         6b:eb:50:5b:d2:9b:ee:fa:2f:2e:c2:63:ad:6a:e4:f4:2f:d0:
         31:37:7c:0e:0b:da:2e:c2:f7:9f:e7:d9:b0:5e:6f:d6:f2:ef:
         2c:dd:13:2c:e4:d3:c6:f4:ea:1f:d4:19:5a:48:c1:b2:6a:4a:
         de:44:ff:cd:9f:29:f1:18:28:06:76:59:77:e0:d7:49:ba:ce:
         6b:6e:6a:a7:12:c3:37:b9:d6:c9:eb:73:53:f2:7a:7b:57:7c:
         35:7b:cb:c4:c2:e9:17:01:bf:07:f2:22:9d:7e:f1:67:8c:7f:
         25:65:e6:62
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIURUuHoBQSXB3/AqB3vT8gy7l7zm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MTdaFw0yMzA0MjcxMzI5MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUNCMEM4RUZCM0UxQzVGRDM4
QjUxNEE5RTcxRTlEQUUyRTczQUE0NTU3OUE2NDcxNjlFQjExN0JEQzJBQzA5NThF
MjRGRTlEQTM3NDRBMzNBNEE3NDA4MEU3MzYxRTlGMEFENEZDQjFCM0FBMTlDNzE3
NTMxMUQ1MTE1ODkyREEyQjg1MzI4NUNFOTJBRjEyRkE2NTgwRDhFQ0I4NDE3RTEw
OTc3MzdCQjUyRTYzQjNFQjg4MUU0NERBN0Q0MTU2RDgxNTg3NDQ0QjBDQTZDNTFE
ODhEMzk1RkNDNzk2ODZBMTI3RUMxNzdEREQ4Njc2QURFQ0E2Q0JEOUY1RTc3MTMx
MEJEQkZGNkU1RDE5NzM2OEUwNEFBODE3QTkwRjZBREI2MDFFREU2NUY3OEVCMDdC
MUI1QTcxOUJGQkQ5RkZENUY4NzQwQ0REMTBBQTRERkUxRTI2RjU4NDU4REMyNkYz
MDYyRUQ3REU3QzIzMTNEMkQwMjc2MTA4MEZDQjZEMTMyNDNGNTk4MDIwNEQ0Qzc2
RjNFMjVCQjhCN0QzQzIyNDY5Njg3MkQ5QjUyQTlBNUQyMTZFQjlFNjlCNURDMTA0
NEY2MDE1ODVCM0E1QjRCQzRBOUMwRDRGODIzN0ExQjI3NjE1NTlCQUQzMDgwMThG
MENDNDhEM0IxQTVGMDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7LDI77Phxf04tRSp5x6dri5zqkVXmmRxaesRe9wqwJWOJP6do3RK
M6SnQIDnNh6fCtT8sbOqGccXUxHVEViS2iuFMoXOkq8S+mWA2Oy4QX4Ql3N7tS5j
s+uIHkTafUFW2BWHREsMpsUdiNOV/MeWhqEn7Bd93YZ2reymy9n153ExC9v/bl0Z
c2jgSqgXqQ9q22Ae3mX3jrB7G1pxm/vZ/9X4dAzdEKpN/h4m9YRY3CbzBi7X3nwj
E9LQJ2EID8ttEyQ/WYAgTUx28+JbuLfTwiRpaHLZtSqaXSFuueabXcEET2AVhbOl
tLxKnA1PgjehsnYVWbrTCAGPDMSNOxpfBQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FFVyNq20XrHP2shyU0g+EUOvvAo6MB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMyMzAzMDJlMzEzMDJlMzQyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyAoEMA0G
CSqGSIb3DQEBCwUAA4IBAQCcVRVchch3sUkJtKueTcoNZJlnVKjpT74G0Mhs7qn9
Qgax5CC67Yqf3jmbOFqqTRl8+LKMvphYhL3rSud1sWtfWq4CNqW7S6Ngp1WnAdrd
qQlxLAewEEDsaG3xfvFg6YlkC1fqLWlthbpeqz3oOMID6Tmu4ClExWiv4+RAPd+d
kobS88wg2DXWLlD5uLjcQBdr61Bb0pvu+i8uwmOtauT0L9AxN3wOC9ouwvef59mw
Xm/W8u8s3RMs5NPG9Oof1BlaSMGyakreRP/NnynxGCgGdll34NdJus5rbmqnEsM3
udbJ63NT8np7V3w1e8vEwukXAb8H8iKdfvFnjH8lZeZi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org