Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa
File:                     3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          waFeBqjz+43ZdVufUwt242WRd25DvPGCqFuzVI6AGqI=
Subject key identifier:   1C:BC:ED:59:A6:0A:67:77:83:00:53:1D:BB:97:5A:C3:66:6C:0C:4B
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       06768EE95E6D9828328E3DFA45386D775E4719AC
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:21 +0000
ROA not before:           Thu 28 Apr 2022 13:24:21 +0000
ROA not after:            Thu 27 Apr 2023 13:29:21 +0000
asID:                     28343
IP address blocks:        186.226.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:8e:e9:5e:6d:98:28:32:8e:3d:fa:45:38:6d:77:5e:47:19:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:21 2022 GMT
            Not After : Apr 27 13:29:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:30:e9:a8:1b:76:77:9c:87:2d:ca:24:f5:
                    14:c0:22:15:9f:f7:5c:4c:20:48:31:f4:71:fb:e6:
                    58:d5:41:c4:88:d8:da:64:7a:a6:c6:b0:59:9e:ae:
                    d3:34:de:cb:66:50:16:5d:f7:d2:98:8a:7b:ba:b6:
                    38:80:15:d1:31:df:7c:c3:44:9d:bc:62:6d:c0:b0:
                    fd:ec:4f:bd:fd:23:c5:c0:b7:92:51:ac:df:4e:b0:
                    7f:ab:1a:b7:65:1c:a0:a6:b6:aa:52:d6:93:9e:36:
                    5a:6e:ac:c3:6f:5d:ad:21:3c:78:14:5b:c8:54:af:
                    f3:85:9a:b4:72:21:f0:28:fc:c7:e6:fe:1a:b6:19:
                    8d:48:cc:39:ba:45:3a:3d:a4:38:ee:57:f1:86:0e:
                    28:81:d5:00:5d:4d:dd:0b:2d:d4:ce:9b:93:6e:8d:
                    58:72:d1:11:f4:c7:31:0d:ed:4f:a6:92:06:16:4f:
                    cd:ea:07:97:1c:b9:84:b7:9a:59:e3:29:fd:28:48:
                    80:66:54:8b:87:36:01:fb:c1:e3:8a:02:23:66:77:
                    de:86:75:2c:12:d5:c3:a5:bf:3c:90:a0:55:d3:95:
                    25:f7:6c:b0:f0:41:10:31:9e:b2:f2:63:08:69:83:
                    e5:fb:6d:94:34:cd:3f:ce:bc:df:98:94:58:f8:76:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:ED:59:A6:0A:67:77:83:00:53:1D:BB:97:5A:C3:66:6C:0C:4B
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:77:11:6d:d9:cf:00:d9:82:6e:ed:6c:a4:fd:da:9a:47:0b:
         a6:fd:1d:00:fa:3f:3e:f2:fe:7b:55:0b:6e:bc:28:05:18:df:
         13:29:3f:13:88:5e:66:d3:52:88:f5:88:10:f6:41:cc:b4:f3:
         1e:fa:5b:1d:a4:9b:df:6e:7a:29:59:63:83:96:ed:97:5c:5c:
         7b:05:37:c3:1b:03:2c:5f:20:0d:0b:4a:6a:22:0c:a8:5b:31:
         a2:0e:73:2e:f5:13:b5:34:e9:d8:9e:e1:00:6f:7e:0f:22:40:
         e8:89:a3:84:3b:09:0b:59:6f:53:f1:25:a1:2d:72:9a:2f:32:
         a9:5b:a8:14:1e:5a:30:b3:f0:1f:0a:b3:87:69:86:5f:44:02:
         5f:e6:16:b8:6d:93:db:a7:71:ff:4a:bf:a2:28:e5:7b:89:33:
         ea:c6:68:20:46:77:dc:49:20:81:14:28:fb:68:e4:be:a5:d2:
         8a:32:b8:35:ee:2a:f7:ad:f9:46:23:49:87:a0:48:77:06:00:
         d4:ba:b6:a6:66:34:6d:7d:a9:ca:91:c0:b0:96:f2:0b:f0:52:
         0f:d8:ed:29:58:1f:f6:ff:5c:c2:be:68:c6:81:67:75:ac:66:
         5f:ff:93:d3:91:0c:52:af:a3:d4:9b:a7:93:e2:c5:ec:59:2f:
         41:07:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org