Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232372e3133362e302f32312d3234203d3e203238333433.roa
File:                     3138362e3232372e3133362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          fLKlFbzEKOyxy4sddBzop9n9HxTLL20tphgQaaAZles=
Subject key identifier:   20:30:38:8E:2F:4D:C7:20:D6:72:4C:C3:1E:1F:54:DF:FB:34:DC:48
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       33E95DFBA4E82D5D527DC423D62052BD6083AF3A
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232372e3133362e302f32312d3234203d3e203238333433.roa
Signing time:             Mon 12 Dec 2022 11:38:58 +0000
ROA not before:           Mon 12 Dec 2022 11:33:58 +0000
ROA not after:            Mon 11 Dec 2023 11:38:58 +0000
asID:                     28343
IP address blocks:        186.227.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e9:5d:fb:a4:e8:2d:5d:52:7d:c4:23:d6:20:52:bd:60:83:af:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Dec 12 11:33:58 2022 GMT
            Not After : Dec 11 11:38:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:55:83:48:3f:97:b5:8c:f5:e6:2c:83:59:
                    43:98:49:96:d9:b6:30:fb:57:46:43:18:2b:3a:0f:
                    65:9a:8f:85:e1:62:45:26:0d:97:81:7c:04:01:1b:
                    5a:bc:1f:d4:5c:68:91:6e:df:53:ac:16:cd:39:f7:
                    b2:78:50:10:fe:a2:e5:e8:25:8b:1b:75:0d:a8:b3:
                    28:4c:f5:3a:03:4d:2c:38:13:69:2b:c1:7a:5f:08:
                    5e:a6:13:d1:8d:b8:45:8b:03:00:ea:fa:95:01:5a:
                    ea:c0:65:23:41:cb:8a:dd:cf:12:86:e5:9b:b0:a6:
                    8f:45:49:e3:86:2d:16:44:1d:e1:f3:5c:2d:9b:8e:
                    48:aa:f3:ee:e5:a8:74:a9:b3:ec:6d:03:84:f2:22:
                    91:53:7d:ad:29:1b:a1:67:46:44:25:43:bf:1f:d9:
                    b9:72:26:0e:87:ff:31:15:26:63:77:00:0f:fb:bd:
                    34:21:b5:40:da:e6:9a:33:02:d3:1f:a4:cd:08:d5:
                    11:0d:79:db:4a:3b:2b:38:46:f5:a1:49:5d:76:dc:
                    4c:a2:fa:0e:bf:2f:59:f6:73:3d:3c:5e:93:b5:11:
                    1c:34:cf:58:8b:3c:62:23:3c:16:44:34:c8:c4:52:
                    44:1c:d1:42:3d:94:9c:a7:86:e5:6b:87:3e:de:04:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:30:38:8E:2F:4D:C7:20:D6:72:4C:C3:1E:1F:54:DF:FB:34:DC:48
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3232372e3133362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:57:79:2e:6e:fc:c4:70:3b:b7:54:25:7e:b4:a4:93:bc:
         6c:15:88:3b:84:4b:97:6c:ca:e2:8f:85:2a:72:a7:0b:15:ec:
         1c:6e:af:c8:62:15:09:fe:f5:ac:3a:f9:fe:f9:1a:69:dd:61:
         e8:90:56:f3:41:cc:b9:e6:a4:eb:ee:72:e8:b1:f4:d8:ac:97:
         24:ec:19:92:ca:85:ea:29:8a:0e:b8:2f:51:03:68:d3:f9:f7:
         fe:aa:43:15:a3:f3:a8:12:be:0b:10:12:05:6e:58:ed:bd:77:
         7e:d0:73:03:a7:92:45:4f:d5:bc:35:d0:cb:3d:a1:3e:c7:58:
         04:07:ab:c2:03:3a:63:cb:98:0a:d5:0b:17:b3:c7:65:36:5c:
         5f:38:0a:14:03:b2:e3:8c:1d:94:fe:50:e3:d8:5c:7d:fe:a3:
         14:5e:ab:5e:c0:6d:db:75:fa:db:f5:76:db:f9:4f:30:6d:7f:
         04:a1:b0:93:7b:2f:dd:04:89:88:a9:36:1e:f2:49:4f:37:0c:
         43:39:05:d3:09:40:88:71:54:f4:11:0c:14:f0:35:6e:8e:35:
         c6:78:1e:69:05:17:72:f3:fa:ef:00:7b:df:7a:6a:ba:72:a1:
         6a:0e:66:26:06:30:57:ad:78:6d:6a:07:4d:1b:fd:12:83:15:
         fc:7c:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org