Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3136312e31362e302f32322d3234203d3e203238333433.roa
File:                     3133312e3136312e31362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          yeMLlTGa1BnxhESKnqaLzqkpKhu0RFNBUYXjY0JESnE=
Subject key identifier:   06:B1:2A:BD:A6:85:52:90:DA:55:BD:1E:DC:10:EB:A6:A9:15:D7:52
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       5895BB01173BBEB2BFCCD42FAD1FED98E87588F9
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3136312e31362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        131.161.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:95:bb:01:17:3b:be:b2:bf:cc:d4:2f:ad:1f:ed:98:e8:75:88:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:61:b2:fd:df:96:88:b5:99:d4:1c:f6:40:
                    95:1c:6f:b9:f3:f9:8a:9e:ed:11:68:f2:dc:bb:7e:
                    80:be:a4:22:3c:f6:2e:99:e7:0e:92:ad:9c:a5:d7:
                    ae:8c:5b:f1:4b:2c:cb:07:9e:e5:62:64:27:73:b1:
                    00:09:33:4d:8d:0b:a6:26:17:99:77:69:d9:f9:18:
                    2c:2e:d2:1c:1f:9a:38:ab:44:88:35:ba:c7:a5:aa:
                    da:c3:91:d1:1d:95:d7:cc:80:5a:c1:49:33:15:ea:
                    64:2d:39:f5:82:2f:93:e0:d9:6c:31:94:63:ba:4e:
                    38:a7:0a:ab:22:46:32:7a:ad:a7:a7:4b:b3:65:b5:
                    c0:78:1f:ad:63:1e:85:3f:f7:a8:27:c6:2d:ad:ff:
                    56:a3:7f:0c:0f:40:02:94:6c:73:2c:52:b2:07:78:
                    b3:83:92:16:d9:31:66:53:4b:d8:ea:e6:dc:ae:0d:
                    15:32:bd:55:6e:f9:b4:83:66:fd:62:32:ae:7e:26:
                    78:d4:7a:b4:21:2f:24:c3:e6:39:6a:c4:62:aa:44:
                    34:a9:4e:45:48:53:93:27:fe:65:e3:03:fc:18:a0:
                    d1:ea:43:ca:7c:f9:01:b6:13:66:e0:33:2b:e3:bb:
                    a4:1d:31:cb:60:ae:76:96:20:66:64:ef:f2:c6:ce:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:2A:BD:A6:85:52:90:DA:55:BD:1E:DC:10:EB:A6:A9:15:D7:52
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3136312e31362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:3f:3c:72:e1:08:2a:e6:c8:15:8e:59:10:82:69:08:23:
         5c:f5:c9:14:34:7e:24:7a:df:65:aa:d6:ed:53:42:37:27:6d:
         b5:38:88:81:d0:e0:b8:18:de:de:aa:ce:c9:05:05:9d:75:9b:
         e8:f1:c3:9f:c5:b0:8f:4a:62:bd:2c:66:87:3c:7e:73:fc:e1:
         9c:89:be:05:c3:56:29:87:a6:3c:3a:1e:72:51:a9:09:07:da:
         fb:60:45:1d:ca:fe:02:92:45:c1:ea:73:35:12:fa:81:1e:04:
         68:cc:ea:c6:3a:b1:95:34:01:ca:50:97:56:45:54:28:af:b4:
         0d:4b:70:21:a0:63:28:1a:c8:26:c1:76:72:33:03:a0:9c:91:
         f7:cd:af:48:d8:dd:fa:cc:42:46:8b:30:04:e8:2f:7e:cc:2a:
         90:03:9e:1b:2d:2d:f7:1e:c8:07:fb:63:8b:62:e6:5f:66:1b:
         bb:bd:58:6b:a6:e4:63:86:3f:0e:8e:02:cd:89:83:ad:43:84:
         09:c6:45:19:49:08:da:07:6b:09:90:80:90:97:cb:79:e0:61:
         f8:b4:c4:3b:41:f0:db:54:be:49:3e:45:46:26:28:4f:aa:ba:
         33:b9:c6:35:c9:19:82:df:80:bd:76:59:58:67:b3:ed:04:ca:
         43:fe:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org