Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3235312e3130382e302f32322d3234203d3e203238333433.roa
File:                     3138362e3235312e3130382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          nSxxjuuMKF9hk0mITlaWD60/d0AonIez42etoOI/lwM=
Subject key identifier:   46:69:AF:44:6C:4F:3E:AA:A2:0B:5C:60:0D:CF:0C:D3:E4:1C:FB:21
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       55B382671AA7624B65287C3084151CDBD7B2914E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3235312e3130382e302f32322d3234203d3e203238333433.roa
Signing time:             Mon 26 Dec 2022 16:40:38 +0000
ROA not before:           Mon 26 Dec 2022 16:35:38 +0000
ROA not after:            Mon 25 Dec 2023 16:40:38 +0000
asID:                     28343
IP address blocks:        186.251.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b3:82:67:1a:a7:62:4b:65:28:7c:30:84:15:1c:db:d7:b2:91:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Dec 26 16:35:38 2022 GMT
            Not After : Dec 25 16:40:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:94:f8:f7:9c:bc:16:67:be:4d:98:0d:d2:
                    64:7e:cb:e4:4f:3d:b9:c1:d4:d0:33:21:e9:87:73:
                    ca:be:37:f7:f9:e0:64:60:b5:15:c4:d9:93:56:ef:
                    bd:cb:84:3e:a9:d8:d5:43:57:05:f0:0f:c5:d8:8d:
                    25:e4:14:fe:98:18:0f:a1:84:14:5c:e2:58:16:3f:
                    aa:db:9a:04:59:1a:03:73:12:58:fa:46:a2:02:13:
                    82:5b:18:76:fa:31:16:c3:f2:d2:d7:9b:27:ac:a6:
                    fb:56:1b:13:95:16:7a:e7:9c:46:2a:25:81:a5:20:
                    25:9f:ec:c0:5d:ec:80:f1:0b:b1:f5:bc:b2:ca:b3:
                    b6:31:c7:eb:8f:cc:9e:32:c6:06:75:ca:36:51:78:
                    52:01:6a:d9:97:88:29:80:7a:5b:51:77:a1:89:f7:
                    1b:47:cc:af:38:41:8a:ee:15:62:c4:4b:a9:24:74:
                    c2:f8:96:82:99:d8:04:21:a3:2b:04:ce:83:05:f5:
                    ef:51:c1:af:88:0c:1b:b6:68:b8:bc:3e:31:67:22:
                    cc:c7:f7:5e:09:a4:09:f6:71:f9:12:ed:48:87:a0:
                    8d:0c:b7:45:25:29:33:29:ee:42:cc:f7:ce:a2:d5:
                    bb:26:db:e8:43:62:2b:1f:2c:3d:5b:73:f7:2b:f2:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:69:AF:44:6C:4F:3E:AA:A2:0B:5C:60:0D:CF:0C:D3:E4:1C:FB:21
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138362e3235312e3130382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:62:1c:32:79:8d:33:62:64:f7:c2:67:bd:a7:79:8b:f0:
         07:09:8c:08:d5:d9:f8:f9:07:f9:98:51:99:07:52:1e:ad:ba:
         a6:e7:11:5e:3c:dd:a4:3d:8e:c4:c0:21:7f:29:f9:e9:62:52:
         ad:0d:15:44:51:e2:62:9a:76:9c:e5:85:20:e6:39:aa:e6:cf:
         b6:d9:af:ac:d9:dd:12:8e:46:db:db:d5:3c:5e:50:3d:ac:75:
         f1:0e:c4:dd:2d:49:27:4d:48:c5:77:77:cb:d6:8a:90:67:b1:
         ea:eb:54:2a:90:6d:16:5d:16:f7:9a:20:e9:f0:4f:61:5c:08:
         e4:39:34:87:77:f8:ba:2d:b0:c5:1f:a6:a6:f8:86:86:35:15:
         2c:f2:aa:2b:bb:cf:ac:8f:9b:ee:01:85:77:fc:7a:91:fa:65:
         71:02:6b:63:be:57:d4:79:cc:7d:ef:b0:de:0d:8a:5b:15:b1:
         eb:61:7f:6b:57:7b:8f:4e:4d:e1:c1:84:e7:40:f4:09:95:2e:
         73:98:33:79:26:fc:8b:c4:73:d6:0e:cd:c7:34:3f:f9:2b:a8:
         e3:e8:20:75:64:50:7c:5d:09:89:cd:0c:41:3b:20:63:86:8f:
         ed:0d:ba:1d:4a:55:a6:3f:18:5f:10:27:81:87:53:13:b1:c6:
         04:63:f6:f8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUVbOCZxqnYktlKHwwhBUc29eykU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjEyMjYxNjM1MzhaFw0yMzEyMjUxNjQwMzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE3Mjk0RjhGNzlDQkMxNjY3
QkU0RDk4MEREMjY0N0VDQkU0NEYzREI5QzFENEQwMzMyMUU5ODc3M0NBQkUzN0Y3
RjlFMDY0NjBCNTE1QzREOTkzNTZFRkJEQ0I4NDNFQTlEOEQ1NDM1NzA1RjAwRkM1
RDg4RDI1RTQxNEZFOTgxODBGQTE4NDE0NUNFMjU4MTYzRkFBREI5QTA0NTkxQTAz
NzMxMjU4RkE0NkEyMDIxMzgyNUIxODc2RkEzMTE2QzNGMkQyRDc5QjI3QUNBNkZC
NTYxQjEzOTUxNjdBRTc5QzQ2MkEyNTgxQTUyMDI1OUZFQ0MwNURFQzgwRjEwQkIx
RjVCQ0IyQ0FCM0I2MzFDN0VCOEZDQzlFMzJDNjA2NzVDQTM2NTE3ODUyMDE2QUQ5
OTc4ODI5ODA3QTVCNTE3N0ExODlGNzFCNDdDQ0FGMzg0MThBRUUxNTYyQzQ0QkE5
MjQ3NEMyRjg5NjgyOTlEODA0MjFBMzJCMDRDRTgzMDVGNUVGNTFDMUFGODgwQzFC
QjY2OEI4QkMzRTMxNjcyMkNDQzdGNzVFMDlBNDA5RjY3MUY5MTJFRDQ4ODdBMDhE
MENCNzQ1MjUyOTMzMjlFRTQyQ0NGN0NFQTJENUJCMjZEQkU4NDM2MjJCMUYyQzNE
NUI3M0Y3MkJGMkQyQ0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAunKU+PecvBZnvk2YDdJkfsvkTz25wdTQMyHph3PKvjf3+eBkYLUV
xNmTVu+9y4Q+qdjVQ1cF8A/F2I0l5BT+mBgPoYQUXOJYFj+q25oEWRoDcxJY+kai
AhOCWxh2+jEWw/LS15snrKb7VhsTlRZ655xGKiWBpSAln+zAXeyA8Qux9byyyrO2
Mcfrj8yeMsYGdco2UXhSAWrZl4gpgHpbUXehifcbR8yvOEGK7hVixEupJHTC+JaC
mdgEIaMrBM6DBfXvUcGviAwbtmi4vD4xZyLMx/deCaQJ9nH5Eu1Ih6CNDLdFJSkz
Ke5CzPfOotW7JtvoQ2IrHyw9W3P3K/LSzQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEZpr0RsTz6qogtcYA3PDNPkHPshMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzgzNjJlMzIzNTMxMmUzMTMw
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
uvtsMA0GCSqGSIb3DQEBCwUAA4IBAQB/KWIcMnmNM2Jk98Jnvad5i/AHCYwI1dn4
+Qf5mFGZB1Ierbqm5xFePN2kPY7EwCF/KfnpYlKtDRVEUeJimnac5YUg5jmq5s+2
2a+s2d0Sjkbb29U8XlA9rHXxDsTdLUknTUjFd3fL1oqQZ7Hq61QqkG0WXRb3miDp
8E9hXAjkOTSHd/i6LbDFH6am+IaGNRUs8qoru8+sj5vuAYV3/HqR+mVxAmtjvlfU
ecx977DeDYpbFbHrYX9rV3uPTk3hwYTnQPQJlS5zmDN5JvyLxHPWDs3HND/5K6jj
6CB1ZFB8XQmJzQxBOyBjho/tDbodSlWmPxhfECeBh1MTscYEY/b4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org