Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133322e3235352e31322e302f32322d3234203d3e203238333433.roa
File:                     3133322e3235352e31322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          dywzWYiHY7JU2zzY8xlDaeebm80J8CHv4MDsmWRqvyE=
Subject key identifier:   68:AF:8A:1A:02:68:CC:BF:31:96:4C:B2:2C:FC:F3:94:4A:16:20:42
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0557768166E6EA72696A9DFB51BB4D86795737BC
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133322e3235352e31322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        132.255.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:76:81:66:e6:ea:72:69:6a:9d:fb:51:bb:4d:86:79:57:37:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject: CN=3082010A0282010100DD8D16377A719723B9EDEA5A8D1C925238DFC09A96A72C716BBC7DC5A6146046C98A0BC97F679ECEF88A1F9DF458F969462C3C9F9FFCDB925BA5715444E6B46AFA95E2062264DA921C9D9D6CFE5708BFC384F07A7B76998BB681A085B8A24D828B6C56D160571DB1BE428AF60BECED27E80209509D9E851712446D67A48A4C334F38A8A3F7F7077E03934D353EA54137B894C7AD48FE40EC07F4DEE42B01806EC7E9FE3BE963751F187C083EC10D6362573CFC4BDAE5FC629F8D8D470E34958D68DF87DDFAFA78E1D8A655CECEAC1B1F344F1700E18B1078274A20DDC3EB4E09BD6B99B10EA5732F71A131AD06CAB3DE8215730861047E252F094C855ADAE0130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:16:37:7a:71:97:23:b9:ed:ea:5a:8d:1c:
                    92:52:38:df:c0:9a:96:a7:2c:71:6b:bc:7d:c5:a6:
                    14:60:46:c9:8a:0b:c9:7f:67:9e:ce:f8:8a:1f:9d:
                    f4:58:f9:69:46:2c:3c:9f:9f:fc:db:92:5b:a5:71:
                    54:44:e6:b4:6a:fa:95:e2:06:22:64:da:92:1c:9d:
                    9d:6c:fe:57:08:bf:c3:84:f0:7a:7b:76:99:8b:b6:
                    81:a0:85:b8:a2:4d:82:8b:6c:56:d1:60:57:1d:b1:
                    be:42:8a:f6:0b:ec:ed:27:e8:02:09:50:9d:9e:85:
                    17:12:44:6d:67:a4:8a:4c:33:4f:38:a8:a3:f7:f7:
                    07:7e:03:93:4d:35:3e:a5:41:37:b8:94:c7:ad:48:
                    fe:40:ec:07:f4:de:e4:2b:01:80:6e:c7:e9:fe:3b:
                    e9:63:75:1f:18:7c:08:3e:c1:0d:63:62:57:3c:fc:
                    4b:da:e5:fc:62:9f:8d:8d:47:0e:34:95:8d:68:df:
                    87:dd:fa:fa:78:e1:d8:a6:55:ce:ce:ac:1b:1f:34:
                    4f:17:00:e1:8b:10:78:27:4a:20:dd:c3:eb:4e:09:
                    bd:6b:99:b1:0e:a5:73:2f:71:a1:31:ad:06:ca:b3:
                    de:82:15:73:08:61:04:7e:25:2f:09:4c:85:5a:da:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:8A:1A:02:68:CC:BF:31:96:4C:B2:2C:FC:F3:94:4A:16:20:42
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133322e3235352e31322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:3c:63:78:6f:0b:d2:2e:d2:b8:f4:3e:63:99:0f:11:cf:4d:
         30:f3:34:db:fd:70:31:dc:8d:70:b8:c9:6a:9e:55:cb:36:d5:
         7b:3e:6f:2d:e7:bd:a7:8d:56:5a:a7:ec:3e:04:14:f0:c0:51:
         f9:80:92:33:5c:39:50:a1:e7:06:b2:74:a9:3d:5d:c1:96:60:
         46:12:9c:17:eb:93:2c:6d:07:c9:e1:ae:55:f6:73:d1:44:c1:
         18:af:d1:11:40:8b:3d:2a:65:d6:02:6d:6d:ac:12:ab:e4:e4:
         79:1e:6c:4c:1b:1f:57:31:98:94:c5:9c:7a:83:71:9e:be:c3:
         d6:0c:17:9d:07:40:56:84:f2:2c:b7:ef:f3:85:51:8d:70:74:
         1b:a4:0e:42:eb:3f:1b:ba:a0:af:3c:00:8f:85:f4:7b:4d:38:
         be:41:ad:40:58:55:7a:a4:be:8a:ac:53:d8:31:fc:0b:ff:a6:
         f4:ab:8e:5e:ae:7a:89:04:9f:a7:f5:1a:a9:c5:e1:45:51:31:
         22:0e:0f:2f:5f:00:fb:62:85:28:28:d2:e2:dd:c4:b6:37:9e:
         04:6d:d3:dd:65:1c:33:13:eb:41:f2:2c:56:bf:b1:9f:ee:4c:
         41:58:8f:4c:62:c0:a9:00:5c:18:3a:9b:f3:99:9d:74:b4:c4:
         b7:b0:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org