Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3230342e36302e302f32322d3234203d3e203238333433.roa
File:                     3133382e3230342e36302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          0D/kdtSFzJTJD4p69EAS3nezrvO9aPc5rf6oTwsdbrQ=
Subject key identifier:   D0:A4:B4:E8:05:47:0A:C9:C6:5C:2B:BA:6F:6F:29:72:57:6D:69:4F
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       56BA1EB0A6129C33408EEBB84330E218FFC54D28
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3230342e36302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        138.204.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ba:1e:b0:a6:12:9c:33:40:8e:eb:b8:43:30:e2:18:ff:c5:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:d1:c1:d6:d2:f8:ed:9d:bc:b4:e0:66:87:
                    3d:70:a2:b5:d6:02:bc:96:20:7b:a7:a6:14:d3:ff:
                    14:8a:5e:f2:6b:df:f0:b3:d2:98:06:e9:b5:f7:07:
                    e7:1d:7c:fe:48:91:28:cd:93:9f:f7:6c:25:dd:c5:
                    04:20:f5:38:23:73:ef:50:66:af:b6:77:eb:23:1f:
                    29:21:41:ab:e6:94:9b:57:38:7b:ba:52:e3:2c:2d:
                    0b:d7:50:9d:a0:4d:05:a0:97:a5:a4:56:6e:93:c2:
                    89:82:b3:95:32:af:f8:a1:7b:cb:6a:ee:3d:3d:76:
                    5d:85:e3:d4:4d:7c:3a:34:d4:a0:c3:09:fa:26:60:
                    43:6a:e2:4e:16:96:59:f1:2d:04:36:9f:42:1e:31:
                    50:b2:64:aa:ed:0e:e2:2d:e5:a8:93:58:b7:bb:a2:
                    d0:3b:c2:ed:65:e4:70:9b:15:0b:a0:46:5e:14:4f:
                    60:b0:ec:31:c9:6d:6c:1c:a7:da:6b:46:aa:0c:7d:
                    5f:43:36:d3:9f:04:12:52:a6:40:28:18:dd:49:b7:
                    e6:e6:01:f8:6d:cd:63:53:ae:d6:5c:de:73:da:9e:
                    9b:f3:fe:f7:51:68:c7:71:fc:83:e2:4b:7d:4a:57:
                    cf:e7:8a:b0:d9:47:3e:93:f1:63:2e:51:53:95:38:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A4:B4:E8:05:47:0A:C9:C6:5C:2B:BA:6F:6F:29:72:57:6D:69:4F
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e3230342e36302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:db:3f:d7:5c:86:60:a4:fa:64:c7:38:a9:ae:15:d3:a4:c4:
         fd:df:a0:3a:27:fc:74:7b:57:2a:13:86:6e:16:1f:cb:ad:c4:
         b8:e9:64:ac:2d:9b:82:95:ce:bf:c6:94:a2:2f:47:32:21:17:
         a5:cf:b9:7f:ba:bd:ee:89:b8:3a:10:6e:d6:88:33:49:a4:ad:
         07:03:cf:fb:0c:6a:e0:09:61:14:20:50:92:a6:01:7f:53:93:
         90:37:03:bc:ba:6f:79:b6:c5:ae:57:ff:15:e2:14:e6:ea:f3:
         2f:73:b8:a0:0a:ad:79:89:be:c6:23:ce:6f:d0:5d:30:85:80:
         ab:5b:57:52:25:7a:24:73:be:43:5f:d3:f9:71:87:cb:b2:7b:
         34:fa:03:42:61:a9:f2:0e:6d:d4:fd:65:00:f7:60:82:19:4a:
         1f:15:3a:1a:59:9e:85:bc:47:71:ce:ce:78:81:f5:37:8b:2a:
         a2:f5:a9:a5:47:5b:dd:1c:02:8b:17:82:d1:79:f0:3d:6b:f1:
         04:18:1d:54:59:92:c3:db:67:51:3c:af:c3:82:48:59:82:8c:
         4e:e9:f4:c0:ef:18:83:8d:4a:e1:f1:f2:71:18:5b:08:6f:1e:
         df:6e:c2:4a:25:af:4d:b5:2a:8d:c3:b7:dd:12:00:58:f8:8c:
         2e:9a:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org