Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e3231322e302f32322d3234203d3e203238333433.roa
File:                     3134332e3230382e3231322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          2YpSvHpBlLv1dX4BNGYdUgXhhUlToGnRwyQC3kGa98c=
Subject key identifier:   DF:A4:EA:43:91:08:5F:2B:3D:5D:6B:C5:D5:2F:94:8D:99:E2:04:27
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       15E7ED3413EF53DD6896D39B4498AE6B2C5CE4A8
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e3231322e302f32322d3234203d3e203238333433.roa
Signing time:             Mon 26 Dec 2022 16:40:38 +0000
ROA not before:           Mon 26 Dec 2022 16:35:38 +0000
ROA not after:            Mon 25 Dec 2023 16:40:38 +0000
asID:                     28343
IP address blocks:        143.208.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e7:ed:34:13:ef:53:dd:68:96:d3:9b:44:98:ae:6b:2c:5c:e4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Dec 26 16:35:38 2022 GMT
            Not After : Dec 25 16:40:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:07:98:f6:90:da:e9:ad:f9:3f:12:bf:32:
                    a5:b5:3f:e1:8e:b7:f7:77:d6:21:d0:47:84:60:90:
                    da:4b:47:59:0a:a5:a7:aa:f5:58:5a:c2:23:de:77:
                    54:aa:b7:65:b8:a7:c1:38:c1:3c:ac:ec:61:5a:9a:
                    42:0d:11:16:5e:42:14:3c:e2:40:73:aa:8f:5b:6f:
                    df:71:dd:54:8e:3f:cd:b4:c9:11:fd:5d:a3:d6:99:
                    3d:9c:af:65:28:af:94:b0:eb:9c:34:e2:b7:3c:7b:
                    03:97:51:d7:c8:66:e3:ca:e2:17:5c:7f:27:e3:75:
                    b0:50:8c:fd:f1:a8:b4:83:d5:60:d6:60:2b:7a:fb:
                    44:7a:b7:e4:32:10:96:24:43:e3:c3:0a:d3:4b:4f:
                    43:fd:6e:5c:54:97:85:62:9d:aa:23:46:ec:46:ad:
                    09:6f:d7:1c:ef:a3:f4:09:b6:b2:50:90:2b:cf:c2:
                    17:4a:c2:3f:46:30:4e:68:31:1f:d7:79:f4:04:fd:
                    de:03:7d:55:b0:0d:c3:23:72:2e:a0:f0:17:c9:c7:
                    d0:14:22:c6:fd:b2:3e:31:69:b0:2f:53:d5:88:4d:
                    bb:53:1c:4c:31:4b:a7:eb:89:1f:ce:60:e9:c8:39:
                    49:da:00:48:43:c6:49:95:0f:16:2e:2a:59:8c:ec:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:EA:43:91:08:5F:2B:3D:5D:6B:C5:D5:2F:94:8D:99:E2:04:27
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3230382e3231322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:c8:8b:f1:97:d3:d5:75:c5:32:4d:af:1a:44:30:7f:d7:
         05:4b:fe:54:0b:53:19:c1:4b:9f:fc:48:85:6b:86:5f:59:bf:
         0c:0d:4e:7e:27:16:b3:43:3e:64:77:ca:95:83:f0:e3:9e:29:
         8c:30:37:22:66:81:9a:99:a5:f1:02:58:5c:12:75:b3:eb:88:
         b9:72:a9:7f:74:dd:36:e9:9e:57:65:6a:a0:d3:06:0f:d5:17:
         81:65:23:f9:47:05:ff:06:97:2f:5e:68:06:16:8e:08:30:47:
         98:d5:23:c8:f0:04:cd:8b:90:ec:47:21:9e:b8:0f:47:2b:82:
         6c:81:36:f2:03:21:31:58:10:51:12:bd:07:a1:26:0f:38:6f:
         84:af:89:5b:1c:7c:a0:f4:70:d5:69:60:d5:8b:14:fe:2d:31:
         73:7e:df:b9:aa:ee:76:b2:d7:f4:cb:00:ec:5d:29:eb:8b:98:
         4a:a1:c8:1b:f5:23:f0:6b:57:ca:be:83:6d:4f:e4:36:59:99:
         58:e2:88:cf:c7:51:0c:70:27:0c:98:0d:20:a0:5a:e5:c8:c2:
         4f:ce:d1:f4:74:92:91:63:7f:cd:73:f3:53:78:55:36:05:df:
         24:ec:ce:3f:d3:87:4c:29:ae:35:4c:22:0f:5b:f9:ea:6f:92:
         ab:49:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org