Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e34352e36342e302f32302d3234203d3e203238333433.roa
File:                     3138372e34352e36342e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          /z6z9o0BW23SO5DUhggRw+n3hMKSEiVdRbdkEOfdsVE=
Subject key identifier:   9C:EF:30:48:F2:02:F8:92:D1:04:E2:9E:BF:C1:E6:E4:1A:EE:E2:24
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       107BA6AC25F9855AFA42532ABAA698AF7C07F4E3
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e34352e36342e302f32302d3234203d3e203238333433.roa
Signing time:             Tue 13 Sep 2022 11:25:18 +0000
ROA not before:           Tue 13 Sep 2022 11:20:18 +0000
ROA not after:            Tue 12 Sep 2023 11:25:18 +0000
asID:                     28343
IP address blocks:        187.45.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7b:a6:ac:25:f9:85:5a:fa:42:53:2a:ba:a6:98:af:7c:07:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Sep 13 11:20:18 2022 GMT
            Not After : Sep 12 11:25:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:de:89:af:f7:63:2b:59:7b:13:a4:b2:c5:
                    28:cd:20:f2:ac:6a:4b:37:1a:f9:e1:44:14:6a:65:
                    cc:55:68:cf:50:cf:c5:58:b4:02:b1:c7:f1:1b:c4:
                    96:0a:6b:68:31:44:80:26:08:58:78:76:4a:85:9b:
                    3a:c8:2d:bb:00:2f:19:d9:bf:c3:5e:fc:ea:e2:ed:
                    4c:81:2e:ea:12:c8:47:fb:cf:bc:79:59:6e:ed:6b:
                    86:97:96:57:22:91:ca:99:3d:12:8a:80:92:1d:7d:
                    5e:d5:14:08:4e:19:45:11:59:57:66:13:ec:90:cd:
                    08:39:3d:0e:d1:39:bc:40:26:c3:0e:b3:4e:7c:c0:
                    02:96:53:6e:ed:3d:2b:4e:03:14:37:72:91:99:4e:
                    23:e0:6e:35:ef:a0:49:6e:7e:24:8e:44:95:4a:d4:
                    af:cd:9b:aa:9c:26:a1:21:4d:78:4a:af:74:ab:bd:
                    24:21:17:dd:a6:12:b2:11:75:54:c5:96:87:e3:78:
                    2e:24:b4:44:38:b3:b1:47:19:93:7e:bf:76:94:19:
                    5e:08:bd:ea:e7:4f:f8:12:05:ee:f2:42:a4:35:a3:
                    a2:b5:ee:96:17:f9:00:c0:f9:29:bd:1d:6c:02:6b:
                    dd:de:2d:3b:f4:0d:cc:95:19:6c:a5:e2:69:22:d4:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EF:30:48:F2:02:F8:92:D1:04:E2:9E:BF:C1:E6:E4:1A:EE:E2:24
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e34352e36342e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:b0:61:f0:fd:a4:18:26:58:fe:c8:16:51:e6:92:be:77:8e:
         5a:84:e7:44:08:e0:47:ec:f8:ee:ae:ed:a9:f8:6d:fa:cc:3d:
         15:61:f9:a5:b6:09:47:20:05:dd:79:00:75:0f:f2:1a:03:c0:
         80:ed:5e:1c:03:de:e6:8a:e6:48:fb:a9:be:99:16:a1:34:a4:
         d1:76:2c:a3:b4:62:4b:38:a9:3b:d2:c4:e5:bb:3c:08:1a:80:
         f2:7b:ed:f8:59:3c:7b:12:3e:1a:bf:37:6d:be:db:12:3d:f3:
         f2:d0:bf:22:ad:8a:2a:65:5b:a0:49:08:26:0e:6e:6b:ec:3d:
         52:c9:8f:f4:b9:c2:16:46:7e:e4:2f:65:e0:2c:0f:95:f4:be:
         6f:2a:bf:02:d7:1d:ab:5b:a2:1f:75:65:40:ea:da:6c:8b:a6:
         12:d6:73:70:9c:70:c1:3b:34:34:cf:2a:b0:21:e5:ea:4c:ab:
         2d:8f:f9:7c:b7:24:a8:25:8a:ea:c7:32:9c:e3:4c:81:23:74:
         ad:8f:1e:e6:89:98:56:86:b5:15:d5:68:a9:45:8b:a5:0d:a5:
         ac:33:77:c8:a9:52:d0:29:25:da:8d:ba:51:fc:d4:d7:54:f2:
         ec:73:01:f0:86:ed:51:fb:ca:68:2e:cc:cb:b2:3d:35:72:06:
         35:29:16:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org