Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e39342e3138382e302f32322d3234203d3e203238333433.roa
File:                     3133382e39342e3138382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          y14JapDgEj393Z6ZXBk+Dgu1tLLFqqf4Pcq6fr+Uz/0=
Subject key identifier:   39:6C:F1:D4:03:0D:42:2E:CD:FA:9E:D5:57:81:84:FA:1D:A0:7E:18
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       68EF3BE293F2CC427DAF507B84DE9B77D2F2B810
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e39342e3138382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        138.94.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ef:3b:e2:93:f2:cc:42:7d:af:50:7b:84:de:9b:77:d2:f2:b8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:71:19:6d:d1:87:ff:69:45:25:8e:a1:3f:
                    c0:b5:81:ab:95:95:2c:a6:15:ee:51:b2:0d:81:34:
                    a4:0c:86:0b:17:bc:f3:64:80:d0:57:55:b1:0a:f7:
                    ff:b7:80:3d:8c:75:35:ba:04:64:b0:9a:8c:8b:1b:
                    5c:b4:60:f4:f3:7c:34:d3:09:52:0b:a2:34:40:b9:
                    a4:08:17:1d:7a:f1:00:52:99:27:ce:b0:66:ee:cc:
                    14:4e:c2:68:21:a3:7a:34:ab:bf:da:39:3e:14:48:
                    39:82:00:98:67:b9:21:38:60:ce:86:0a:96:69:d6:
                    ba:ab:03:79:1d:49:cd:70:91:80:04:a1:c9:67:9f:
                    be:93:68:cb:91:f2:b6:52:27:39:65:4b:9e:64:6a:
                    f3:0c:a9:15:87:2c:fc:4d:d1:91:7f:27:c1:bd:47:
                    6e:b4:43:d7:90:f3:78:77:9d:1b:01:2f:b1:74:ba:
                    88:62:52:c0:bd:97:7d:43:5c:e7:5b:62:1b:66:4a:
                    06:c3:10:ac:f6:8f:89:10:bf:a9:b0:35:73:5d:67:
                    82:36:1c:4d:f1:3a:d1:b8:4f:5c:59:77:4a:2f:f5:
                    23:39:6f:0e:d6:c7:80:10:f5:e1:24:6a:fa:de:4e:
                    93:69:32:d6:6b:c9:43:50:f6:6b:c6:3a:e3:48:23:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:F1:D4:03:0D:42:2E:CD:FA:9E:D5:57:81:84:FA:1D:A0:7E:18
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e39342e3138382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:ce:27:81:26:48:24:02:3b:01:e0:41:c9:1d:91:f3:48:
         b1:14:14:0c:31:63:b1:41:54:0b:99:96:46:51:7c:2f:e4:9b:
         12:30:ac:8f:f3:4b:d1:fe:8e:29:7b:16:c1:4c:b2:26:2e:5d:
         a6:7c:57:67:f6:ca:04:ee:51:49:ac:ec:09:68:00:cc:e6:15:
         82:da:ca:de:a4:64:8e:c2:30:67:fb:36:15:46:27:ee:97:d1:
         84:71:7b:22:15:8e:f0:14:73:74:73:8e:72:18:8a:ba:72:4f:
         a8:14:85:7f:a4:1b:2c:16:20:5f:a8:86:68:61:26:56:c3:f3:
         96:10:10:f9:9a:bc:88:34:c3:28:fd:61:f3:17:99:e7:a0:c6:
         ea:0d:55:4d:26:a1:fa:ec:9e:58:10:c8:99:f0:42:da:f6:d4:
         a4:0e:c6:c9:c9:ef:c0:ec:5c:53:c4:2c:98:58:51:e6:57:a0:
         e9:b3:24:99:47:56:02:28:91:df:58:54:b8:81:f9:88:da:8e:
         8c:03:f4:56:95:5f:33:9b:5c:f0:2c:c0:b6:ad:14:6f:23:93:
         70:20:44:03:8f:d2:04:43:a3:1d:b1:b7:96:3d:06:3f:5a:2e:
         d4:1d:92:16:5c:4f:95:d9:83:bd:70:82:f8:0a:a8:7d:85:5a:
         82:50:2e:86
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUaO874pPyzEJ9r1B7hN6bd9LyuBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MjBaFw0yMzA0MjcxMzI5MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVERjcxMTk2REQxODdGRjY5
NDUyNThFQTEzRkMwQjU4MUFCOTU5NTJDQTYxNUVFNTFCMjBEODEzNEE0MEM4NjBC
MTdCQ0YzNjQ4MEQwNTc1NUIxMEFGN0ZGQjc4MDNEOEM3NTM1QkEwNDY0QjA5QThD
OEIxQjVDQjQ2MEY0RjM3QzM0RDMwOTUyMEJBMjM0NDBCOUE0MDgxNzFEN0FGMTAw
NTI5OTI3Q0VCMDY2RUVDQzE0NEVDMjY4MjFBMzdBMzRBQkJGREEzOTNFMTQ0ODM5
ODIwMDk4NjdCOTIxMzg2MENFODYwQTk2NjlENkJBQUIwMzc5MUQ0OUNENzA5MTgw
MDRBMUM5Njc5RkJFOTM2OENCOTFGMkI2NTIyNzM5NjU0QjlFNjQ2QUYzMENBOTE1
ODcyQ0ZDNEREMTkxN0YyN0MxQkQ0NzZFQjQ0M0Q3OTBGMzc4Nzc5RDFCMDEyRkIx
NzRCQTg4NjI1MkMwQkQ5NzdENDM1Q0U3NUI2MjFCNjY0QTA2QzMxMEFDRjY4Rjg5
MTBCRkE5QjAzNTczNUQ2NzgyMzYxQzRERjEzQUQxQjg0RjVDNTk3NzRBMkZGNTIz
Mzk2RjBFRDZDNzgwMTBGNUUxMjQ2QUZBREU0RTkzNjkzMkQ2NkJDOTQzNTBGNjZC
QzYzQUUzNDgyMzczN0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtd9xGW3Rh/9pRSWOoT/AtYGrlZUsphXuUbINgTSkDIYLF7zzZIDQ
V1WxCvf/t4A9jHU1ugRksJqMixtctGD083w00wlSC6I0QLmkCBcdevEAUpknzrBm
7swUTsJoIaN6NKu/2jk+FEg5ggCYZ7khOGDOhgqWada6qwN5HUnNcJGABKHJZ5++
k2jLkfK2Uic5ZUueZGrzDKkVhyz8TdGRfyfBvUdutEPXkPN4d50bAS+xdLqIYlLA
vZd9Q1znW2IbZkoGwxCs9o+JEL+psDVzXWeCNhxN8TrRuE9cWXdKL/UjOW8O1seA
EPXhJGr63k6TaTLWa8lDUPZrxjrjSCNzfQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FDls8dQDDUIuzfqe1VeBhPodoH4YMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzMzODJlMzkzNDJlMzEzODM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAope
vDANBgkqhkiG9w0BAQsFAAOCAQEAiQ7OJ4EmSCQCOwHgQckdkfNIsRQUDDFjsUFU
C5mWRlF8L+SbEjCsj/NL0f6OKXsWwUyyJi5dpnxXZ/bKBO5RSazsCWgAzOYVgtrK
3qRkjsIwZ/s2FUYn7pfRhHF7IhWO8BRzdHOOchiKunJPqBSFf6QbLBYgX6iGaGEm
VsPzlhAQ+Zq8iDTDKP1h8xeZ56DG6g1VTSah+uyeWBDImfBC2vbUpA7GycnvwOxc
U8QsmFhR5leg6bMkmUdWAiiR31hUuIH5iNqOjAP0VpVfM5tc8CzAtq0UbyOTcCBE
A4/SBEOjHbG3lj0GP1ou1B2SFlxPldmDvXCC+AqofYVaglAuhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org