Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa
File:                     3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          IspoFCbYF57aq3Wc+IGeDuIF11lWBDSYpms0/7ICswo=
Subject key identifier:   32:31:72:C2:A6:22:6F:B3:39:CD:FB:22:F7:F2:2B:2F:4D:F7:E1:88
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       75DB690E942E9D55D30A9E7153A9271A2E2FCC76
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        201.131.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:db:69:0e:94:2e:9d:55:d3:0a:9e:71:53:a9:27:1a:2e:2f:cc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:3e:fc:86:26:52:96:ff:5e:c9:f3:51:9a:
                    ba:92:d5:93:58:1b:ad:15:f8:d3:8f:34:ec:40:61:
                    7a:dc:05:1c:53:33:e8:b6:aa:84:ed:43:5c:6c:2a:
                    67:99:32:a2:83:b0:74:17:ca:ba:9b:5d:55:c1:77:
                    cb:a0:53:84:c8:33:74:45:e4:6b:63:16:93:41:30:
                    5c:74:97:7b:6c:45:cc:74:54:96:e3:e1:f0:e2:7f:
                    80:1d:81:41:72:45:3e:d8:97:67:14:66:f6:0a:7f:
                    79:f3:ff:4e:49:29:89:1d:54:93:db:55:fe:6e:2e:
                    77:a5:df:ea:03:90:02:34:dd:84:58:57:98:69:ad:
                    b1:4a:65:12:93:93:25:a7:40:31:08:39:d2:79:4b:
                    d6:c2:41:60:ff:f4:e0:61:e7:7b:3a:33:6a:3d:ba:
                    3b:f0:cb:11:df:ab:d3:e4:8e:82:fb:48:4a:d7:d5:
                    53:95:31:6a:1b:57:95:52:8e:e0:c0:17:f9:15:a1:
                    da:f4:ca:8b:3a:31:47:2e:15:de:65:51:17:c1:fb:
                    fb:0a:f3:c3:db:ed:ec:cf:39:9d:b9:a0:1d:27:c4:
                    ae:24:36:5f:51:24:75:c9:77:28:e7:ab:5b:57:73:
                    56:3c:46:65:93:f5:b6:fe:c5:65:9c:32:21:4a:bc:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:31:72:C2:A6:22:6F:B3:39:CD:FB:22:F7:F2:2B:2F:4D:F7:E1:88
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e3135362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:7f:5d:b4:d7:22:3f:e9:42:b7:bd:f6:b0:bc:e6:c8:1d:
         79:f0:bd:37:f9:eb:5b:3d:f3:77:5e:59:92:f1:33:67:d8:76:
         c4:29:72:57:5a:6d:b6:96:ef:55:00:a6:7b:19:ef:d0:19:32:
         43:fa:67:5d:e5:54:e2:36:de:14:2a:99:f4:41:13:62:4f:f2:
         86:32:22:d2:33:90:a2:70:0e:2e:0c:56:d5:80:03:e5:a5:d1:
         41:74:2f:66:e6:a8:0c:f6:de:36:ec:d7:01:40:da:05:f7:e6:
         eb:14:d2:1c:0a:6a:95:91:e9:da:d5:25:e7:8a:c5:dc:fe:6f:
         fc:10:7a:36:04:3a:ed:48:a8:91:8c:cf:70:46:8c:e9:66:75:
         e0:9c:2a:34:65:18:83:6d:7f:9e:6b:06:43:a2:47:5c:f9:65:
         bf:ad:c9:ea:d6:d3:1f:8b:83:75:13:9b:99:3d:a5:c5:df:81:
         c9:cd:84:10:47:ab:b3:1e:d5:13:7f:a0:24:e6:47:24:4e:fc:
         15:32:e6:92:9c:3a:d4:b8:a6:5f:4d:64:d4:04:a4:f3:78:fc:
         65:eb:22:7f:88:e1:c0:04:38:35:f4:32:d8:74:a0:03:1d:ac:
         04:99:4c:5c:c8:2f:70:1c:13:13:c4:92:c7:c2:f8:7f:6a:9e:
         d4:5d:eb:4d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUddtpDpQunVXTCp5xU6knGi4vzHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MTZaFw0yMzA0MjcxMzI5MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgzMjNFRkM4NjI2NTI5NkZG
NUVDOUYzNTE5QUJBOTJENTkzNTgxQkFEMTVGOEQzOEYzNEVDNDA2MTdBREMwNTFD
NTMzM0U4QjZBQTg0RUQ0MzVDNkMyQTY3OTkzMkEyODNCMDc0MTdDQUJBOUI1RDU1
QzE3N0NCQTA1Mzg0QzgzMzc0NDVFNDZCNjMxNjkzNDEzMDVDNzQ5NzdCNkM0NUND
NzQ1NDk2RTNFMUYwRTI3RjgwMUQ4MTQxNzI0NTNFRDg5NzY3MTQ2NkY2MEE3Rjc5
RjNGRjRFNDkyOTg5MUQ1NDkzREI1NUZFNkUyRTc3QTVERkVBMDM5MDAyMzRERDg0
NTg1Nzk4NjlBREIxNEE2NTEyOTM5MzI1QTc0MDMxMDgzOUQyNzk0QkQ2QzI0MTYw
RkZGNEUwNjFFNzdCM0EzMzZBM0RCQTNCRjBDQjExREZBQkQzRTQ4RTgyRkI0ODRB
RDdENTUzOTUzMTZBMUI1Nzk1NTI4RUUwQzAxN0Y5MTVBMURBRjRDQThCM0EzMTQ3
MkUxNURFNjU1MTE3QzFGQkZCMEFGM0MzREJFREVDQ0YzOTlEQjlBMDFEMjdDNEFF
MjQzNjVGNTEyNDc1Qzk3NzI4RTdBQjVCNTc3MzU2M0M0NjY1OTNGNUI2RkVDNTY1
OUMzMjIxNEFCQzRDQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyDI+/IYmUpb/XsnzUZq6ktWTWButFfjTjzTsQGF63AUcUzPotqqE
7UNcbCpnmTKig7B0F8q6m11VwXfLoFOEyDN0ReRrYxaTQTBcdJd7bEXMdFSW4+Hw
4n+AHYFBckU+2JdnFGb2Cn958/9OSSmJHVST21X+bi53pd/qA5ACNN2EWFeYaa2x
SmUSk5Mlp0AxCDnSeUvWwkFg//TgYed7OjNqPbo78MsR36vT5I6C+0hK19VTlTFq
G1eVUo7gwBf5FaHa9MqLOjFHLhXeZVEXwfv7CvPD2+3szzmduaAdJ8SuJDZfUSR1
yXco56tbV3NWPEZlk/W2/sVlnDIhSrxMtwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDIxcsKmIm+zOc37IvfyKy9N9+GIMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMyMzAzMTJlMzEzMzMxMmUzMTM1
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
yYOcMA0GCSqGSIb3DQEBCwUAA4IBAQBcFn9dtNciP+lCt732sLzmyB158L03+etb
PfN3XlmS8TNn2HbEKXJXWm22lu9VAKZ7Ge/QGTJD+mdd5VTiNt4UKpn0QRNiT/KG
MiLSM5CicA4uDFbVgAPlpdFBdC9m5qgM9t427NcBQNoF9+brFNIcCmqVkena1SXn
isXc/m/8EHo2BDrtSKiRjM9wRozpZnXgnCo0ZRiDbX+eawZDokdc+WW/rcnq1tMf
i4N1E5uZPaXF34HJzYQQR6uzHtUTf6Ak5kckTvwVMuaSnDrUuKZfTWTUBKTzePxl
6yJ/iOHABDg19DLYdKADHawEmUxcyC9wHBMTxJLHwvh/ap7UXetN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org