Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa
File:                     3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          2zqK2fFPl/CqOecL4YTRwYHhxovZzi6tjX/QPynrGeE=
Subject key identifier:   62:86:80:AD:F5:1D:E7:A3:66:4A:47:4C:E1:C0:3D:04:1E:EE:36:AB
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       6D8E59DAEA6898299ECF79427C63A3CB14FDBC8F
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        167.249.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8e:59:da:ea:68:98:29:9e:cf:79:42:7c:63:a3:cb:14:fd:bc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject: CN=3082010A0282010100C9D7BC4C8524DDD67832C3F26B1A7CFD8E88441462DFFCD13503CB0E830965F13F45CD9865690B03EB8871D66F8F33C82403371B24784A76DF66DCAA1EEC1A8DB504F2498602BE1B239DB39C2AFB48AE7F9089A51CE67155D45B5D68B6188A500779B12DAA57543BD7EC3B88B7E63641F6350AC6A09BB736D28F07C6BDC2C1A272FEB6C9C73F8D6A6042DFF6FF54FF47158E3C78BFD22D39D68C7847F677C076412F4B1FACC14E21110F6A497D213D7181DF6E813B167875571ABBE03417621E1621CF155DF3B2EAE40E05BD6EF2A0F560252AB542DA7892ED0B2C1ECB8651DA2CDFCDF86164D2D6EDA8167C7DA78658A153F46A8DD3B84A7AAC46ECE4F345E90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:bc:4c:85:24:dd:d6:78:32:c3:f2:6b:1a:
                    7c:fd:8e:88:44:14:62:df:fc:d1:35:03:cb:0e:83:
                    09:65:f1:3f:45:cd:98:65:69:0b:03:eb:88:71:d6:
                    6f:8f:33:c8:24:03:37:1b:24:78:4a:76:df:66:dc:
                    aa:1e:ec:1a:8d:b5:04:f2:49:86:02:be:1b:23:9d:
                    b3:9c:2a:fb:48:ae:7f:90:89:a5:1c:e6:71:55:d4:
                    5b:5d:68:b6:18:8a:50:07:79:b1:2d:aa:57:54:3b:
                    d7:ec:3b:88:b7:e6:36:41:f6:35:0a:c6:a0:9b:b7:
                    36:d2:8f:07:c6:bd:c2:c1:a2:72:fe:b6:c9:c7:3f:
                    8d:6a:60:42:df:f6:ff:54:ff:47:15:8e:3c:78:bf:
                    d2:2d:39:d6:8c:78:47:f6:77:c0:76:41:2f:4b:1f:
                    ac:c1:4e:21:11:0f:6a:49:7d:21:3d:71:81:df:6e:
                    81:3b:16:78:75:57:1a:bb:e0:34:17:62:1e:16:21:
                    cf:15:5d:f3:b2:ea:e4:0e:05:bd:6e:f2:a0:f5:60:
                    25:2a:b5:42:da:78:92:ed:0b:2c:1e:cb:86:51:da:
                    2c:df:cd:f8:61:64:d2:d6:ed:a8:16:7c:7d:a7:86:
                    58:a1:53:f4:6a:8d:d3:b8:4a:7a:ac:46:ec:e4:f3:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:80:AD:F5:1D:E7:A3:66:4A:47:4C:E1:C0:3D:04:1E:EE:36:AB
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:dd:87:0e:22:cf:df:17:86:7c:c2:1d:66:8e:37:ad:d7:
         fc:e8:ca:29:33:d9:87:81:51:c3:6b:b8:5b:96:2e:17:85:e0:
         5d:88:ee:9c:9b:18:41:bd:51:1a:e5:48:db:56:e5:8f:01:46:
         f2:8d:d7:3d:78:e4:3f:29:f4:9a:df:7a:bd:da:0d:f1:36:ff:
         40:bd:90:90:39:2f:aa:d9:3f:c3:24:9b:c5:32:5f:19:ce:18:
         b2:a8:d9:c7:fb:26:52:20:21:db:2b:9d:6c:5c:d8:02:76:43:
         c9:de:f1:52:6b:1e:03:21:dd:42:56:62:cd:a3:da:7a:5d:f6:
         29:fa:8c:1d:8a:03:d5:b6:dc:48:af:00:e0:d3:e6:f3:15:0c:
         67:6c:73:f1:30:5a:63:08:d3:ed:60:f3:5e:02:d5:00:12:c7:
         de:39:53:5e:a0:59:f2:04:3d:89:cb:e1:29:e0:1e:52:09:5a:
         82:77:f6:48:c6:64:65:b9:15:3e:8c:29:ce:e0:7c:75:d2:f3:
         32:dc:0b:7d:cc:0d:fe:73:d4:25:17:68:9c:72:65:1d:44:b4:
         99:de:f4:78:a6:ef:47:52:c8:01:19:9c:29:5c:4d:98:dd:74:
         e1:95:d8:48:7e:99:d0:b9:e1:df:69:86:f6:8e:cf:78:b5:9a:
         42:52:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org