Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e3130322e302e302f32302d3234203d3e203238333433.roa
File:                     3138372e3130322e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          HBHrD6lBabpK3GErDXWNTViQDuLDf0JZHdg2sC0o5nc=
Subject key identifier:   50:09:80:79:D6:3D:A8:A1:62:B9:21:B7:D3:E0:8D:4F:7E:AB:23:A3
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       476455641F500370CEB7948D313A1A840D320A5E
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e3130322e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        187.102.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:55:64:1f:50:03:70:ce:b7:94:8d:31:3a:1a:84:0d:32:0a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject: CN=3082010A0282010100C77168A755659D9CB4B1F9E56EE426417483AA8511129FE5811393A655FFBFD96521E12D912C4A9D384E03F950E14E6FC429E058B39D4D1B83F4E1B03A7594BB86278D2DFBCAABFA05879891DE088E6A1126B613F3BCEBEF01B70D1228A8470D93A63ACFCB5231FE8ECBAFBF33AD25656EF12FB2791889215AD1E8D91AC2858D91B04EDAF51D34F0A3807F594E6910AEA69396A764CFE02A12AE4B807109D7963784AB0C9D0DA4A4EE22728125B83CE3A8A9A667F62634B4926AF468D2CE6E7EF2BF8700973461F15605F3DA120F125614A6764DA1AB5839D9352551DE47B02E43D79C45B8641AC57D014467B9291C5F08CF79FA54F9C60588EBED64630D33190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:68:a7:55:65:9d:9c:b4:b1:f9:e5:6e:e4:
                    26:41:74:83:aa:85:11:12:9f:e5:81:13:93:a6:55:
                    ff:bf:d9:65:21:e1:2d:91:2c:4a:9d:38:4e:03:f9:
                    50:e1:4e:6f:c4:29:e0:58:b3:9d:4d:1b:83:f4:e1:
                    b0:3a:75:94:bb:86:27:8d:2d:fb:ca:ab:fa:05:87:
                    98:91:de:08:8e:6a:11:26:b6:13:f3:bc:eb:ef:01:
                    b7:0d:12:28:a8:47:0d:93:a6:3a:cf:cb:52:31:fe:
                    8e:cb:af:bf:33:ad:25:65:6e:f1:2f:b2:79:18:89:
                    21:5a:d1:e8:d9:1a:c2:85:8d:91:b0:4e:da:f5:1d:
                    34:f0:a3:80:7f:59:4e:69:10:ae:a6:93:96:a7:64:
                    cf:e0:2a:12:ae:4b:80:71:09:d7:96:37:84:ab:0c:
                    9d:0d:a4:a4:ee:22:72:81:25:b8:3c:e3:a8:a9:a6:
                    67:f6:26:34:b4:92:6a:f4:68:d2:ce:6e:7e:f2:bf:
                    87:00:97:34:61:f1:56:05:f3:da:12:0f:12:56:14:
                    a6:76:4d:a1:ab:58:39:d9:35:25:51:de:47:b0:2e:
                    43:d7:9c:45:b8:64:1a:c5:7d:01:44:67:b9:29:1c:
                    5f:08:cf:79:fa:54:f9:c6:05:88:eb:ed:64:63:0d:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:09:80:79:D6:3D:A8:A1:62:B9:21:B7:D3:E0:8D:4F:7E:AB:23:A3
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e3130322e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:22:24:46:30:47:b4:48:49:55:66:ad:60:c1:8e:e6:90:
         97:ea:7a:2e:4e:96:a1:b2:a1:93:4c:67:11:50:84:82:36:68:
         e1:e9:c6:b5:2c:a4:51:2f:bc:66:34:59:b8:b0:06:49:00:92:
         ca:3a:4a:c8:02:fb:06:eb:26:32:69:d0:21:78:64:62:67:cf:
         19:56:29:8d:74:21:6c:cb:0f:4d:ae:be:ef:a2:38:35:eb:86:
         2d:77:eb:26:f3:91:a5:c1:10:88:7b:45:e5:47:fe:40:6c:ff:
         a4:0d:5d:30:bf:ee:17:3d:74:2e:d1:06:e1:0c:60:c8:65:e9:
         1e:a7:24:48:de:09:3c:44:b8:42:18:0f:b5:da:de:52:b6:53:
         53:cb:35:75:3f:b9:df:36:ff:d0:33:d6:c5:79:4f:88:5c:cd:
         1d:3d:bf:27:1b:2f:a5:aa:1b:6e:61:13:8a:38:ef:e6:0e:a0:
         dc:0e:97:d8:da:f8:74:48:3c:47:bb:91:bc:48:e2:4b:ec:96:
         34:a1:66:c3:91:c0:aa:a6:e0:b5:6e:e2:7e:9c:8b:e8:4d:47:
         98:5a:db:85:5a:b2:a9:ee:b4:60:73:d2:42:9a:f2:99:cc:72:
         76:4c:32:4d:d4:47:b1:04:b7:da:e0:05:83:23:1e:32:ff:92:
         34:79:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org