Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3233322e32342e302f32322d3234203d3e203238333433.roa
File:                     3136382e3233322e32342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          FMNJG/jIRfjlX+duCOk4Hz4C0YuBG/Zkrkqcu4CJZv4=
Subject key identifier:   FB:69:34:66:B5:70:98:62:77:FA:0A:E5:83:2C:58:7D:54:7C:EC:E6
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       7C0D010D704D0BC8E561E8675EEF7FEC326167B5
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3233322e32342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:17 +0000
ROA not before:           Thu 28 Apr 2022 13:24:17 +0000
ROA not after:            Thu 27 Apr 2023 13:29:17 +0000
asID:                     28343
IP address blocks:        168.232.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:01:0d:70:4d:0b:c8:e5:61:e8:67:5e:ef:7f:ec:32:61:67:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:17 2022 GMT
            Not After : Apr 27 13:29:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:3d:6b:5c:ba:75:29:75:54:85:70:ad:b2:
                    c6:d6:66:a9:6e:f2:a0:0b:92:e8:0e:2b:7d:a2:91:
                    83:56:17:d3:62:18:e2:98:ff:9e:b6:3c:e0:1d:9a:
                    9a:33:25:b0:74:13:a6:45:17:ab:9b:48:a3:a1:46:
                    ed:e2:85:75:0a:53:b7:59:4f:27:fb:83:29:c4:0f:
                    8b:bc:8c:d7:b2:3d:1b:87:6b:e9:b5:c0:80:db:71:
                    fa:f7:45:8a:65:c8:02:0c:51:1b:ea:4a:d2:11:cc:
                    42:9f:b1:1b:cc:b4:f1:2d:83:89:41:60:68:16:95:
                    1f:25:9a:30:1c:ac:33:e0:ac:8c:95:57:b5:5a:e2:
                    37:a3:6d:af:0f:b1:71:0d:b4:91:0c:04:b4:d7:82:
                    b0:d1:3c:82:d6:5f:58:e2:85:eb:2d:0e:53:33:7f:
                    96:e5:d0:97:40:1f:78:37:31:33:62:24:59:2b:d7:
                    af:2c:a1:ea:1e:d3:7a:ca:b8:ef:e3:6e:6d:a3:71:
                    53:12:5d:15:b9:df:76:8a:79:70:aa:5f:33:3b:79:
                    8d:7d:51:4a:26:85:0d:17:d3:4d:e1:2f:72:08:cd:
                    3b:0a:4a:e5:94:60:56:5d:68:89:af:99:af:70:43:
                    c3:c8:6e:28:43:ea:4b:42:ce:62:d8:75:94:e8:21:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:69:34:66:B5:70:98:62:77:FA:0A:E5:83:2C:58:7D:54:7C:EC:E6
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3233322e32342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:91:c9:39:ba:c5:9b:72:de:00:29:ba:b9:3c:0c:41:95:
         d0:58:70:2b:49:99:fb:f7:41:4a:21:04:64:dd:e0:73:7a:48:
         89:0b:9b:46:47:b3:ae:9d:d5:0e:8f:dd:17:f2:7b:4d:08:ad:
         25:70:77:d6:c7:0b:9a:51:b3:87:07:95:80:e8:bd:7c:a4:c2:
         51:19:ef:30:2a:7e:9f:ec:8f:fe:b9:d2:cb:86:23:b5:32:76:
         a9:32:b6:cd:17:5e:39:24:6d:39:55:fb:38:9f:91:49:d7:68:
         d1:9e:5b:56:6b:bf:ba:82:f4:72:32:9e:b3:7b:52:94:81:35:
         f8:4f:fd:3d:ca:32:4f:6e:3c:3a:2c:96:3d:76:92:f6:15:e0:
         53:42:b6:73:84:aa:7d:45:5a:9b:7b:d6:37:5e:e5:b1:cf:6e:
         0d:ab:d9:71:22:76:ae:29:a0:0e:6c:69:ee:a9:ef:c1:63:8e:
         43:28:d1:7c:5b:1e:c6:17:26:58:87:5a:9f:10:ff:d7:8d:36:
         f8:42:70:dd:86:64:ef:b4:be:27:83:72:1d:46:ed:3c:f7:e2:
         71:08:ea:16:da:aa:02:2f:63:54:3a:01:15:7b:43:8c:c6:58:
         93:14:a1:8a:0d:3e:f2:27:4a:6f:a6:87:16:66:94:17:62:a6:
         64:1f:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org