Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3132312e3138382e302f32322d3234203d3e203238333433.roa
File:                     3133382e3132312e3138382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          WafOuOMczW1COdpZFjtpTtcESxCURAP0tdDdc5LVFa8=
Subject key identifier:   EE:E7:89:8E:3C:19:BB:03:36:09:72:F0:AB:1D:34:37:29:0A:C6:EB
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       41BEA47D0B8999C87ADDE1521C954323872CC251
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3132312e3138382e302f32322d3234203d3e203238333433.roa
Signing time:             Tue 17 Jan 2023 17:23:36 +0000
ROA not before:           Tue 17 Jan 2023 17:18:36 +0000
ROA not after:            Tue 16 Jan 2024 17:23:36 +0000
asID:                     28343
IP address blocks:        138.121.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:be:a4:7d:0b:89:99:c8:7a:dd:e1:52:1c:95:43:23:87:2c:c2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 17 17:18:36 2023 GMT
            Not After : Jan 16 17:23:36 2024 GMT
        Subject: CN=3082010A0282010100C91D2161DE4C29EAEBAD9A954DB9D81C71748B6D0AE7F77634EB069C552902E4E8DF00A6B9EE341641C97DFE063226E7F42763F8034F02667D0E4DB6662107FEFC92B7D3692ACEF224BEFB160B7863A21BB1930D389BD8255D345E36A2C35AB6CA42D8EF6833DBA8D3E0AAD46AD49D47401AAAF184E9E8DF8ADE1D90E597531CCC84062068656CA0636F43FB5364507A9D58134F7F5EE4423FA16F7EDEE2C463E40A627249B436C8C5D7DC151F56AA7863155042C7034BFD2B8A718090576740DEFFE0F1FF9F5A17F11AE0C8D2588E703C7D4294F748DDF2DC891E437B28C06E78D4BD273DF62285CCE18F36CE0F9747D4D78AF67AD612C80CA804F48BF33FD30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:21:61:de:4c:29:ea:eb:ad:9a:95:4d:b9:
                    d8:1c:71:74:8b:6d:0a:e7:f7:76:34:eb:06:9c:55:
                    29:02:e4:e8:df:00:a6:b9:ee:34:16:41:c9:7d:fe:
                    06:32:26:e7:f4:27:63:f8:03:4f:02:66:7d:0e:4d:
                    b6:66:21:07:fe:fc:92:b7:d3:69:2a:ce:f2:24:be:
                    fb:16:0b:78:63:a2:1b:b1:93:0d:38:9b:d8:25:5d:
                    34:5e:36:a2:c3:5a:b6:ca:42:d8:ef:68:33:db:a8:
                    d3:e0:aa:d4:6a:d4:9d:47:40:1a:aa:f1:84:e9:e8:
                    df:8a:de:1d:90:e5:97:53:1c:cc:84:06:20:68:65:
                    6c:a0:63:6f:43:fb:53:64:50:7a:9d:58:13:4f:7f:
                    5e:e4:42:3f:a1:6f:7e:de:e2:c4:63:e4:0a:62:72:
                    49:b4:36:c8:c5:d7:dc:15:1f:56:aa:78:63:15:50:
                    42:c7:03:4b:fd:2b:8a:71:80:90:57:67:40:de:ff:
                    e0:f1:ff:9f:5a:17:f1:1a:e0:c8:d2:58:8e:70:3c:
                    7d:42:94:f7:48:dd:f2:dc:89:1e:43:7b:28:c0:6e:
                    78:d4:bd:27:3d:f6:22:85:cc:e1:8f:36:ce:0f:97:
                    47:d4:d7:8a:f6:7a:d6:12:c8:0c:a8:04:f4:8b:f3:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:89:8E:3C:19:BB:03:36:09:72:F0:AB:1D:34:37:29:0A:C6:EB
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3132312e3138382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:76:65:46:61:d3:9c:88:b0:93:9d:64:bf:fd:7b:13:90:
         60:29:06:41:f3:eb:97:46:18:eb:6f:6b:a7:c9:fc:3b:49:8d:
         21:9b:a4:94:4a:ca:fa:06:be:20:c4:1f:a4:07:a5:1a:e2:6f:
         2b:85:75:aa:69:59:cb:0d:d0:98:80:6f:7c:14:c3:1a:c2:5a:
         ff:ea:2f:03:41:61:ef:2d:13:c1:93:83:f5:ce:29:37:ab:9a:
         69:8b:31:d4:eb:9f:5b:e2:16:1a:27:8b:a2:b9:6d:36:a0:43:
         19:5a:2e:3e:95:e9:f8:90:e1:9c:ae:8b:ce:c2:20:60:9f:a3:
         3e:7a:b6:b2:8e:89:36:d1:74:c6:51:df:db:8d:04:29:9d:25:
         e4:ba:a9:c8:3e:8f:c2:62:ce:31:17:1e:b7:13:4f:94:f7:8e:
         59:c6:98:8c:16:30:26:23:17:ab:e6:08:17:f7:9d:1d:91:87:
         77:e0:7d:17:05:ce:71:9b:d2:9b:17:72:94:7b:c1:11:6d:ce:
         21:be:e9:22:f1:99:0c:d4:ab:b6:2f:21:33:a7:4a:ba:de:39:
         20:d0:8d:73:0c:fc:0a:a3:6f:95:8b:d4:68:64:6a:f1:48:32:
         3c:2b:07:3d:8f:82:57:22:87:fa:b1:64:38:8a:41:33:6f:dc:
         16:25:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org