Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e33362e3230342e302f32322d3234203d3e203238333433.roa
File:                     3133382e33362e3230342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          mEGCAkYndqJnYxRcZaINMuqpHG2cAaPtJAUtlaBt70w=
Subject key identifier:   08:B2:64:4E:92:2F:9C:6E:FA:EC:7A:4A:55:08:18:31:FB:90:97:50
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       42D65534DC9EF381EADDEABA68E42C78345A2709
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e33362e3230342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        138.36.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d6:55:34:dc:9e:f3:81:ea:dd:ea:ba:68:e4:2c:78:34:5a:27:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:df:cb:95:68:55:2c:2a:25:d3:39:ee:65:
                    73:60:10:cb:43:af:44:7c:5d:65:b0:6f:02:20:0e:
                    f2:b3:d5:a4:39:79:5a:c5:5c:f4:34:83:26:8d:3c:
                    99:4e:ec:0f:33:75:4b:63:16:e4:db:cd:ce:59:35:
                    5e:cf:15:f8:82:4b:f8:f2:66:6b:51:20:29:39:fe:
                    6c:19:b9:32:b9:7d:2e:ca:30:7d:7d:56:46:f8:2d:
                    7e:02:32:7c:cc:5b:89:66:ee:1c:ab:c2:c8:4d:43:
                    f2:1e:2d:50:96:bc:a8:b8:89:25:89:2c:74:4f:7a:
                    03:67:d8:a1:bb:0c:bf:22:76:75:dc:a8:d9:88:b6:
                    6b:20:85:39:84:04:2f:2a:2e:ba:28:3b:f9:66:14:
                    e3:c2:9d:06:eb:b3:2e:c8:d5:2e:5c:a2:4a:b7:af:
                    cf:38:28:d2:2e:c1:04:19:36:10:43:5c:9a:a7:07:
                    b1:29:c3:3c:af:04:8e:8a:a5:4c:96:80:88:b1:33:
                    2b:86:a8:eb:fc:00:ca:2a:98:65:52:bc:1b:e3:fd:
                    c8:ca:ee:a5:06:0d:c4:3e:4e:34:20:9e:b5:1a:25:
                    4d:11:ad:20:7e:4c:c3:d6:d7:29:2e:a8:3d:96:54:
                    f4:d6:98:12:a4:42:67:9b:6b:8a:ab:93:ae:e8:a7:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B2:64:4E:92:2F:9C:6E:FA:EC:7A:4A:55:08:18:31:FB:90:97:50
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e33362e3230342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:90:50:28:fe:de:c8:54:4d:d4:54:07:ed:42:b6:f6:16:
         74:fd:b6:13:db:c7:c8:8b:9b:d8:be:87:19:50:de:9e:b4:3f:
         9d:fa:c7:52:c9:f6:87:2a:bd:cf:c4:54:61:66:7a:b4:a0:70:
         b0:61:57:1b:00:9a:b8:14:42:27:ff:91:83:a3:f3:8e:66:23:
         a3:38:98:bf:d7:1e:49:37:3e:cb:a9:50:ff:15:92:1d:11:27:
         26:3c:71:d3:4e:19:60:a1:35:5b:c7:cc:63:5b:17:ef:c2:cd:
         32:59:c9:a9:82:b0:ee:df:5e:73:93:e6:b5:bd:d1:93:3c:93:
         b6:26:99:65:8d:2d:6d:86:39:7d:ba:24:32:d3:ac:6a:aa:23:
         52:13:ce:fc:67:78:66:ab:59:d1:23:5b:10:e1:0b:fb:94:22:
         c6:74:c8:ff:6f:6b:ea:65:19:9c:80:d3:5f:57:c5:d5:82:bd:
         27:c5:31:fc:05:f4:7f:0c:6a:41:08:84:6f:73:cc:53:a0:81:
         24:2f:da:0e:9e:df:f3:eb:59:31:f1:84:80:ec:bb:83:6d:3e:
         da:20:2e:87:4e:74:49:23:19:71:21:7c:f2:fa:be:77:ef:e3:
         fc:5d:10:01:da:47:d7:ef:17:fc:05:c0:8c:a0:4f:e6:a6:35:
         d5:63:23:10
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQtZVNNye84Hq3eq6aOQseDRaJwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjJaFw0yMzA0MjcxMzI5MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTYzMERGQ0I5NTY4NTUyQzJB
MjVEMzM5RUU2NTczNjAxMENCNDNBRjQ0N0M1RDY1QjA2RjAyMjAwRUYyQjNENUE0
Mzk3OTVBQzU1Q0Y0MzQ4MzI2OEQzQzk5NEVFQzBGMzM3NTRCNjMxNkU0REJDRENF
NTkzNTVFQ0YxNUY4ODI0QkY4RjI2NjZCNTEyMDI5MzlGRTZDMTlCOTMyQjk3RDJF
Q0EzMDdEN0Q1NjQ2RjgyRDdFMDIzMjdDQ0M1Qjg5NjZFRTFDQUJDMkM4NEQ0M0Yy
MUUyRDUwOTZCQ0E4Qjg4OTI1ODkyQzc0NEY3QTAzNjdEOEExQkIwQ0JGMjI3Njc1
RENBOEQ5ODhCNjZCMjA4NTM5ODQwNDJGMkEyRUJBMjgzQkY5NjYxNEUzQzI5RDA2
RUJCMzJFQzhENTJFNUNBMjRBQjdBRkNGMzgyOEQyMkVDMTA0MTkzNjEwNDM1QzlB
QTcwN0IxMjlDMzNDQUYwNDhFOEFBNTRDOTY4MDg4QjEzMzJCODZBOEVCRkMwMENB
MkE5ODY1NTJCQzFCRTNGREM4Q0FFRUE1MDYwREM0M0U0RTM0MjA5RUI1MUEyNTRE
MTFBRDIwN0U0Q0MzRDZENzI5MkVBODNEOTY1NEY0RDY5ODEyQTQ0MjY3OUI2QjhB
QUI5M0FFRThBNzlCQUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApjDfy5VoVSwqJdM57mVzYBDLQ69EfF1lsG8CIA7ys9WkOXlaxVz0
NIMmjTyZTuwPM3VLYxbk283OWTVezxX4gkv48mZrUSApOf5sGbkyuX0uyjB9fVZG
+C1+AjJ8zFuJZu4cq8LITUPyHi1QlryouIkliSx0T3oDZ9ihuwy/InZ13KjZiLZr
IIU5hAQvKi66KDv5ZhTjwp0G67MuyNUuXKJKt6/POCjSLsEEGTYQQ1yapwexKcM8
rwSOiqVMloCIsTMrhqjr/ADKKphlUrwb4/3Iyu6lBg3EPk40IJ61GiVNEa0gfkzD
1tcpLqg9llT01pgSpEJnm2uKq5Ou6KebqwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAiyZE6SL5xu+ux6SlUIGDH7kJdQMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzMzODJlMzMzNjJlMzIzMDM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAook
zDANBgkqhkiG9w0BAQsFAAOCAQEAL5SQUCj+3shUTdRUB+1CtvYWdP22E9vHyIub
2L6HGVDenrQ/nfrHUsn2hyq9z8RUYWZ6tKBwsGFXGwCauBRCJ/+Rg6PzjmYjoziY
v9ceSTc+y6lQ/xWSHREnJjxx004ZYKE1W8fMY1sX78LNMlnJqYKw7t9ec5Pmtb3R
kzyTtiaZZY0tbYY5fbokMtOsaqojUhPO/Gd4ZqtZ0SNbEOEL+5QixnTI/29r6mUZ
nIDTX1fF1YK9J8Ux/AX0fwxqQQiEb3PMU6CBJC/aDp7f8+tZMfGEgOy7g20+2iAu
h050SSMZcSF88vq+d+/j/F0QAdpH1+8X/AXAjKBP5qY11WMjEA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org