Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa
File:                     3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          jkYGLAkxeQl7Q903frMvqhdIiEWT+PB5v+rMKr6bO2o=
Subject key identifier:   5E:2C:33:FB:0D:F5:BE:B9:44:CF:72:B2:F8:15:A1:7B:B5:1A:4C:4A
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       320A0D43D9D33E548362A2489DC6019D6D7AA744
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:15 +0000
ROA not before:           Thu 28 Apr 2022 13:24:15 +0000
ROA not after:            Thu 27 Apr 2023 13:29:15 +0000
asID:                     28343
IP address blocks:        186.209.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:0d:43:d9:d3:3e:54:83:62:a2:48:9d:c6:01:9d:6d:7a:a7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:15 2022 GMT
            Not After : Apr 27 13:29:15 2023 GMT
        Subject: CN=3082010A0282010100B7DC2F4CB3F378D7BFFBC735F2A5959BB07994A0F0059475FEC42591C5E487FA5D32B5E567BE537F5BFC0E324B4B1F280F88AEA90050917970B0FA359EE79AA8F4211C8CB9865276E5003ED574D37F178CB37D2E199B07AAAC46DF2CADB188020E6BD9DE3CC53EED88ED630C0D1435E30622DB02B34DD7AE3EE5A34DF6F700BED58CBC9EF78D06F1093F5AAC8EEF2FF9405C49AC773F800E0DB824D111465C82B1B3D1995773B4066B9A9937EA48EA9DA6F6FACE57595792AC92211797E87855ADD44CBB5DDFB24007040EBAF6C7E686CC5E3BDA8A788618AF2F25AC207243AA52630E5B3F7DD49C293966B8CA49B50CF7B7D4841FE6772FF4FF2761CEE5E1C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:2f:4c:b3:f3:78:d7:bf:fb:c7:35:f2:a5:
                    95:9b:b0:79:94:a0:f0:05:94:75:fe:c4:25:91:c5:
                    e4:87:fa:5d:32:b5:e5:67:be:53:7f:5b:fc:0e:32:
                    4b:4b:1f:28:0f:88:ae:a9:00:50:91:79:70:b0:fa:
                    35:9e:e7:9a:a8:f4:21:1c:8c:b9:86:52:76:e5:00:
                    3e:d5:74:d3:7f:17:8c:b3:7d:2e:19:9b:07:aa:ac:
                    46:df:2c:ad:b1:88:02:0e:6b:d9:de:3c:c5:3e:ed:
                    88:ed:63:0c:0d:14:35:e3:06:22:db:02:b3:4d:d7:
                    ae:3e:e5:a3:4d:f6:f7:00:be:d5:8c:bc:9e:f7:8d:
                    06:f1:09:3f:5a:ac:8e:ef:2f:f9:40:5c:49:ac:77:
                    3f:80:0e:0d:b8:24:d1:11:46:5c:82:b1:b3:d1:99:
                    57:73:b4:06:6b:9a:99:37:ea:48:ea:9d:a6:f6:fa:
                    ce:57:59:57:92:ac:92:21:17:97:e8:78:55:ad:d4:
                    4c:bb:5d:df:b2:40:07:04:0e:ba:f6:c7:e6:86:cc:
                    5e:3b:da:8a:78:86:18:af:2f:25:ac:20:72:43:aa:
                    52:63:0e:5b:3f:7d:d4:9c:29:39:66:b8:ca:49:b5:
                    0c:f7:b7:d4:84:1f:e6:77:2f:f4:ff:27:61:ce:e5:
                    e1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:33:FB:0D:F5:BE:B9:44:CF:72:B2:F8:15:A1:7B:B5:1A:4C:4A
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:40:08:9b:32:94:2e:fb:2a:99:df:a6:4e:33:58:99:82:
         5d:4c:6d:a5:1c:cb:12:ce:d6:1a:1d:0a:46:3e:bb:20:75:85:
         e5:95:19:6d:64:b6:ca:25:fd:a0:ba:7a:f0:bf:9c:94:80:7b:
         cd:cc:bc:ec:6c:e8:a8:13:f4:20:98:53:11:73:4b:75:68:13:
         e8:f3:44:ab:3f:87:d1:09:e8:70:be:66:cd:89:bc:38:e3:d0:
         fc:e8:9a:8d:e1:e4:3b:c9:bc:77:18:d9:71:17:e8:56:5e:37:
         0a:09:11:e5:88:ff:9a:15:64:6e:38:c3:fb:8d:85:74:51:cb:
         52:cc:6f:1a:3e:93:4f:58:04:a7:1f:05:b4:b6:4d:b4:e8:b4:
         c2:e4:c8:59:fb:c3:44:92:d2:4d:cf:98:05:87:a1:8b:97:68:
         15:7a:43:2b:d7:10:35:1a:3c:f7:19:b9:98:67:ca:0a:86:af:
         9d:02:48:8e:0b:63:b1:27:80:ce:63:35:59:da:bc:60:b8:eb:
         ad:ec:10:9e:44:f7:aa:90:a7:40:69:d9:e9:83:d6:62:bc:21:
         6f:60:68:66:2f:3f:7d:80:a5:ca:70:1c:b7:22:26:1f:7a:dc:
         e5:ec:f6:d6:2e:d2:2a:fa:bc:1d:0e:1c:cc:3c:a4:fb:0b:56:
         16:b0:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org