Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e31362e302f32312d3234203d3e203238333433.roa
File:                     3138362e3230392e31362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          bka01Rx3NAm2rOk6tD1DrP2dvgFx/4L6J5/u1G2FkTQ=
Subject key identifier:   49:23:B9:2A:2E:EB:30:55:DC:A7:47:C8:DF:5A:D9:BB:B5:69:4E:45
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       4929C3F730F29E4FA47AE1E2C2286ADA0179D87E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e31362e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        186.209.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:29:c3:f7:30:f2:9e:4f:a4:7a:e1:e2:c2:28:6a:da:01:79:d8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject: CN=3082010A0282010100C798775F46393AFB87B8CE39A0DABD979FEC6A7B00C017130B94AA82C1333EFC8B7F7EEC22FD8FBFD65BF8329FD433C2343BD917A118815A14D50F32062BE07FD5D8E53A32209D8B21E0EA36E16A7E952BAD3919117A9404B66AAE5690C5578B04C8FAB9B7FF8317124B03C03A424ECA40D01C2EC0B030D04E67D16BAE74C324355E284E910C74D2934C15780111A6983FF1E4DFF4DEE1700509F84EF4BC6765442C7CFCAFBEC9D3B718ECBC04F7C17D5E57AB36044D582D5A7FD1A2425F782FB3A0BD12197CBD8784A33E7EB2D84C20C952EA7E1E616C1AAC7CB8841B93D65D15CCA4E92C7C41D11D38F4190BEBBB825C03C0E7F4D1FAF0224968CB32074D050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:77:5f:46:39:3a:fb:87:b8:ce:39:a0:da:
                    bd:97:9f:ec:6a:7b:00:c0:17:13:0b:94:aa:82:c1:
                    33:3e:fc:8b:7f:7e:ec:22:fd:8f:bf:d6:5b:f8:32:
                    9f:d4:33:c2:34:3b:d9:17:a1:18:81:5a:14:d5:0f:
                    32:06:2b:e0:7f:d5:d8:e5:3a:32:20:9d:8b:21:e0:
                    ea:36:e1:6a:7e:95:2b:ad:39:19:11:7a:94:04:b6:
                    6a:ae:56:90:c5:57:8b:04:c8:fa:b9:b7:ff:83:17:
                    12:4b:03:c0:3a:42:4e:ca:40:d0:1c:2e:c0:b0:30:
                    d0:4e:67:d1:6b:ae:74:c3:24:35:5e:28:4e:91:0c:
                    74:d2:93:4c:15:78:01:11:a6:98:3f:f1:e4:df:f4:
                    de:e1:70:05:09:f8:4e:f4:bc:67:65:44:2c:7c:fc:
                    af:be:c9:d3:b7:18:ec:bc:04:f7:c1:7d:5e:57:ab:
                    36:04:4d:58:2d:5a:7f:d1:a2:42:5f:78:2f:b3:a0:
                    bd:12:19:7c:bd:87:84:a3:3e:7e:b2:d8:4c:20:c9:
                    52:ea:7e:1e:61:6c:1a:ac:7c:b8:84:1b:93:d6:5d:
                    15:cc:a4:e9:2c:7c:41:d1:1d:38:f4:19:0b:eb:bb:
                    82:5c:03:c0:e7:f4:d1:fa:f0:22:49:68:cb:32:07:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:23:B9:2A:2E:EB:30:55:DC:A7:47:C8:DF:5A:D9:BB:B5:69:4E:45
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e31362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:51:57:24:5f:e1:5a:93:f2:76:69:8f:1c:33:06:04:28:
         3a:b2:a9:32:c3:0f:e5:10:01:9d:23:41:95:61:ec:f1:21:d7:
         47:53:a9:29:8a:85:45:7c:fb:11:2d:08:0f:dd:53:c5:63:2f:
         82:61:c4:80:d9:8c:52:7c:77:68:db:28:b4:b8:b1:99:12:0b:
         c5:71:3a:18:c0:94:33:f5:d3:a5:c4:c3:12:69:d3:40:c2:11:
         51:d8:05:8b:c5:9d:5c:8b:8d:88:c2:3c:49:27:c6:63:40:87:
         e3:32:29:cf:bd:49:a9:57:5d:de:1d:a1:15:a1:7b:1a:c2:20:
         0c:cc:42:a1:f6:40:68:79:97:ff:0e:bc:14:b2:9d:fb:68:bd:
         f1:a0:52:0c:2a:38:cc:56:42:ae:62:41:2d:a1:1f:97:fe:71:
         28:7d:24:09:73:be:98:5b:a5:fd:1c:cc:52:1a:8d:7f:cc:e0:
         4b:f1:1a:26:77:09:09:11:79:24:97:c4:0f:5c:47:c6:cf:73:
         a4:51:8e:aa:a4:21:e4:9f:66:34:2d:7a:a8:1c:72:27:35:03:
         60:cc:41:85:fa:52:48:6b:11:17:71:97:46:04:a3:83:ef:eb:
         7d:ed:64:36:9a:d3:55:8d:c7:08:29:6b:51:4f:c1:c6:90:68:
         b6:0a:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org