Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa
File:                     3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          j808Ys+QJTEVZ7tStR7z23CvCpq0Gb2Ms+r51XCowpw=
Subject key identifier:   72:BB:47:24:D9:EB:DD:07:99:7B:1C:26:D9:28:A9:3D:76:A5:62:5A
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       544A261754D92186E8251F2CE94ED40A4F149DA6
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        143.255.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4a:26:17:54:d9:21:86:e8:25:1f:2c:e9:4e:d4:0a:4f:14:9d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:34:0a:e2:61:93:bc:73:a4:0f:1a:a5:a7:d3:
                    d4:96:6d:0f:cb:75:24:cc:60:b4:2d:52:2a:3f:c7:
                    ec:6b:71:c7:26:1c:45:08:1e:44:66:53:cf:c1:b6:
                    6e:2e:b0:8d:c9:4f:8e:34:91:71:d8:fc:0d:ea:43:
                    c2:b3:10:7c:24:46:c2:5a:c9:08:3e:db:6c:ef:b0:
                    d9:00:e5:93:b5:bc:bb:3b:50:b6:f1:d6:f7:86:e4:
                    f6:29:b2:c1:1e:39:0a:ed:ec:85:17:12:10:7e:ae:
                    e3:49:c9:c9:85:3a:e4:ad:48:0a:67:39:0b:bc:5d:
                    fd:72:20:84:10:4d:92:66:78:ff:91:ce:e3:39:5e:
                    38:ef:8e:b1:bb:cf:0f:c4:1e:ea:b3:a2:97:ff:94:
                    f5:b8:50:96:cf:d2:91:fb:ac:37:b0:4d:a3:0f:08:
                    11:26:ac:ff:0d:53:e1:15:65:48:4a:71:56:c2:19:
                    0a:1d:b6:70:30:94:77:72:b7:22:2e:0b:29:91:ca:
                    8c:52:d7:4b:3d:3a:b3:0f:66:cc:3a:7c:41:57:bc:
                    6a:8d:86:1e:ac:3e:d5:08:f4:b6:7f:27:24:6d:dc:
                    52:5b:80:f4:e9:eb:7f:ce:24:4d:47:30:05:51:46:
                    cd:14:e6:d2:c0:8f:61:b6:f7:d8:aa:8d:ca:72:61:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:47:24:D9:EB:DD:07:99:7B:1C:26:D9:28:A9:3D:76:A5:62:5A
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:32:86:5a:52:d9:14:df:74:25:28:bb:74:c7:0b:1b:1b:
         6b:e5:8e:f4:84:7b:87:28:1d:38:ad:49:7e:f8:c5:eb:a2:97:
         85:d7:56:c4:ed:d4:d8:fc:f7:18:a8:11:93:ce:b9:83:33:6f:
         e4:af:61:c0:dc:2b:58:38:e1:d0:2b:e3:3a:be:6a:76:84:d1:
         e4:9b:0a:19:4b:dd:b6:ad:c9:24:e5:df:e3:0d:de:ef:51:95:
         fd:d7:b3:f9:0d:e0:af:0a:97:c5:05:a2:fd:3c:9a:ea:da:03:
         a9:34:5e:3b:f0:dd:39:bf:65:4c:da:6c:ad:f4:6a:ad:33:7c:
         39:bb:ad:fb:99:0d:e6:96:e1:53:68:fd:84:2b:07:a0:a0:38:
         0c:1c:83:ea:c6:7c:4b:ec:53:33:8e:c7:fb:cd:ef:12:57:5c:
         a0:15:9b:1e:d8:2d:67:08:bc:39:af:06:8f:07:1f:c6:50:ba:
         58:2f:ac:e7:86:dd:1c:e3:2b:5f:52:4d:ee:67:8b:54:f5:e1:
         f6:1b:9b:06:4a:29:56:91:3b:d3:b4:0f:3a:c8:a9:ec:db:23:
         17:1d:74:fa:f7:99:95:25:ce:c6:c3:de:60:e2:03:c1:21:c7:
         fd:e6:66:d6:8d:19:51:04:c5:c8:b2:28:0f:98:8e:5e:fe:51:
         8c:9c:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org