Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e302e3132302e302f32322d3234203d3e203238333433.roa
File:                     3136382e302e3132302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          tX3Q2IsH3O47xT0mWyr3cYSLDoOu402GbiwZPCqLa/0=
Subject key identifier:   29:E9:FF:55:49:EB:38:F4:A7:A0:B2:02:63:CA:97:B0:B5:07:3D:80
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       54B2A847651667C2B4E5085B28AFA164679DD08A
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e302e3132302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        168.0.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b2:a8:47:65:16:67:c2:b4:e5:08:5b:28:af:a1:64:67:9d:d0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:b1:aa:27:80:d4:70:12:60:93:e4:17:42:
                    6a:43:19:30:3f:1a:9e:df:e1:9f:c6:a1:e9:0a:25:
                    d5:6e:03:2c:50:cb:29:88:1c:52:d9:e7:60:66:c9:
                    fb:e9:1f:44:73:69:c1:05:3e:3f:8b:9e:5f:f1:74:
                    4a:8b:d2:6f:bf:7e:b8:cd:66:19:12:a3:1e:c5:77:
                    a8:27:e8:f5:cb:e7:45:a4:b5:be:4a:9c:50:9f:ab:
                    bc:56:1b:4f:a4:d2:3c:32:5d:5a:dd:e9:76:6f:a7:
                    3b:4a:1f:8e:4c:02:f0:ba:5a:a3:0a:5b:d1:2e:7f:
                    00:a1:b8:99:a0:66:d8:40:dc:7a:6c:66:e8:7a:65:
                    97:2e:a6:12:d0:e5:40:0d:e9:d1:f1:5c:3d:52:32:
                    24:73:b3:f8:8a:c3:19:9c:f1:31:69:00:13:c2:6e:
                    f4:7d:06:14:69:06:33:5f:a3:9b:df:d7:c6:5d:f0:
                    4a:17:74:1c:bd:d5:bd:63:0b:05:19:4a:ea:b9:a7:
                    7e:55:01:37:e4:cf:48:f3:f7:c2:11:9b:00:4a:ff:
                    32:ad:59:82:8f:1b:43:b9:34:a6:c7:2e:b1:43:1e:
                    16:42:e2:32:f0:b0:46:22:02:fc:f7:c9:b8:7b:a1:
                    81:94:51:c6:84:cf:81:02:87:04:57:69:11:28:c0:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:FF:55:49:EB:38:F4:A7:A0:B2:02:63:CA:97:B0:B5:07:3D:80
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e302e3132302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:8f:83:c4:38:83:af:d8:ca:28:4c:2e:ac:a7:78:9b:0d:
         da:1a:6a:1d:fa:53:7a:89:9a:e1:23:ef:84:c3:cd:fd:f5:09:
         9a:8a:88:57:a7:d9:a3:82:ff:77:39:9a:c3:81:b0:0f:35:2e:
         c0:c3:72:18:bc:ec:8e:0a:57:f3:69:90:79:2a:03:83:e0:4e:
         81:63:6d:53:74:78:71:17:34:d2:53:a5:a5:58:76:54:d8:6c:
         bc:2c:15:55:ce:9b:2c:b4:5e:0b:71:12:06:01:e3:3a:74:4b:
         30:2f:e2:56:98:fa:45:c9:e5:75:82:bf:a2:9e:53:ea:8d:b3:
         7f:f0:db:7a:d3:6b:d4:ae:34:9e:9d:64:bc:fb:30:6b:65:86:
         97:98:2b:a9:72:11:c3:eb:16:50:02:45:13:1f:b1:7b:e9:82:
         75:df:79:38:60:ec:fa:e3:b5:a9:b1:64:61:37:f5:e9:d9:02:
         ea:35:88:c2:6f:57:2a:0b:ee:61:de:14:03:42:37:86:82:69:
         e5:6c:72:74:b4:b9:1c:de:7f:ac:0a:b9:12:01:f6:c1:4f:8d:
         54:96:18:90:47:ea:be:6b:6b:4e:b8:39:3b:72:82:56:cd:a7:
         4a:8e:f7:de:a0:5e:3d:32:97:a2:ba:9e:9a:bb:f0:ab:d4:80:
         9e:3a:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org