Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
File:                     3138372e38352e3136302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          XbPJA4tD2xeQKoDLXzKoe279QDd2Le6QAuXFvSnMqZg=
Subject key identifier:   5B:2A:53:F2:1B:7B:FA:36:15:A7:E9:74:02:81:4C:A0:FA:B8:9B:95
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       628FC49F3CB9D7D33497B40C41E34CE5F730FFBD
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:17 +0000
ROA not before:           Thu 28 Apr 2022 13:24:17 +0000
ROA not after:            Thu 27 Apr 2023 13:29:17 +0000
asID:                     28343
IP address blocks:        187.85.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8f:c4:9f:3c:b9:d7:d3:34:97:b4:0c:41:e3:4c:e5:f7:30:ff:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:17 2022 GMT
            Not After : Apr 27 13:29:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:fe:0f:2e:1d:29:d0:df:13:b9:79:6c:f0:
                    98:1a:59:72:96:92:fa:1b:2c:4f:8d:14:2d:75:72:
                    d6:64:b3:fc:f6:33:5f:c8:9a:cd:42:93:54:88:8d:
                    fd:da:7e:4a:7a:6f:6f:38:f4:61:a1:58:f5:6d:e0:
                    f8:27:c2:1f:e0:37:18:f8:67:72:e2:b6:ca:e7:86:
                    a5:ae:2c:b9:b7:a4:00:b7:fa:76:a7:0f:6f:6f:e4:
                    5f:43:b5:cf:07:c6:28:f6:40:c1:0a:ae:39:fe:8a:
                    0f:08:9c:18:9f:04:2e:54:d7:41:b8:58:c7:9e:11:
                    7f:ab:12:8f:13:42:11:8f:11:3c:b5:eb:b8:20:0e:
                    04:10:92:97:67:f2:86:10:6a:ad:34:a0:19:de:75:
                    a6:c2:55:85:08:b9:ad:da:f2:b2:d1:55:f8:ff:bf:
                    12:2c:8c:a6:62:e7:af:0d:aa:e3:4b:43:f5:57:8a:
                    d6:64:e4:4d:17:21:9a:41:69:e9:ef:dc:8f:91:97:
                    6e:a5:6f:0b:b9:a3:80:49:a7:86:6a:86:9d:02:8e:
                    e0:ca:46:69:d1:e9:51:7f:07:0b:20:6b:ae:be:c1:
                    e1:40:eb:95:e1:37:77:7e:7d:75:bd:20:11:e3:f7:
                    12:10:78:79:52:e3:0f:98:02:20:e5:b3:99:df:11:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:53:F2:1B:7B:FA:36:15:A7:E9:74:02:81:4C:A0:FA:B8:9B:95
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:01:34:8a:6f:4a:81:bd:e0:44:75:e8:c9:5d:08:f4:69:f7:
         6b:91:4c:b1:fa:78:98:8c:07:c4:79:11:a2:1e:3b:6a:2b:cf:
         33:03:f1:bd:1f:89:e8:b9:40:bd:ee:dc:78:05:fd:ff:d7:d5:
         93:b7:90:51:7a:81:8f:4f:5e:4a:82:2f:32:33:65:c4:f4:17:
         af:fb:69:12:95:21:46:87:29:60:82:0f:d3:16:48:52:89:1e:
         6c:95:0e:77:45:22:d1:c1:b5:79:52:9b:4c:51:73:7c:7b:01:
         50:8e:23:b2:35:5d:f5:34:5a:3c:86:3a:b0:30:5f:57:43:76:
         32:8f:a9:14:49:2a:39:f5:c8:34:a4:93:e6:b9:b4:3a:b2:53:
         49:00:57:62:cb:22:ca:07:27:78:36:3d:bd:eb:8f:18:2f:cf:
         bc:55:69:4f:32:26:b0:32:89:92:31:06:80:0a:c8:e2:42:34:
         c2:39:ac:ad:b2:75:71:06:d0:f7:44:88:4b:cb:1c:f6:a2:8e:
         e2:dc:6a:98:25:cb:19:91:52:2a:2f:1a:d2:e8:90:bf:93:8c:
         7c:3d:99:40:6d:9a:46:c0:9a:32:8f:31:7c:a8:cf:3b:d8:c8:
         83:f4:ac:01:93:38:8f:59:93:b8:bf:b2:63:c8:63:3a:85:9e:
         08:d0:8b:f0
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUYo/Enzy519M0l7QMQeNM5fcw/70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MTdaFw0yMzA0MjcxMzI5MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFEOEZFMEYyRTFEMjlEMERG
MTNCOTc5NkNGMDk4MUE1OTcyOTY5MkZBMUIyQzRGOEQxNDJENzU3MkQ2NjRCM0ZD
RjYzMzVGQzg5QUNENDI5MzU0ODg4REZEREE3RTRBN0E2RjZGMzhGNDYxQTE1OEY1
NkRFMEY4MjdDMjFGRTAzNzE4Rjg2NzcyRTJCNkNBRTc4NkE1QUUyQ0I5QjdBNDAw
QjdGQTc2QTcwRjZGNkZFNDVGNDNCNUNGMDdDNjI4RjY0MEMxMEFBRTM5RkU4QTBG
MDg5QzE4OUYwNDJFNTRENzQxQjg1OEM3OUUxMTdGQUIxMjhGMTM0MjExOEYxMTND
QjVFQkI4MjAwRTA0MTA5Mjk3NjdGMjg2MTA2QUFEMzRBMDE5REU3NUE2QzI1NTg1
MDhCOUFEREFGMkIyRDE1NUY4RkZCRjEyMkM4Q0E2NjJFN0FGMERBQUUzNEI0M0Y1
NTc4QUQ2NjRFNDREMTcyMTlBNDE2OUU5RUZEQzhGOTE5NzZFQTU2RjBCQjlBMzgw
NDlBNzg2NkE4NjlEMDI4RUUwQ0E0NjY5RDFFOTUxN0YwNzBCMjA2QkFFQkVDMUUx
NDBFQjk1RTEzNzc3N0U3RDc1QkQyMDExRTNGNzEyMTA3ODc5NTJFMzBGOTgwMjIw
RTVCMzk5REYxMTk2OTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwdj+Dy4dKdDfE7l5bPCYGllylpL6GyxPjRQtdXLWZLP89jNfyJrN
QpNUiI392n5Kem9vOPRhoVj1beD4J8If4DcY+Gdy4rbK54alriy5t6QAt/p2pw9v
b+RfQ7XPB8Yo9kDBCq45/ooPCJwYnwQuVNdBuFjHnhF/qxKPE0IRjxE8teu4IA4E
EJKXZ/KGEGqtNKAZ3nWmwlWFCLmt2vKy0VX4/78SLIymYuevDarjS0P1V4rWZORN
FyGaQWnp79yPkZdupW8LuaOASaeGaoadAo7gykZp0elRfwcLIGuuvsHhQOuV4Td3
fn11vSAR4/cSEHh5UuMPmAIg5bOZ3xGWmQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFsqU/Ibe/o2FafpdAKBTKD6uJuVMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzgzNzJlMzgzNTJlMzEzNjMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLtV
oDANBgkqhkiG9w0BAQsFAAOCAQEAMAE0im9Kgb3gRHXoyV0I9Gn3a5FMsfp4mIwH
xHkRoh47aivPMwPxvR+J6LlAve7ceAX9/9fVk7eQUXqBj09eSoIvMjNlxPQXr/tp
EpUhRocpYIIP0xZIUokebJUOd0Ui0cG1eVKbTFFzfHsBUI4jsjVd9TRaPIY6sDBf
V0N2Mo+pFEkqOfXINKST5rm0OrJTSQBXYssiygcneDY9veuPGC/PvFVpTzImsDKJ
kjEGgArI4kI0wjmsrbJ1cQbQ90SIS8sc9qKO4txqmCXLGZFSKi8a0uiQv5OMfD2Z
QG2aRsCaMo8xfKjPO9jIg/SsAZM4j1mTuL+yY8hjOoWeCNCL8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org