Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa
File:                     3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          hWmnWKc9/7RkwkrfwleA4MELxwGKly9J/F8iBrVOKEs=
Subject key identifier:   71:AC:04:BB:82:D9:EE:64:51:82:AA:88:1F:46:E7:8A:0E:22:AD:76
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       6C83A832C80FFB256134CA917C50920538C1C3C9
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        168.232.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:83:a8:32:c8:0f:fb:25:61:34:ca:91:7c:50:92:05:38:c1:c3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:32:eb:3c:d3:9e:c2:03:56:96:bc:52:a1:
                    fe:77:a4:0c:71:0e:60:dd:16:2d:bd:97:dd:c2:9e:
                    d2:cf:e3:3f:33:ce:e2:b3:62:e8:50:db:92:ce:df:
                    12:75:a2:72:72:02:62:fa:1c:ad:98:8c:54:7a:0e:
                    03:a2:33:8a:09:1f:80:05:a1:2a:83:df:36:d7:c4:
                    f5:26:17:d1:fc:9d:13:2a:23:5d:40:4a:98:ac:d7:
                    8a:30:bc:d5:cf:7e:35:fd:b8:1e:aa:88:17:c4:de:
                    0b:ec:ac:42:33:4a:fc:e2:de:9f:8e:6a:2b:b9:a3:
                    90:4d:7a:d3:89:78:0b:eb:79:11:9f:21:55:2e:8a:
                    5b:8c:89:2a:fe:0b:48:2e:b5:31:ac:58:c7:36:c7:
                    15:ce:a7:1c:e4:8f:da:98:97:97:2b:3d:70:ac:1e:
                    2c:34:6d:7d:db:98:11:ce:37:e1:f5:9e:fe:88:fe:
                    a8:a3:62:1e:c3:f4:24:97:17:bb:28:bf:a7:c6:c9:
                    33:6d:9e:c5:b8:bc:01:cb:25:be:ef:7f:c3:27:c8:
                    2c:2a:0b:f6:74:60:26:16:e2:e3:d5:d4:94:80:a5:
                    a1:6f:8a:7d:44:de:09:9f:4f:5c:ea:e1:bc:f1:dc:
                    44:99:9e:36:99:35:ce:aa:b3:e0:6c:a2:13:97:2d:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AC:04:BB:82:D9:EE:64:51:82:AA:88:1F:46:E7:8A:0E:22:AD:76
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:dc:59:91:3c:1a:d9:7d:52:a8:f6:9d:c5:92:20:b0:bd:9b:
         b7:5b:5b:0c:f7:22:39:68:d3:9b:91:c5:59:ff:4b:7f:14:06:
         0a:99:b3:aa:9c:a7:47:66:27:26:0d:47:6d:bd:03:48:45:a8:
         8c:8d:95:0f:71:52:f7:c4:fa:66:ad:35:90:db:2e:fe:94:9d:
         b2:89:7e:27:79:33:7f:1f:e1:e3:19:95:80:34:6a:cb:15:67:
         f2:1f:ae:d2:9e:52:6b:00:aa:bb:a3:da:16:df:7f:22:38:03:
         74:79:98:6b:c5:89:9b:bb:8c:de:be:e7:27:a3:18:3c:04:1f:
         d9:58:ad:f8:cc:db:8c:9a:2c:02:71:07:13:07:50:2b:f1:9c:
         84:73:a5:21:94:cf:87:f0:40:b3:a3:d1:9e:92:79:e5:b5:68:
         69:70:51:0a:83:35:37:f0:11:8b:bb:23:fe:52:ad:0b:60:99:
         a7:3d:01:d2:f7:42:0d:c8:2e:6d:dc:41:7d:b4:e2:06:80:14:
         70:f9:de:d0:e7:e2:46:83:06:b2:13:a2:5d:53:91:29:a1:9f:
         bb:e8:ff:b2:ff:b5:aa:45:83:7b:2d:f0:18:46:a5:68:9a:73:
         c2:55:a7:be:84:f9:59:d1:fb:e3:e6:3b:57:e2:ff:94:84:1b:
         ee:34:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org