Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3232312e38382e302f32322d3234203d3e203238333433.roa
File:                     3133312e3232312e38382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          H7pUs5LOYI4IbU3+cJsWBtIVXED9lJwCfDrKz3L4LdA=
Subject key identifier:   BA:A5:A5:C3:4F:42:79:A4:18:93:09:93:C4:C1:24:27:32:32:C5:63
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       08CFE72F552275CA656DFC0B3BEB1C376B923780
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3232312e38382e302f32322d3234203d3e203238333433.roa
Signing time:             Fri 27 Jan 2023 13:17:34 +0000
ROA not before:           Fri 27 Jan 2023 13:12:34 +0000
ROA not after:            Fri 26 Jan 2024 13:17:34 +0000
asID:                     28343
IP address blocks:        131.221.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cf:e7:2f:55:22:75:ca:65:6d:fc:0b:3b:eb:1c:37:6b:92:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 27 13:12:34 2023 GMT
            Not After : Jan 26 13:17:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:c3:11:9a:34:74:43:08:e9:c0:9b:37:e7:
                    46:34:5f:ac:2b:84:48:3f:95:8f:32:2c:08:c4:7b:
                    bb:32:0f:1d:aa:f0:a7:e7:57:91:ae:6c:4c:6f:8e:
                    40:fc:6e:52:f4:25:46:8e:ee:aa:42:c4:18:b7:58:
                    da:97:8d:d3:03:36:0b:4a:e6:49:f7:88:8a:45:3e:
                    ae:3c:8e:42:f9:7a:9a:13:ec:65:d3:28:a2:fa:0a:
                    61:25:a5:bb:96:65:90:df:51:00:a1:0c:eb:d7:70:
                    48:0e:94:d8:b5:2b:9b:e3:33:70:cf:b9:a5:fa:21:
                    fa:f9:e2:44:bd:43:0c:6a:a5:5a:08:91:dd:6a:1e:
                    c8:cd:26:1b:6e:52:89:26:7c:11:d5:47:51:fb:2e:
                    c9:46:d8:fc:cc:20:ea:c7:5b:35:33:4e:16:94:07:
                    69:14:9d:99:b8:67:da:d8:a4:bc:71:87:1b:8f:9f:
                    23:fb:37:31:e2:2d:2e:0c:7e:49:69:56:ff:ce:8d:
                    cf:18:8b:aa:44:ca:58:93:95:b6:f0:2d:f8:07:b8:
                    1b:d5:f7:1f:5e:60:bf:51:76:e2:ee:6b:3b:8f:b5:
                    e3:65:5a:16:31:13:28:61:b6:e8:70:98:46:a9:da:
                    38:83:93:c1:aa:f4:45:f4:65:68:a6:e0:92:59:a7:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A5:A5:C3:4F:42:79:A4:18:93:09:93:C4:C1:24:27:32:32:C5:63
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133312e3232312e38382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:fc:b8:37:a8:1d:1f:11:78:70:01:2d:15:fb:6a:14:9b:
         b9:9d:64:25:5c:ba:f1:d7:64:48:f4:71:5c:a5:6f:af:eb:33:
         04:a8:4d:8a:6b:5d:b6:5c:09:3a:0b:d4:d7:9c:5b:04:a9:3c:
         61:06:7e:bd:07:24:8b:82:e4:f2:77:aa:f8:6f:64:f3:7e:20:
         41:0f:17:df:56:95:3d:12:e0:df:8d:82:09:b0:71:7a:28:7e:
         da:77:04:5a:21:54:b7:18:61:65:e6:59:e0:45:b7:eb:5a:45:
         13:13:5c:e1:a3:c3:14:b5:18:eb:35:2f:c7:78:91:5a:c3:1f:
         d3:ca:21:5d:77:9a:63:0c:02:1e:46:91:da:1a:b1:b6:2a:dc:
         81:08:7c:45:46:35:e7:c1:1b:8c:54:e1:84:93:cd:04:ee:06:
         98:c2:01:5a:9b:56:d6:b6:48:99:20:ce:0d:b1:dd:c0:8b:3d:
         aa:1a:bd:f5:62:a6:8b:22:6b:5f:10:55:18:30:be:9a:c9:09:
         a8:c2:3a:14:cf:ec:f2:71:e9:8b:06:dd:38:5b:cb:69:dd:81:
         47:ca:d2:75:15:51:df:3c:60:a0:9d:5a:fa:bf:75:61:e1:3e:
         af:9d:1a:0f:85:1f:65:2e:9b:3d:e8:12:24:60:5a:9a:65:53:
         81:92:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org