Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3132322e3230382e302f32322d3234203d3e203238333433.roa
File:                     3133382e3132322e3230382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          7md2J9kb2aryK0ShFzwEHgX7Pf2Pq6iT/Urv3qKMDSI=
Subject key identifier:   05:18:82:53:C6:07:2A:CE:4D:7C:5B:B7:A0:00:DC:95:E1:BC:F3:D5
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       4C89831E17AD949831C890A2DF02D9F4D4F77BEA
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3132322e3230382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        138.122.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:89:83:1e:17:ad:94:98:31:c8:90:a2:df:02:d9:f4:d4:f7:7b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:b2:41:6b:e1:d0:c5:ab:1a:ad:89:ae:69:
                    dd:2e:53:d6:ef:75:44:eb:7a:ae:b2:38:f7:63:c5:
                    60:60:87:90:97:3f:48:f8:68:a0:07:fa:94:64:a7:
                    0d:a4:d6:d7:f3:6c:77:ac:e4:49:08:b9:25:3d:45:
                    9e:72:d7:cf:76:ca:7c:6f:34:76:6f:74:9d:f1:40:
                    a8:79:f0:3e:a7:e1:99:1e:44:c6:4d:95:2a:08:93:
                    35:d1:2f:02:77:d3:20:d0:dc:db:91:d0:77:12:7c:
                    19:e4:76:13:46:ab:e4:68:be:51:c0:a0:03:04:92:
                    7c:a4:44:1d:57:d8:42:2e:38:87:1a:db:ea:f2:67:
                    5f:4d:f4:90:d3:aa:c5:44:a7:ae:f5:77:b6:d7:ef:
                    1d:31:54:ab:c8:3b:3d:e6:95:29:5b:f3:2d:01:51:
                    e0:45:ca:96:12:c5:84:e5:db:72:f3:fa:b3:9f:bf:
                    a1:a8:aa:b3:7b:fd:86:85:cd:c9:d1:5f:69:43:49:
                    a3:7e:b8:6f:31:5d:07:7e:c1:8e:f1:47:59:1f:0c:
                    76:e8:3e:bd:45:0f:07:55:fa:c5:e3:c6:7c:96:24:
                    38:b6:94:e1:89:90:a3:f9:69:99:82:b0:1e:0e:cd:
                    c5:77:93:c4:91:91:30:ad:df:c4:89:38:4b:56:1f:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:18:82:53:C6:07:2A:CE:4D:7C:5B:B7:A0:00:DC:95:E1:BC:F3:D5
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3132322e3230382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:e2:35:04:52:be:c1:65:0c:49:c3:f9:02:b4:97:31:4f:
         22:6f:c7:50:cb:19:a4:00:23:76:4f:bc:12:34:2f:e4:61:97:
         15:84:0f:ea:c0:75:b5:5e:98:99:c8:6b:71:0d:53:61:b8:63:
         4c:9f:cc:6f:6f:53:d1:33:71:5e:9d:83:6e:80:9b:62:55:38:
         11:10:bf:74:86:24:4b:24:1c:85:84:9d:a2:06:a0:f2:af:61:
         b8:35:be:4f:9f:c1:1c:aa:7c:19:47:a0:05:66:99:f9:c9:e5:
         58:62:7c:40:8b:3f:48:c7:52:9c:df:e5:de:1e:89:8a:f7:65:
         90:5e:b3:f6:4e:39:8a:16:91:dd:67:2b:bf:b3:9b:a6:40:a7:
         56:94:c4:0c:a9:cc:0e:50:48:1a:80:60:0b:ce:47:93:d5:08:
         e8:0f:41:8a:dc:58:59:ef:5c:3e:db:71:1a:88:84:c9:d9:72:
         e8:71:2d:80:3f:96:66:38:5a:fa:d6:78:27:a9:60:74:1c:d0:
         56:af:2f:94:10:4e:da:00:7e:6a:61:ca:6e:66:c0:db:26:29:
         d2:9b:d0:2c:2c:db:10:03:1e:48:ec:46:2a:0f:4b:92:39:53:
         b6:d1:13:85:e7:2c:02:c1:ce:79:a5:76:34:ac:6e:78:68:22:
         4a:e3:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org