Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa
File:                     3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          pFSWERl8b7p7GfWGzHM5w/8Gnlho/ksvYVG8SDG+wQ8=
Subject key identifier:   97:0E:9B:34:39:CC:C9:BB:2C:45:A3:6A:50:28:45:6C:D5:DB:E9:AA
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       39966229BB38F45D8D7719CF88234320196953EA
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:17 +0000
ROA not before:           Thu 28 Apr 2022 13:24:17 +0000
ROA not after:            Thu 27 Apr 2023 13:29:17 +0000
asID:                     28343
IP address blocks:        143.208.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:62:29:bb:38:f4:5d:8d:77:19:cf:88:23:43:20:19:69:53:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:17 2022 GMT
            Not After : Apr 27 13:29:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:df:84:14:0f:e3:23:12:a2:9e:cd:61:05:
                    d2:a6:79:0e:c6:50:32:6e:a4:73:43:6b:6b:3a:12:
                    b3:0d:0c:72:71:da:d6:e8:ef:bd:d6:e2:33:01:f3:
                    3b:d9:40:3d:7c:34:9f:6c:12:10:e3:a6:c6:f5:a0:
                    a0:ef:7f:0d:3b:b0:4e:80:d1:af:07:c6:df:e4:fc:
                    c1:8c:7a:19:fa:22:c8:65:cb:6e:89:be:e1:a1:5f:
                    a8:61:57:c5:53:94:4a:6d:96:75:98:90:52:ac:75:
                    fc:36:a4:e9:aa:42:0c:ce:dd:2a:70:6a:14:5a:7d:
                    48:3a:80:62:81:62:8f:df:9e:e7:12:3d:56:41:fb:
                    ac:5f:96:17:d3:d5:9d:2a:1c:63:4d:47:ff:60:0d:
                    fb:42:c8:3c:b3:f7:0b:f6:76:fc:a7:f2:38:b4:7b:
                    6d:eb:09:94:87:f3:68:c5:b8:09:f4:8c:a3:f8:d1:
                    f6:88:13:31:98:f7:08:27:0e:fb:f4:70:4c:47:8f:
                    03:33:fd:57:ef:58:12:21:69:a9:33:57:d6:52:59:
                    d8:28:bc:bd:92:26:63:26:7a:93:67:f0:aa:33:eb:
                    95:83:6c:f0:72:22:00:ff:8c:ef:00:95:c2:ad:34:
                    8b:40:dc:d1:79:ad:11:dc:06:f0:5c:07:1a:06:ff:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0E:9B:34:39:CC:C9:BB:2C:45:A3:6A:50:28:45:6C:D5:DB:E9:AA
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:8e:1b:de:0b:9e:34:71:4f:ce:4d:22:bb:0b:57:03:46:
         a5:20:cc:34:98:67:22:ea:de:a8:1f:70:7e:df:0c:88:e7:d4:
         10:a2:a0:c2:dc:d3:90:21:93:f9:cd:d1:3e:7d:31:3d:68:37:
         df:5f:41:92:9c:27:2b:a6:a2:98:e7:1f:80:e0:7f:13:2e:76:
         9a:4d:27:b5:e0:53:ae:b4:0f:a5:7d:51:62:a7:de:fe:43:1d:
         8d:82:f0:a2:ae:44:60:92:7b:bd:fc:12:60:ce:76:72:55:d0:
         1c:ba:92:3b:72:78:5b:da:05:c0:04:7f:09:84:40:8a:7a:7e:
         01:69:c1:42:2c:4d:ec:3d:e3:e3:95:af:67:3d:50:94:ba:ec:
         d9:99:3c:56:cd:3b:30:e8:6d:0f:2f:06:8b:fa:08:de:ad:7f:
         f2:ac:60:c9:dd:c8:be:8a:de:17:42:70:b0:6f:9b:d6:74:70:
         6c:25:eb:67:ae:4f:c9:f0:55:d9:31:27:3b:5d:c2:23:02:fd:
         78:0e:2b:c8:38:f8:82:4d:cc:f4:c3:5d:00:54:9b:15:cf:0e:
         bf:0b:54:f1:a2:da:4e:58:af:27:b3:f7:df:d8:b9:3d:20:0d:
         34:92:f8:68:42:6f:95:87:e8:15:4d:2b:04:de:3e:2b:c1:db:
         01:73:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org