Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e38302e302f32312d3234203d3e203238333433.roa
File:                     3230312e3133312e38302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          N5JjFsMmN8n4pEFDhBkKEvtfSuPK7867UIVqscTQuts=
Subject key identifier:   A1:8A:4F:E2:EE:D9:40:E1:C9:16:6F:4C:A7:68:C6:AE:14:92:3A:6A
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0CB750C98EB9B5CCE420B9ED296DFC2F5BE508E9
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e38302e302f32312d3234203d3e203238333433.roa
Signing time:             Tue 13 Sep 2022 11:25:18 +0000
ROA not before:           Tue 13 Sep 2022 11:20:18 +0000
ROA not after:            Tue 12 Sep 2023 11:25:18 +0000
asID:                     28343
IP address blocks:        201.131.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b7:50:c9:8e:b9:b5:cc:e4:20:b9:ed:29:6d:fc:2f:5b:e5:08:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Sep 13 11:20:18 2022 GMT
            Not After : Sep 12 11:25:18 2023 GMT
        Subject: CN=3082010A0282010100DA0B2E5BFBC09AAA466A2C6372633CD1633ED2B27396077398F6888CEC2217DA749C5B3A817737284EA8571E35F1D64155CE3B2B671E8D81512E8A771D06AFB663BFB91C0AC3C061A243613F5E0CC86C024C7E31570C9B5F883C5AC68B8C06DB598D25EAD8F3B107F62367FA04C7F11EF88959282B3BF19289A08B2BCC41D1DDCF0220E11703F2A8A9D214815D56FAD23322C49A81A0C18F00E9D51D80D149476958379119707BDE9A13380495C9EDA31F828258965BC0BFE1AB560A6FBB40C7CDDF6CCA8522BA9ED3DE0262A70DF24D11FD41EE94E4385716A63C221CB040FB4E6CCDE5D73D7EEF3F7371D2D59F791F5FFB91E1BD315FF957701E0AB7EF0D710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:2e:5b:fb:c0:9a:aa:46:6a:2c:63:72:63:
                    3c:d1:63:3e:d2:b2:73:96:07:73:98:f6:88:8c:ec:
                    22:17:da:74:9c:5b:3a:81:77:37:28:4e:a8:57:1e:
                    35:f1:d6:41:55:ce:3b:2b:67:1e:8d:81:51:2e:8a:
                    77:1d:06:af:b6:63:bf:b9:1c:0a:c3:c0:61:a2:43:
                    61:3f:5e:0c:c8:6c:02:4c:7e:31:57:0c:9b:5f:88:
                    3c:5a:c6:8b:8c:06:db:59:8d:25:ea:d8:f3:b1:07:
                    f6:23:67:fa:04:c7:f1:1e:f8:89:59:28:2b:3b:f1:
                    92:89:a0:8b:2b:cc:41:d1:dd:cf:02:20:e1:17:03:
                    f2:a8:a9:d2:14:81:5d:56:fa:d2:33:22:c4:9a:81:
                    a0:c1:8f:00:e9:d5:1d:80:d1:49:47:69:58:37:91:
                    19:70:7b:de:9a:13:38:04:95:c9:ed:a3:1f:82:82:
                    58:96:5b:c0:bf:e1:ab:56:0a:6f:bb:40:c7:cd:df:
                    6c:ca:85:22:ba:9e:d3:de:02:62:a7:0d:f2:4d:11:
                    fd:41:ee:94:e4:38:57:16:a6:3c:22:1c:b0:40:fb:
                    4e:6c:cd:e5:d7:3d:7e:ef:3f:73:71:d2:d5:9f:79:
                    1f:5f:fb:91:e1:bd:31:5f:f9:57:70:1e:0a:b7:ef:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:4F:E2:EE:D9:40:E1:C9:16:6F:4C:A7:68:C6:AE:14:92:3A:6A
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e38302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:e1:bd:cb:96:e9:3f:f9:72:cc:0c:27:d4:da:ab:48:1d:
         7c:e0:25:32:e4:4d:6a:ed:a6:b7:1b:97:95:be:00:26:71:16:
         47:98:2f:5c:8f:ce:87:26:3f:a3:4f:e6:1e:86:8e:61:73:75:
         99:6d:01:3a:b2:48:d2:b8:59:61:a9:0f:fd:21:0d:69:56:09:
         08:02:e5:94:07:52:35:45:2c:9c:ca:c5:c3:f6:27:4b:ad:47:
         ba:03:b7:5a:b6:21:26:36:ba:b3:ad:5f:21:80:a2:91:87:52:
         70:8d:05:a8:5a:cf:89:ca:15:75:7d:3f:ba:73:e7:b9:30:ab:
         2e:38:16:3a:b2:76:cf:7a:01:67:68:a9:18:c2:3e:67:b1:44:
         44:b5:ff:46:ef:1d:05:f4:7c:78:30:38:5a:41:20:d8:77:23:
         04:ce:f0:f0:df:81:e8:d1:36:0a:f8:d2:92:cf:c7:2f:79:fe:
         3a:1d:79:fc:e1:46:e3:22:ab:75:b6:97:00:de:80:46:f7:25:
         1f:2a:8a:78:e1:fd:66:39:2c:f6:f4:55:77:8e:f3:8e:3d:3c:
         95:b6:1a:2c:c4:70:dc:11:7d:37:f0:fe:38:7a:b4:e7:b4:1b:
         e6:0f:2d:a7:b5:6e:d3:da:f3:71:8f:03:4e:5a:56:24:86:33:
         f8:8d:c1:92
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUDLdQyY65tczkILntKW38L1vlCOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA5MTMxMTIwMThaFw0yMzA5MTIxMTI1MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREEwQjJFNUJGQkMwOUFBQTQ2
NkEyQzYzNzI2MzNDRDE2MzNFRDJCMjczOTYwNzczOThGNjg4OENFQzIyMTdEQTc0
OUM1QjNBODE3NzM3Mjg0RUE4NTcxRTM1RjFENjQxNTVDRTNCMkI2NzFFOEQ4MTUx
MkU4QTc3MUQwNkFGQjY2M0JGQjkxQzBBQzNDMDYxQTI0MzYxM0Y1RTBDQzg2QzAy
NEM3RTMxNTcwQzlCNUY4ODNDNUFDNjhCOEMwNkRCNTk4RDI1RUFEOEYzQjEwN0Y2
MjM2N0ZBMDRDN0YxMUVGODg5NTkyODJCM0JGMTkyODlBMDhCMkJDQzQxRDFERENG
MDIyMEUxMTcwM0YyQThBOUQyMTQ4MTVENTZGQUQyMzMyMkM0OUE4MUEwQzE4RjAw
RTlENTFEODBEMTQ5NDc2OTU4Mzc5MTE5NzA3QkRFOUExMzM4MDQ5NUM5RURBMzFG
ODI4MjU4OTY1QkMwQkZFMUFCNTYwQTZGQkI0MEM3Q0RERjZDQ0E4NTIyQkE5RUQz
REUwMjYyQTcwREYyNEQxMUZENDFFRTk0RTQzODU3MTZBNjNDMjIxQ0IwNDBGQjRF
NkNDREU1RDczRDdFRUYzRjczNzFEMkQ1OUY3OTFGNUZGQjkxRTFCRDMxNUZGOTU3
NzAxRTBBQjdFRjBENzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2gsuW/vAmqpGaixjcmM80WM+0rJzlgdzmPaIjOwiF9p0nFs6gXc3
KE6oVx418dZBVc47K2cejYFRLop3HQavtmO/uRwKw8BhokNhP14MyGwCTH4xVwyb
X4g8WsaLjAbbWY0l6tjzsQf2I2f6BMfxHviJWSgrO/GSiaCLK8xB0d3PAiDhFwPy
qKnSFIFdVvrSMyLEmoGgwY8A6dUdgNFJR2lYN5EZcHvemhM4BJXJ7aMfgoJYllvA
v+GrVgpvu0DHzd9syoUiup7T3gJipw3yTRH9Qe6U5DhXFqY8IhywQPtObM3l1z1+
7z9zcdLVn3kfX/uR4b0xX/lXcB4Kt+8NcQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FKGKT+Lu2UDhyRZvTKdoxq4UkjpqMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMyMzAzMTJlMzEzMzMxMmUzODMw
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8mD
UDANBgkqhkiG9w0BAQsFAAOCAQEAAOrhvcuW6T/5cswMJ9Taq0gdfOAlMuRNau2m
txuXlb4AJnEWR5gvXI/OhyY/o0/mHoaOYXN1mW0BOrJI0rhZYakP/SENaVYJCALl
lAdSNUUsnMrFw/YnS61HugO3WrYhJja6s61fIYCikYdScI0FqFrPicoVdX0/unPn
uTCrLjgWOrJ2z3oBZ2ipGMI+Z7FERLX/Ru8dBfR8eDA4WkEg2HcjBM7w8N+B6NE2
CvjSks/HL3n+Oh15/OFG4yKrdbaXAN6ARvclHyqKeOH9Zjks9vRVd47zjj08lbYa
LMRw3BF9N/D+OHq057Qb5g8tp7Vu09rzcY8DTlpWJIYz+I3Bkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org