Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e32342e302f32312d3234203d3e203238333433.roa
File:                     3138362e3230392e32342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          uToZXAnkVCWy2Ll2/F2BgeT3VPfMXT3UqLSpDYfKYOI=
Subject key identifier:   39:5B:A7:E9:72:B0:56:6C:0C:E5:50:73:76:DF:B2:0C:F0:54:26:E0
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3857B6F24A4047E73DE683F6DAD024C278DBFE09
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e32342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        186.209.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:57:b6:f2:4a:40:47:e7:3d:e6:83:f6:da:d0:24:c2:78:db:fe:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject: CN=3082010A0282010100BA5968CEC1CB72B1388DAB4087F12B963021793E7BBB38E573CA6CD396DA0BFFB6510C58F7603BA10D1FCDF466E9F9AB016DCAF4FB354F2BCED22DB4CEB32D97E9DB7A114A4735599A504EC3F43A0F914FF94DF1587398DF49F22759B9622F724A319D8A22AF18EE23E7ECE682C384BBA9418535D746D96B197D2AB56993782335ACBF44D23FFFA7BFBA077CB5FD8E3D12BAE204855B8C429B71BE0D8BEC8DB67D3493D62ACD7531A7D2E2B7551ECFCCE9AFB477A1EC5D8BC886FFCC599E17DBD98D97CBD16B3BB582587F5B117F2C7E909A49FE765159D40F4D56DDCE928FAFDCCB316A5C9499508DE8B45EA18A8CB160EDAEFFC85AC631F41528CC8AD82B930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:68:ce:c1:cb:72:b1:38:8d:ab:40:87:f1:
                    2b:96:30:21:79:3e:7b:bb:38:e5:73:ca:6c:d3:96:
                    da:0b:ff:b6:51:0c:58:f7:60:3b:a1:0d:1f:cd:f4:
                    66:e9:f9:ab:01:6d:ca:f4:fb:35:4f:2b:ce:d2:2d:
                    b4:ce:b3:2d:97:e9:db:7a:11:4a:47:35:59:9a:50:
                    4e:c3:f4:3a:0f:91:4f:f9:4d:f1:58:73:98:df:49:
                    f2:27:59:b9:62:2f:72:4a:31:9d:8a:22:af:18:ee:
                    23:e7:ec:e6:82:c3:84:bb:a9:41:85:35:d7:46:d9:
                    6b:19:7d:2a:b5:69:93:78:23:35:ac:bf:44:d2:3f:
                    ff:a7:bf:ba:07:7c:b5:fd:8e:3d:12:ba:e2:04:85:
                    5b:8c:42:9b:71:be:0d:8b:ec:8d:b6:7d:34:93:d6:
                    2a:cd:75:31:a7:d2:e2:b7:55:1e:cf:cc:e9:af:b4:
                    77:a1:ec:5d:8b:c8:86:ff:cc:59:9e:17:db:d9:8d:
                    97:cb:d1:6b:3b:b5:82:58:7f:5b:11:7f:2c:7e:90:
                    9a:49:fe:76:51:59:d4:0f:4d:56:dd:ce:92:8f:af:
                    dc:cb:31:6a:5c:94:99:50:8d:e8:b4:5e:a1:8a:8c:
                    b1:60:ed:ae:ff:c8:5a:c6:31:f4:15:28:cc:8a:d8:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5B:A7:E9:72:B0:56:6C:0C:E5:50:73:76:DF:B2:0C:F0:54:26:E0
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3230392e32342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:97:a4:09:a7:9f:10:ff:f0:df:2f:4c:eb:1a:cc:7f:b6:
         5a:dd:ef:9f:bf:74:78:4c:8c:3a:b3:12:1d:2f:32:99:22:56:
         ee:4c:35:47:7c:9c:c8:df:f7:da:a7:d0:3e:46:2d:86:d9:57:
         98:13:84:9d:64:bb:8d:14:4a:0e:09:84:58:27:0d:16:62:e7:
         61:f8:6d:28:9f:a2:84:8b:2f:d3:f6:3f:4d:a9:2b:71:b1:8f:
         28:81:68:0d:25:1f:1c:4a:ca:25:7c:23:3d:7d:e5:53:09:68:
         f3:ef:fc:80:25:a6:74:0b:82:06:96:3b:98:be:17:b4:ee:af:
         6b:5f:23:1e:06:69:07:e1:91:fc:d4:f7:09:f4:6c:e9:8f:11:
         b5:24:a5:6c:e1:22:9f:ae:c2:1b:82:6d:0c:6a:70:03:de:ad:
         2c:40:3e:33:88:bf:3b:94:02:47:f1:0c:95:5c:7d:9e:fd:6b:
         ab:ff:b0:1d:57:d7:43:2c:ea:8e:e0:b3:69:ca:50:aa:6b:b1:
         4f:da:ac:b6:d2:ec:a5:3e:1c:af:29:77:04:38:4a:ca:61:04:
         3d:40:7f:02:75:2a:59:f3:ed:b4:54:ef:4e:c6:ed:86:87:2c:
         5b:c7:d5:8a:5a:1c:73:d0:5a:f6:a9:48:33:fa:f1:1f:8f:57:
         4a:8a:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org