Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3131382e32382e302f32322d3234203d3e203238333433.roa
File:                     3133382e3131382e32382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          v7+he6yQqaI+zXaOsXK5CCep1zALf5t9YX5Ci65kXQE=
Subject key identifier:   59:98:48:3A:17:20:D0:04:25:A8:3C:D0:85:E9:BD:6A:00:16:63:31
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       6825A3A1027314EB88881B766263F8B4F85F14E4
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3131382e32382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        138.118.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:a3:a1:02:73:14:eb:88:88:1b:76:62:63:f8:b4:f8:5f:14:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject: CN=3082010A0282010100CC04E0A60D18D5A7B6B0755451D28F3F7188DA2FEAB6E4F1DD7F859219288D8B5D64A28A70FC03255765323BC55E4D8281E771B16FC847BE658CC00EFE488B94691DF8C8832DDA701C49A68F2391D7BB200E16F74CC2BE51EDE8635C5B5497BC86E55747902E9D701C6C954477552CFA0F70C68A344CA5887541DD065E258DD1B3FE3C4017C9AA8C6456D88C196BF0E9472222CF63653630139B2F39B6F93502E9161AAFC236CAD76FB5FD584F5AF17F001BFD427D9975632F40D3DACD285D2A002455D687A95C2AB4444AD1E4A57A8CB0200534945EB6ADC4FCAC70A2DD6961F7F7CB8342FB62E09A75C98170966FF650C40D0877E2F6D4FCD9385C6B431A630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:e0:a6:0d:18:d5:a7:b6:b0:75:54:51:d2:
                    8f:3f:71:88:da:2f:ea:b6:e4:f1:dd:7f:85:92:19:
                    28:8d:8b:5d:64:a2:8a:70:fc:03:25:57:65:32:3b:
                    c5:5e:4d:82:81:e7:71:b1:6f:c8:47:be:65:8c:c0:
                    0e:fe:48:8b:94:69:1d:f8:c8:83:2d:da:70:1c:49:
                    a6:8f:23:91:d7:bb:20:0e:16:f7:4c:c2:be:51:ed:
                    e8:63:5c:5b:54:97:bc:86:e5:57:47:90:2e:9d:70:
                    1c:6c:95:44:77:55:2c:fa:0f:70:c6:8a:34:4c:a5:
                    88:75:41:dd:06:5e:25:8d:d1:b3:fe:3c:40:17:c9:
                    aa:8c:64:56:d8:8c:19:6b:f0:e9:47:22:22:cf:63:
                    65:36:30:13:9b:2f:39:b6:f9:35:02:e9:16:1a:af:
                    c2:36:ca:d7:6f:b5:fd:58:4f:5a:f1:7f:00:1b:fd:
                    42:7d:99:75:63:2f:40:d3:da:cd:28:5d:2a:00:24:
                    55:d6:87:a9:5c:2a:b4:44:4a:d1:e4:a5:7a:8c:b0:
                    20:05:34:94:5e:b6:ad:c4:fc:ac:70:a2:dd:69:61:
                    f7:f7:cb:83:42:fb:62:e0:9a:75:c9:81:70:96:6f:
                    f6:50:c4:0d:08:77:e2:f6:d4:fc:d9:38:5c:6b:43:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:98:48:3A:17:20:D0:04:25:A8:3C:D0:85:E9:BD:6A:00:16:63:31
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3131382e32382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:dc:e2:55:33:69:f2:60:c8:05:73:79:d1:23:1d:e9:a2:
         f8:a8:1e:c9:25:c8:00:ba:55:5c:e2:3a:b7:cb:da:3a:57:a3:
         87:49:cd:2d:e3:ee:b2:de:3a:a0:b5:c3:66:2c:39:37:45:47:
         62:d5:18:eb:c2:5a:ff:e3:c2:d7:20:da:5a:cc:df:a1:38:b8:
         c2:b3:d0:a8:08:89:c2:0c:c5:89:c3:9f:eb:3d:bb:5b:f3:bd:
         d5:aa:de:97:9e:59:e4:f5:ea:5e:c0:07:16:02:73:17:e3:10:
         80:ed:93:52:2a:f8:62:e9:4e:3e:e4:24:a7:90:df:1e:51:f5:
         0b:4c:bf:ef:58:e0:61:64:63:ba:48:15:09:b6:02:2c:4b:35:
         45:dd:9b:bc:92:9c:ec:46:c3:f6:5c:16:1b:c9:9d:f2:55:15:
         ba:f3:3c:54:00:df:6f:fd:cd:e6:b2:9c:0b:e5:b4:f1:64:b7:
         83:08:cb:de:01:f9:84:25:10:18:90:9f:f2:28:d5:26:fa:de:
         8d:c4:d1:87:88:1d:e0:a6:fb:00:40:89:cc:38:78:e4:c4:55:
         1c:47:b4:9a:cf:0e:58:4c:f2:83:95:82:8d:7c:75:84:63:a7:
         eb:5e:10:bc:ff:36:cf:73:60:67:17:1f:f2:7a:b6:5a:5a:64:
         a9:db:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org