Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa
File:                     3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          G+uYBl6NvzcA4KVCJc3+k76EZfOPfOvwhxrOlY0wZKw=
Subject key identifier:   FC:20:C9:AB:58:66:D2:A4:F8:1D:20:B5:7F:9C:78:54:4B:69:DB:11
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       61B4018E8CCE2AAFEC048122C7FB415D0A30676E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        131.161.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:01:8e:8c:ce:2a:af:ec:04:81:22:c7:fb:41:5d:0a:30:67:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:2a:04:3b:88:0a:69:83:10:aa:2e:05:7e:
                    66:91:94:9e:99:64:79:4d:88:36:b3:4d:1c:c4:47:
                    f7:56:87:4f:ed:7b:1e:0b:56:cc:b8:01:31:cd:67:
                    0d:d1:fb:3c:b6:c6:e0:5b:93:92:b1:44:e7:4e:22:
                    e2:47:3f:56:20:ef:36:7d:39:4d:f2:e5:07:c2:9e:
                    9a:98:94:85:bc:f4:0f:8f:1e:59:67:62:ff:3a:9a:
                    95:85:0b:2f:b7:7a:ca:c6:85:1d:52:73:6b:01:fb:
                    80:87:ec:80:39:b0:38:75:f1:04:63:e3:ed:75:8c:
                    12:51:ab:c8:58:91:f0:f4:63:b1:73:54:9d:76:03:
                    b5:fa:bd:19:62:28:59:58:fd:a4:a2:c0:7b:32:e8:
                    78:c3:f5:19:90:e0:ea:f7:71:d3:c6:9b:0e:a1:49:
                    d7:a0:8e:7f:c8:27:61:e0:cd:ff:e1:c6:e5:be:63:
                    1f:a3:b6:e5:9f:d3:f7:fe:2a:67:87:16:ef:58:44:
                    c8:20:45:70:aa:bb:1f:6a:99:d1:c0:aa:3b:2e:92:
                    aa:c9:90:cb:7d:21:17:1c:5e:2b:6d:90:4d:85:95:
                    79:20:b1:51:54:26:8d:a0:99:dd:8d:22:eb:68:09:
                    ae:f3:9f:6b:db:78:4b:92:06:ae:b7:95:e8:4f:f5:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:20:C9:AB:58:66:D2:A4:F8:1D:20:B5:7F:9C:78:54:4B:69:DB:11
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:80:da:d6:2a:37:2a:00:17:47:58:32:cf:57:a9:2f:49:2d:
         e0:b8:48:0c:7a:6d:ea:27:95:71:12:60:4a:4e:72:a4:e6:0e:
         8b:aa:0b:29:e4:4e:a7:6e:5a:3b:8b:70:e1:0e:6c:0c:d4:ed:
         57:13:23:6b:2e:41:de:4e:d6:cd:13:6f:22:ea:bf:83:49:94:
         2b:89:8d:da:72:75:07:41:f2:5d:84:80:7c:38:ce:51:6e:6e:
         09:0e:1b:a0:8b:3a:e5:4d:66:1e:f7:8f:55:25:de:85:8c:00:
         40:ed:2c:99:13:cf:67:48:f2:94:a7:ed:fe:e9:8a:7d:24:fc:
         85:ad:27:a3:b0:c7:42:cd:cc:65:07:07:d9:4b:6d:79:df:6e:
         f9:91:c6:0b:e8:a7:9d:98:55:a4:7e:dc:0b:ca:b2:4f:be:24:
         4c:ba:51:0b:aa:f4:e7:a4:18:b2:54:e8:1d:71:b2:26:b7:94:
         69:c9:5c:7c:f2:20:39:9e:d3:c7:99:4b:3a:ba:c1:11:b9:c0:
         0a:31:1b:a7:c3:f8:52:a4:41:e0:85:52:f5:a4:4e:d4:3d:09:
         24:3d:cd:2d:bf:e8:67:11:e0:ce:06:42:5d:93:b7:1a:d0:e8:
         8d:3c:75:e8:ef:9d:1b:71:57:33:ac:83:e9:15:16:bd:0b:41:
         c6:24:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org