Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa
File:                     3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          ppR4wF3cixRgYh7gaFFWa4xBjWeECBg/lDqhxT8dsqU=
Subject key identifier:   29:A7:A7:F4:00:1A:A7:E8:2A:71:F9:AC:BD:C2:C6:CE:E7:3B:9C:76
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0FB52EEFB603EAFE14A50BCD6DA5325E77B1C999
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        186.249.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b5:2e:ef:b6:03:ea:fe:14:a5:0b:cd:6d:a5:32:5e:77:b1:c9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:3b:13:f8:09:af:0b:1a:17:34:eb:f9:db:
                    aa:42:58:ea:57:26:c8:a9:e4:29:45:07:5f:5d:b5:
                    11:18:8b:79:a4:13:81:32:7b:aa:93:d2:c0:ad:08:
                    78:ad:5d:b7:e0:4d:23:b4:7f:dd:2d:f1:0b:03:15:
                    dc:02:60:40:c1:26:96:af:51:2d:38:a7:dc:3e:77:
                    82:4a:39:7e:08:44:da:a2:a7:6e:41:f1:29:6b:29:
                    7c:32:a5:36:17:f6:9d:c1:00:0f:84:14:66:64:2c:
                    90:5c:13:fb:61:a3:f1:ae:61:30:e2:be:0d:42:f3:
                    cb:eb:ff:5d:63:37:68:16:f5:d3:b7:9e:65:45:5c:
                    31:04:03:53:15:4e:fb:d6:70:5a:17:66:9b:f4:cb:
                    b2:e6:d1:2f:36:bd:d5:98:80:23:f2:1f:90:4e:1b:
                    4d:94:dc:d1:0e:64:6b:ba:d3:27:6e:7c:9a:18:35:
                    ed:42:11:e1:de:b2:7e:48:63:92:e5:3f:aa:c8:ba:
                    3d:6e:b3:51:8b:80:35:ae:51:db:6f:db:9c:16:e0:
                    e7:9a:7e:dd:12:96:a5:43:0d:58:ae:9c:b5:9d:25:
                    ee:98:29:d0:81:1f:1e:6a:36:a4:0c:88:5c:c9:7d:
                    2a:30:0e:57:9c:49:69:39:65:39:47:83:3d:b3:03:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A7:A7:F4:00:1A:A7:E8:2A:71:F9:AC:BD:C2:C6:CE:E7:3B:9C:76
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:56:f9:16:cb:cd:3e:69:3a:4f:e5:60:c9:b9:85:87:81:ad:
         05:4e:58:48:51:64:85:a7:29:f9:bb:28:6c:cd:a2:df:94:87:
         e0:a1:86:e2:3a:db:8e:ef:0f:71:89:c1:e1:bd:fb:6f:2f:77:
         87:9f:3d:eb:12:ce:00:b0:4c:c3:7d:2a:f9:11:e0:c2:68:fe:
         1e:40:1c:d6:43:67:7f:fd:de:0f:29:b6:6f:3d:57:17:f0:88:
         5b:7e:38:de:41:29:c9:45:aa:e8:bf:dd:87:97:20:d2:65:72:
         34:39:a6:dc:95:9f:29:83:9f:91:b3:be:c7:87:3c:cd:6e:62:
         8b:09:58:6c:e4:4b:a7:71:52:a8:a1:c8:69:6d:fa:37:d5:89:
         5a:51:f4:17:7b:dd:04:1f:ff:28:e5:ea:5d:2b:0f:f5:5c:57:
         16:68:2c:2b:4d:3a:e8:0c:f4:56:ea:e1:2e:de:65:03:76:44:
         2c:d1:6f:d6:17:4c:0c:ba:6d:3f:ac:b4:93:52:14:29:9a:4a:
         87:76:fc:d3:fb:43:d4:5f:2b:d3:48:a3:a0:24:56:19:66:c1:
         08:14:18:21:29:d5:60:6e:d6:0a:72:a6:f0:45:4c:4a:0e:7d:
         e9:f3:ec:da:de:b8:94:35:89:a0:08:6b:74:2a:ec:e2:3e:0a:
         ed:33:6c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org