Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa
File:                     3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          NeRxwe8Q/5wDS/Le3nZpB3j27i4L/rqz3QX4LQ1huws=
Subject key identifier:   05:DD:E0:10:F4:E9:DE:8C:D2:0F:05:A2:E1:89:C0:D9:4B:34:3F:EF
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0C66B9234A9D6A679EFC01AAE1C43F0F0E03D8B5
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        138.118.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:66:b9:23:4a:9d:6a:67:9e:fc:01:aa:e1:c4:3f:0f:0e:03:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:e5:9d:5a:f3:1e:a4:c7:1f:95:a9:83:a4:
                    5f:97:ad:8c:9b:d0:3b:1c:5c:69:b0:a4:c7:67:ce:
                    b7:f0:89:f6:1f:38:7b:40:7e:dd:19:fd:72:c5:3d:
                    0f:ab:86:fe:be:8c:23:e2:eb:b7:2c:a6:e6:14:2f:
                    a4:79:94:8b:e3:7a:23:86:52:a1:aa:bd:d3:c7:42:
                    13:12:e7:df:12:bf:a0:6a:cc:fc:d0:ef:0b:37:ee:
                    f5:e0:e8:fe:32:ef:41:40:be:da:c9:d6:df:e4:c2:
                    06:77:e3:01:43:be:f0:a2:b8:67:0c:94:b6:d4:03:
                    59:42:c6:f9:cc:bc:a1:13:54:ae:b4:55:32:f7:e8:
                    41:c5:84:d0:70:25:6c:e0:4e:39:2c:1f:ca:e0:b0:
                    58:fe:76:a7:2a:0e:96:c5:21:57:49:be:7c:10:1e:
                    2e:9c:c8:37:48:f3:8e:9a:39:3d:2a:e2:16:d8:79:
                    1e:f5:7a:2d:35:3d:e5:b1:4b:02:c1:fd:67:f2:57:
                    ff:b0:a8:49:db:72:2e:a9:14:cf:4b:73:3a:e0:44:
                    d0:86:2b:34:9a:e1:7d:1b:14:29:55:46:6c:fa:33:
                    03:3c:8a:e2:4f:f6:23:79:1e:47:cb:52:d8:7e:32:
                    5a:bc:06:72:3b:8a:f2:db:a8:65:92:e2:01:4e:74:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:E0:10:F4:E9:DE:8C:D2:0F:05:A2:E1:89:C0:D9:4B:34:3F:EF
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:26:8e:41:53:67:42:a6:8d:49:71:1a:35:ea:7c:95:fb:
         36:7c:0b:11:fa:d6:2d:9e:32:d0:7c:d6:1d:1f:da:18:4d:b0:
         06:cb:32:f5:7d:90:8b:eb:1e:36:7d:d3:e1:c4:28:43:f0:a6:
         4a:77:ab:46:bd:d3:b5:c8:0d:00:58:44:10:61:da:0b:bc:cf:
         d1:1b:8a:c5:ad:6e:05:70:e3:d2:1c:cf:4f:65:2d:4a:6b:ba:
         a8:48:e2:a7:30:18:69:33:9c:e2:10:d8:9e:0d:a2:16:e1:eb:
         f5:2b:d9:d2:7d:72:93:5f:65:1f:6e:e0:8e:10:18:1d:64:23:
         fa:d7:1b:df:a2:9d:70:23:5e:a7:81:17:19:6f:27:ed:be:4d:
         93:4e:d5:99:c8:29:f4:a3:c3:a7:6d:3a:82:6a:cf:aa:26:f7:
         ac:d6:54:3a:99:aa:bb:b2:eb:d6:f2:49:22:40:57:f6:4d:34:
         f6:44:20:ae:d8:a3:c6:5b:73:5b:0b:b0:cc:8e:b5:fd:cc:32:
         62:27:97:84:bd:fc:90:6d:80:ca:1d:f2:5d:f9:f1:e6:fc:4d:
         36:90:cd:27:92:cf:be:77:09:da:79:bc:b0:4b:e3:d5:97:98:
         57:94:b0:e9:fb:ba:dd:49:a5:7d:84:fe:37:db:f3:57:2c:29:
         64:fc:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org