Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232352e302e302f32302d3234203d3e203238333433.roa
File:                     3138362e3232352e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          dxc63NnoaY3KClB8GTLqYM5aaYFKRVnD0UwbpLuIyFo=
Subject key identifier:   1D:14:70:EF:C0:71:E3:E2:72:41:D9:BD:15:F5:CA:55:92:B2:00:25
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       5AD0C946D403ED75A7D4B3A8F42894C616E464F3
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232352e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        186.225.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d0:c9:46:d4:03:ed:75:a7:d4:b3:a8:f4:28:94:c6:16:e4:64:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:31:98:b4:ac:15:0e:2a:c1:81:fc:0c:55:
                    4e:73:bb:ac:24:2e:31:a2:84:a1:f5:58:69:79:82:
                    5c:da:85:70:5a:96:a9:ac:d4:79:12:f3:c4:87:fd:
                    41:2a:74:b3:dd:f1:1f:ff:74:e2:d4:f8:e9:8a:11:
                    fc:45:f3:74:6d:91:1b:c3:c0:14:d6:28:1d:96:62:
                    d5:a5:12:4e:de:b3:8d:28:e3:e9:d6:bd:8f:5a:28:
                    f5:71:13:8a:d9:0a:63:49:ac:a1:0d:1e:a9:ce:26:
                    03:64:4b:72:d3:4e:c2:ee:2d:e3:ab:3f:cf:1d:20:
                    07:42:71:2c:08:4b:5c:7f:ad:59:6c:ef:7a:83:d4:
                    db:49:28:90:8a:8f:cc:bd:aa:8c:d6:ff:b9:ce:91:
                    ca:05:21:99:7f:79:a9:c4:c5:9d:78:28:d2:b1:83:
                    2d:2c:71:9f:ec:22:23:21:37:ee:dc:af:d9:64:27:
                    d5:0b:9e:f1:b4:f7:96:95:84:28:a9:6f:2b:76:68:
                    47:23:dd:04:e9:27:ac:9b:08:0f:29:7a:a4:32:61:
                    ec:89:9b:46:ab:aa:31:41:78:84:ee:93:71:b1:fc:
                    6b:0b:5b:63:f8:ca:10:56:b6:29:81:0b:b1:c1:d3:
                    6f:77:2d:9f:65:a4:33:de:3d:52:bc:e4:81:9d:a0:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:70:EF:C0:71:E3:E2:72:41:D9:BD:15:F5:CA:55:92:B2:00:25
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232352e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:af:1f:b5:d0:fb:4d:77:aa:e7:ad:23:53:81:4d:ac:70:
         b8:07:5f:df:8a:1a:a6:07:88:c5:65:35:69:b6:5f:bd:3d:4b:
         2d:2b:6b:ab:86:a4:0d:df:74:c4:2f:35:4c:16:7c:16:8f:53:
         60:8b:40:54:82:39:bb:44:3f:40:b5:f5:1b:c4:74:42:ea:ab:
         48:b9:fd:fb:d4:28:7e:63:c9:f2:cc:80:ed:b9:6c:5d:e3:5d:
         8c:da:a7:5b:c3:a8:48:ad:1d:a4:19:86:1a:5d:a9:d3:3e:41:
         31:31:3c:e3:d9:af:5e:e0:6c:d4:29:66:a8:e1:e4:79:3f:ba:
         d1:7f:83:cc:65:0d:05:5d:39:f1:4b:5e:a5:61:12:38:53:d0:
         f0:87:39:aa:3b:d5:4d:1c:c7:61:7b:8c:1d:bc:f6:78:72:32:
         82:59:8b:af:57:f4:3c:49:98:89:3a:3c:8f:f8:f5:c5:49:41:
         ec:b7:fd:ab:dc:24:27:4e:f4:16:74:b4:0c:76:55:7c:95:b5:
         83:19:b5:0a:cc:b4:16:bf:72:ee:c0:ec:87:48:ab:c3:64:77:
         00:69:6e:de:67:c8:0c:eb:c1:ea:16:1d:76:45:27:0a:85:9e:
         fe:a1:5c:4b:0c:30:67:c3:98:b9:19:e3:f1:48:ef:43:5f:f4:
         27:1c:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org