Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e39372e3133362e302f32322d3234203d3e203238333433.roa
File:                     3133382e39372e3133362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          ze5tPw7808suLzW1p3y/81Rj34O3Sjp7TwLbEsCPrac=
Subject key identifier:   29:BE:8F:92:04:D6:E4:F8:D8:03:CA:C9:13:6B:39:86:31:AE:BC:CE
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1B0DEA9D7BF4D121873594B6DE22156F9B547879
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e39372e3133362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        138.97.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0d:ea:9d:7b:f4:d1:21:87:35:94:b6:de:22:15:6f:9b:54:78:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:15:dc:c0:d4:c1:94:aa:eb:18:32:02:08:
                    38:17:b6:3e:77:2d:df:1f:7a:d2:a2:57:f9:40:dc:
                    82:15:0f:c7:58:40:e4:56:4c:96:36:d6:27:3e:f2:
                    a5:00:b4:e3:b3:81:09:43:89:64:0f:a3:f9:e2:27:
                    0d:b2:3a:d6:33:7b:75:f2:21:9c:db:ff:e6:02:a6:
                    f1:63:22:b5:be:2d:0a:1b:6d:9c:2a:ef:e7:61:a5:
                    4b:73:ce:39:cd:2f:e4:a6:e2:c5:4a:bd:4f:c3:13:
                    a1:0f:b3:74:44:ab:27:f6:78:10:07:3e:47:e3:c3:
                    4c:8b:2c:7e:dc:54:50:fa:16:2c:28:2c:67:db:c0:
                    bf:de:86:39:c4:7e:c7:f1:ed:df:e7:53:e3:10:9a:
                    44:b5:b6:3d:10:55:23:79:8d:35:7d:aa:1d:7d:2b:
                    0d:6b:1d:ea:ba:73:33:d8:1c:3a:58:5d:e7:da:47:
                    f0:42:3b:bf:27:76:68:27:88:f6:6b:b1:df:8a:a7:
                    98:0a:66:7c:8d:35:90:70:45:dd:12:1b:02:88:47:
                    7a:2e:10:0b:16:4b:5f:23:6a:34:19:15:30:20:ff:
                    a6:ab:6a:cf:5a:17:d2:f0:e4:21:fa:7c:20:e6:ed:
                    dd:12:bc:a2:93:cc:c9:d4:13:8a:e8:bd:92:91:8e:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BE:8F:92:04:D6:E4:F8:D8:03:CA:C9:13:6B:39:86:31:AE:BC:CE
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3133382e39372e3133362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:99:a6:3e:79:65:08:73:69:80:1e:4d:a0:06:b2:c8:5a:32:
         c3:f5:d9:4e:7c:72:31:fd:fe:6e:31:15:a6:86:a2:3e:ca:cd:
         ae:ad:4a:3a:65:b9:72:a1:8d:2f:7f:49:7c:a5:f9:93:49:0b:
         21:7d:7a:1e:0f:1e:01:19:37:47:07:f9:49:96:17:60:1a:39:
         14:42:0a:68:66:98:89:30:f4:c6:52:ae:25:44:48:66:93:d4:
         4c:de:bc:4d:58:62:75:09:1d:e8:a9:d8:a4:0c:2a:84:64:a7:
         d6:09:af:8d:18:77:3f:2f:60:5e:05:3a:cc:10:e8:c7:2a:a4:
         42:6f:81:a8:9a:6d:be:a9:24:5c:cc:5e:5a:70:c2:48:cb:7e:
         17:91:da:2f:77:b8:d4:f9:df:1d:f7:c6:d1:d4:39:eb:29:e1:
         35:52:78:97:2f:46:1f:b2:30:46:3c:d3:be:d2:00:5d:31:61:
         ae:2c:1f:54:6c:26:fa:f2:4a:3c:d0:08:f3:58:06:fb:b1:a1:
         cf:2e:64:24:c5:65:8c:e7:af:c6:f9:01:42:fd:ae:12:14:a4:
         c1:a3:bf:8b:d7:f8:c8:fc:b6:c1:6d:66:69:39:b4:8b:c4:37:
         2f:f2:97:a3:75:79:e2:85:d2:85:0a:e2:72:de:b0:df:b5:bb:
         8d:55:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org