Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e302e3230302e302f32322d3234203d3e203238333433.roa
File:                     3133382e302e3230302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          kAebBqVbSfraDPceznP/S+cKq0xnqrcRLLkTNWZkMPQ=
Subject key identifier:   5E:2C:77:F3:3C:17:CE:94:4A:41:C2:89:62:14:28:4D:77:0E:C7:CF
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       5C6E82C7ACF45D6C5A335E86A7FD8D86761DF176
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e302e3230302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        138.0.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6e:82:c7:ac:f4:5d:6c:5a:33:5e:86:a7:fd:8d:86:76:1d:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:4c:09:2a:ea:cb:6c:26:a5:66:8b:da:75:
                    f9:2c:97:38:b2:38:60:48:58:2a:90:8b:0c:2d:2b:
                    51:f1:23:c2:a4:07:5c:62:65:fc:b4:56:9f:50:3a:
                    e7:8a:df:ed:00:1c:06:93:f8:ea:0a:59:d4:0e:9e:
                    6c:1a:62:16:3f:60:19:90:fd:09:85:42:aa:6d:f6:
                    20:74:da:ff:3b:c1:c7:1b:39:14:7f:c2:49:4d:44:
                    a1:f9:30:19:1e:80:12:84:54:bc:35:4f:66:a6:bf:
                    ee:df:e6:59:e7:87:ef:5f:d5:dc:cd:db:67:e8:11:
                    f5:13:17:37:6e:a5:d6:a9:f5:34:46:a8:37:59:56:
                    2e:23:37:cb:31:e0:ab:e6:c0:64:34:b9:11:31:8d:
                    f3:93:ea:d8:a4:29:37:2c:03:77:39:0e:9b:93:7f:
                    c4:60:39:64:b3:f2:c5:62:0a:15:81:a6:49:92:d0:
                    bc:73:02:5e:80:39:6c:ae:8a:82:71:8e:a2:e3:0e:
                    cb:96:10:1f:c5:2a:61:4c:15:81:d3:6b:14:b5:52:
                    89:67:49:36:07:67:0e:1b:bf:36:b1:7e:06:8d:0a:
                    55:a1:82:8e:e6:3b:49:03:7f:0b:aa:2f:14:e7:e0:
                    17:51:97:c2:22:8c:4a:5e:2b:c7:32:72:a0:7c:19:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:77:F3:3C:17:CE:94:4A:41:C2:89:62:14:28:4D:77:0E:C7:CF
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e302e3230302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:1f:54:a0:4b:3c:8e:23:81:5c:5b:0a:eb:01:ab:f7:e6:
         c2:46:f5:6c:09:d9:d8:d6:6d:62:5e:8b:69:ff:a4:1c:3c:d3:
         01:f3:08:c6:3a:41:fb:2e:19:2e:56:22:41:cb:9d:c2:91:ae:
         6c:6a:22:5f:02:d8:84:45:0a:43:53:c7:7b:ae:78:7d:25:50:
         0f:01:d8:da:db:3d:d7:c0:c0:ce:02:17:0d:76:2a:c7:48:9a:
         53:bb:76:11:d3:bc:00:72:1d:08:fd:60:e6:e0:0c:a4:7b:a2:
         43:1e:80:d8:7b:2b:95:00:94:b0:71:18:b4:89:e5:e6:2a:47:
         ce:48:bb:5d:5e:44:cf:9d:73:0c:19:26:b4:82:83:72:14:65:
         ba:81:37:7e:da:3f:6f:e2:33:01:a5:47:b2:28:60:f7:60:27:
         be:d3:21:28:75:db:de:b0:bc:4c:76:8d:64:cf:7c:91:a1:79:
         45:e6:6e:5a:bf:2a:68:99:ea:ae:d5:09:ac:6d:11:02:3b:9d:
         ea:dc:f7:6f:9b:17:45:d7:cc:01:a6:a6:c4:81:e2:13:e2:c2:
         6c:b6:0c:a0:03:bd:4b:f7:f4:eb:7c:d7:5a:fa:83:30:6b:a0:
         36:f3:56:5c:a6:69:33:fa:6d:65:ab:9c:e2:97:74:2b:64:ac:
         63:ea:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org