Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa
File:                     3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          IiyHCaEVSIltPg4K33bwFDJhI2IOgHpL7iDlxh71/XY=
Subject key identifier:   9F:3F:57:1E:9F:BA:87:73:E6:DC:D2:2C:35:4D:E3:C2:3A:38:1E:F5
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       29C805AE1B918E5E5438C519F987D97B04F04AFF
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        186.237.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c8:05:ae:1b:91:8e:5e:54:38:c5:19:f9:87:d9:7b:04:f0:4a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:ff:2e:ad:ba:5a:40:60:d1:fd:78:3a:e8:
                    21:d3:64:34:be:98:eb:1a:33:77:40:0f:27:94:92:
                    45:7c:6e:7e:7c:16:bb:18:35:46:8f:25:d0:5f:4a:
                    77:08:fb:d1:e6:a1:e1:45:d2:0d:81:5c:7d:9f:61:
                    0d:7b:5e:57:69:34:2b:5c:f7:ce:de:2e:6e:6d:b9:
                    bf:88:b2:da:20:e4:4a:e1:b2:f5:7f:35:01:f1:d7:
                    c9:df:80:1e:1e:24:c8:84:10:f6:d5:10:77:db:06:
                    3c:14:6e:33:8a:63:23:27:27:d5:ec:c9:85:7d:d5:
                    eb:cd:bf:ef:5d:9a:20:0d:9c:aa:4a:e0:ec:91:d1:
                    48:96:b1:8c:43:d7:b2:bb:b8:16:f5:0d:16:f1:cd:
                    a0:de:66:5e:13:f4:82:8e:1d:aa:5c:7e:c5:61:b2:
                    2e:9e:e1:a1:4d:5c:31:dd:94:63:3d:1a:dd:27:ea:
                    d4:db:d4:93:66:45:fc:62:04:b6:49:86:42:b8:04:
                    70:f4:f3:7a:03:12:a5:cc:c1:a1:c0:e2:0c:65:e1:
                    86:87:c1:db:24:c1:3b:58:ce:3f:92:f3:f9:a1:5c:
                    f4:d0:21:cf:77:65:25:21:dd:a8:fc:29:8d:84:47:
                    c2:5d:7b:b0:a3:ea:fd:45:34:8f:dc:90:1c:35:29:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3F:57:1E:9F:BA:87:73:E6:DC:D2:2C:35:4D:E3:C2:3A:38:1E:F5
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:31:ef:13:7c:95:bd:39:03:3f:a6:55:e9:a8:63:f3:91:
         61:a8:8c:03:8b:7d:a2:e4:5c:88:a8:c8:c9:45:ce:91:7f:e2:
         df:23:42:e3:2f:fd:4c:c3:25:0a:c3:d7:e3:a0:19:b1:09:d1:
         e6:b1:53:0c:06:f9:53:f9:b1:26:37:4e:3a:43:e5:c0:ad:5a:
         24:f2:55:d0:91:31:0a:c7:45:e4:10:1a:99:14:af:b7:0b:72:
         57:a6:34:45:f3:2f:ab:02:b6:c9:2d:2a:33:8c:d1:52:de:ca:
         45:67:65:b2:d3:e0:21:eb:39:52:30:32:49:9a:ea:76:3f:ac:
         e7:f7:75:ae:ce:55:97:80:7e:da:57:a7:d0:67:a9:ff:0e:b1:
         f3:dd:43:e8:4d:0b:81:3e:6e:22:db:d0:02:bc:9a:d7:26:fa:
         ab:c9:73:98:54:8e:65:db:76:c2:62:2b:6b:74:4e:b8:35:fa:
         fd:ca:3d:4d:d0:56:26:c0:93:d0:66:84:f8:16:0c:68:08:61:
         a9:a5:b5:fe:75:66:58:ce:54:0c:0b:8b:7f:a2:0e:c4:3e:a9:
         ca:79:7c:66:03:19:69:4a:73:0b:4a:cf:4a:9d:35:70:a9:23:
         5a:28:85:12:a9:86:71:9f:82:6c:8c:54:07:a3:74:b6:71:45:
         ef:07:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org