Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3231362e3234302e302f32302d3234203d3e203238333433.roa
File:                     3138362e3231362e3234302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          UT+cFu9KqyMk67+oAAuGAWHEr3NDQg/CB5HqTlL0ZkY=
Subject key identifier:   42:1F:E4:B4:B9:7B:2B:1F:88:3B:2A:67:69:58:8A:DF:A9:E3:FA:F0
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       770C8CE7D9627C287976970AFABFA1BD1721EC75
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3231362e3234302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 01 Dec 2022 13:01:15 +0000
ROA not before:           Thu 01 Dec 2022 12:56:15 +0000
ROA not after:            Thu 30 Nov 2023 13:01:15 +0000
asID:                     28343
IP address blocks:        186.216.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0c:8c:e7:d9:62:7c:28:79:76:97:0a:fa:bf:a1:bd:17:21:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Dec  1 12:56:15 2022 GMT
            Not After : Nov 30 13:01:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:31:14:45:78:4f:5b:a5:ac:50:e9:23:4c:
                    10:7b:5b:c1:b6:6c:5f:bb:bb:dd:ab:7e:d9:71:b6:
                    6a:bf:64:d0:48:62:15:d3:be:4a:93:fc:f8:31:df:
                    02:28:f6:db:d6:fa:7b:23:07:6d:22:bd:f8:31:c6:
                    7f:37:93:ba:37:d8:8a:7d:ee:9b:1b:7f:1e:8b:69:
                    ca:51:5b:bd:6c:84:09:07:15:89:73:f6:77:b4:4d:
                    86:01:45:94:18:cd:17:68:a4:97:e4:f4:14:cc:f1:
                    0d:9b:94:ed:fe:65:1c:e8:4c:d5:81:34:2b:7a:a6:
                    e7:5e:fe:a3:1f:a9:8f:5a:b8:a4:ab:15:4f:53:59:
                    47:50:74:5d:25:3d:3b:2d:2c:ae:61:b7:3a:c4:6b:
                    cb:61:b2:a6:ba:5b:57:ff:75:20:da:8b:be:db:ed:
                    d2:20:c9:39:5b:e3:12:b0:a2:b8:e7:d3:5a:bf:9e:
                    62:1a:f3:0c:44:fe:63:7d:6e:4c:33:5c:3d:7a:f2:
                    65:ae:a7:f0:88:2c:c9:27:a9:0f:0b:9e:3c:0a:e1:
                    39:72:31:b8:21:b4:81:c3:6b:3c:5b:2f:35:d5:d2:
                    73:55:72:e6:27:17:14:3a:22:3b:34:98:9b:61:64:
                    b0:d9:b6:90:99:45:4e:72:20:35:62:7e:d2:92:40:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:E4:B4:B9:7B:2B:1F:88:3B:2A:67:69:58:8A:DF:A9:E3:FA:F0
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3231362e3234302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:ef:bc:e0:56:84:42:c8:cc:4b:35:30:b0:ac:2a:32:f7:ba:
         e7:d5:75:98:ce:46:7b:eb:a7:a0:1a:da:fa:79:00:c8:d6:37:
         2a:ea:98:d3:0d:b7:d6:0f:9a:44:1a:6f:cb:1d:04:0d:de:f8:
         d7:69:9b:de:76:08:24:be:72:fe:f0:22:86:ec:da:26:4b:18:
         77:a4:1b:e7:80:20:d9:3a:07:63:be:6f:14:7e:f3:15:a6:15:
         b5:56:8f:d0:65:61:23:92:0a:8e:c7:f5:f8:28:17:96:6a:bd:
         af:8a:e1:3e:10:be:1d:9b:59:79:99:10:06:0e:97:44:e6:e7:
         bd:ae:bc:cb:cf:f2:a9:53:f6:02:fe:64:2a:6c:11:e2:19:cf:
         51:5e:b7:4e:be:f0:6c:80:f2:a2:e9:f4:9f:06:68:a0:66:d3:
         60:ce:a3:e5:a7:d8:05:fb:83:6c:12:6e:76:6b:f8:a6:14:cf:
         7e:58:ee:b6:36:0b:87:94:b3:89:61:ae:7f:33:2d:c1:4d:94:
         8c:a8:0a:07:70:bf:7f:6c:48:ee:cc:b6:72:32:22:b4:1d:ea:
         49:30:3e:a5:3b:93:cc:da:9d:b8:e1:29:e4:51:93:ef:02:19:
         ec:7a:f0:20:55:1f:33:99:1b:f9:97:0c:63:ac:dd:44:06:32:
         aa:90:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org