Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa
File:                     3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          vWiiKHjIsdR107hkmgflA9Gouyku5zMu+gV/zi6PlxQ=
Subject key identifier:   28:46:53:7F:53:74:23:12:1C:0B:9B:AF:EE:9B:37:08:12:D8:36:A2
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       7DA14D4A376ACDE009DF0C76347D0C15990084D1
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        186.226.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a1:4d:4a:37:6a:cd:e0:09:df:0c:76:34:7d:0c:15:99:00:84:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject: CN=3082010A0282010100C88A170BC9EC43596549F74DE59016B55460309214B8C25988AB0C2E3376DE99A400FD3C4F7163C44B3A20EB0E0590F632CC64005599648F362298E77E1E62E5E5E7843EC905F514127F54E799D5EF6FA432C04DD9A019E514E4EF9C0E198F28B1411038C19E10F6FFE4A0AE9CD4C0F75D07F5B2C6EAA3C0D4ABA8843E0BDAB38656DBC291ED8133F9BCE5EDB02DADE342301414EF4F0427E6469D1C7837E3706FD6E1F2707CC286741EF2FCB72139ED6619C40F34819A29A0456F4B898D35F0DFE6D945FA66E298CC1DA147E0276F80EFA6D084044EF5C6ADC199DC08A0738FE36DFF7CE942C5D051FBE01E4418601483193766C92DDDA82F938A3C2278AF090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:17:0b:c9:ec:43:59:65:49:f7:4d:e5:90:
                    16:b5:54:60:30:92:14:b8:c2:59:88:ab:0c:2e:33:
                    76:de:99:a4:00:fd:3c:4f:71:63:c4:4b:3a:20:eb:
                    0e:05:90:f6:32:cc:64:00:55:99:64:8f:36:22:98:
                    e7:7e:1e:62:e5:e5:e7:84:3e:c9:05:f5:14:12:7f:
                    54:e7:99:d5:ef:6f:a4:32:c0:4d:d9:a0:19:e5:14:
                    e4:ef:9c:0e:19:8f:28:b1:41:10:38:c1:9e:10:f6:
                    ff:e4:a0:ae:9c:d4:c0:f7:5d:07:f5:b2:c6:ea:a3:
                    c0:d4:ab:a8:84:3e:0b:da:b3:86:56:db:c2:91:ed:
                    81:33:f9:bc:e5:ed:b0:2d:ad:e3:42:30:14:14:ef:
                    4f:04:27:e6:46:9d:1c:78:37:e3:70:6f:d6:e1:f2:
                    70:7c:c2:86:74:1e:f2:fc:b7:21:39:ed:66:19:c4:
                    0f:34:81:9a:29:a0:45:6f:4b:89:8d:35:f0:df:e6:
                    d9:45:fa:66:e2:98:cc:1d:a1:47:e0:27:6f:80:ef:
                    a6:d0:84:04:4e:f5:c6:ad:c1:99:dc:08:a0:73:8f:
                    e3:6d:ff:7c:e9:42:c5:d0:51:fb:e0:1e:44:18:60:
                    14:83:19:37:66:c9:2d:dd:a8:2f:93:8a:3c:22:78:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:53:7F:53:74:23:12:1C:0B:9B:AF:EE:9B:37:08:12:D8:36:A2
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:ad:7b:83:32:d2:61:44:5b:34:0a:6f:97:fd:c9:00:ff:
         f8:af:84:6a:1e:6f:ee:1b:64:4f:73:5c:47:d5:d0:4e:b1:bd:
         ff:5d:e2:fa:c1:51:36:0a:22:ad:a3:94:0e:b7:76:4f:6d:13:
         02:7c:fb:eb:f6:ad:e8:f0:57:59:81:ce:b1:d4:44:35:8d:17:
         ac:f8:b2:47:89:e7:a7:62:34:8a:7f:6e:cb:0e:cd:dc:0a:6c:
         63:90:1f:9a:46:6c:86:34:c5:1b:93:91:b7:20:54:0b:10:8e:
         bc:d1:e0:47:42:aa:94:62:80:00:e8:aa:de:7e:dc:ab:d2:38:
         5b:70:d6:94:84:cf:f9:1a:81:ce:ec:6e:7a:c4:0d:39:8c:a3:
         80:57:1c:7d:31:7f:52:81:af:ce:cc:ba:3d:d7:9c:84:66:cd:
         b8:0e:2f:64:84:f9:31:c9:34:df:7b:7e:4f:8f:00:91:d8:71:
         29:63:c3:17:ac:ce:14:e1:7b:1f:cb:66:8a:35:78:ce:cc:2c:
         7c:1a:3c:f2:f7:6a:96:e5:b0:a5:c7:51:7b:e6:ae:c5:ab:b5:
         40:3e:da:bb:d4:b6:d1:70:d0:8c:07:20:5a:7e:29:4f:68:25:
         c0:20:71:91:5a:af:15:c7:58:53:4e:5a:b1:03:e1:94:68:1d:
         b1:7f:72:14
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfaFNSjdqzeAJ3wx2NH0MFZkAhNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MTlaFw0yMzA0MjcxMzI5MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg4QTE3MEJDOUVDNDM1OTY1
NDlGNzRERTU5MDE2QjU1NDYwMzA5MjE0QjhDMjU5ODhBQjBDMkUzMzc2REU5OUE0
MDBGRDNDNEY3MTYzQzQ0QjNBMjBFQjBFMDU5MEY2MzJDQzY0MDA1NTk5NjQ4RjM2
MjI5OEU3N0UxRTYyRTVFNUU3ODQzRUM5MDVGNTE0MTI3RjU0RTc5OUQ1RUY2RkE0
MzJDMDRERDlBMDE5RTUxNEU0RUY5QzBFMTk4RjI4QjE0MTEwMzhDMTlFMTBGNkZG
RTRBMEFFOUNENEMwRjc1RDA3RjVCMkM2RUFBM0MwRDRBQkE4ODQzRTBCREFCMzg2
NTZEQkMyOTFFRDgxMzNGOUJDRTVFREIwMkRBREUzNDIzMDE0MTRFRjRGMDQyN0U2
NDY5RDFDNzgzN0UzNzA2RkQ2RTFGMjcwN0NDMjg2NzQxRUYyRkNCNzIxMzlFRDY2
MTlDNDBGMzQ4MTlBMjlBMDQ1NkY0Qjg5OEQzNUYwREZFNkQ5NDVGQTY2RTI5OEND
MURBMTQ3RTAyNzZGODBFRkE2RDA4NDA0NEVGNUM2QURDMTk5REMwOEEwNzM4RkUz
NkRGRjdDRTk0MkM1RDA1MUZCRTAxRTQ0MTg2MDE0ODMxOTM3NjZDOTJERERBODJG
OTM4QTNDMjI3OEFGMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyIoXC8nsQ1llSfdN5ZAWtVRgMJIUuMJZiKsMLjN23pmkAP08T3Fj
xEs6IOsOBZD2MsxkAFWZZI82Ipjnfh5i5eXnhD7JBfUUEn9U55nV72+kMsBN2aAZ
5RTk75wOGY8osUEQOMGeEPb/5KCunNTA910H9bLG6qPA1KuohD4L2rOGVtvCke2B
M/m85e2wLa3jQjAUFO9PBCfmRp0ceDfjcG/W4fJwfMKGdB7y/LchOe1mGcQPNIGa
KaBFb0uJjTXw3+bZRfpm4pjMHaFH4CdvgO+m0IQETvXGrcGZ3Aigc4/jbf986ULF
0FH74B5EGGAUgxk3Zskt3agvk4o8InivCQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FChGU39TdCMSHAubr+6bNwgS2DaiMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzgzNjJlMzIzMjM2MmUzMTM1
MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
uuKYMA0GCSqGSIb3DQEBCwUAA4IBAQBK9q17gzLSYURbNApvl/3JAP/4r4RqHm/u
G2RPc1xH1dBOsb3/XeL6wVE2CiKto5QOt3ZPbRMCfPvr9q3o8FdZgc6x1EQ1jRes
+LJHieenYjSKf27LDs3cCmxjkB+aRmyGNMUbk5G3IFQLEI680eBHQqqUYoAA6Kre
ftyr0jhbcNaUhM/5GoHO7G56xA05jKOAVxx9MX9Sga/OzLo915yEZs24Di9khPkx
yTTfe35PjwCR2HEpY8MXrM4U4Xsfy2aKNXjOzCx8Gjzy92qW5bClx1F75q7Fq7VA
Ptq71LbRcNCMByBafilPaCXAIHGRWq8Vx1hTTlqxA+GUaB2xf3IU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org