Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3137362e302f32302d3234203d3e203238333433.roa
File:                     3138372e38352e3137362e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          KBMyZH1OYkejOKb46Eth2gpOmJwVZZ90WfxOmSc66mY=
Subject key identifier:   97:8C:51:C1:A9:E0:0D:A5:E3:9A:12:DF:68:66:96:B9:48:D8:4F:C0
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       6F3599DC28EB40EF683BD528DE0F1B490E39979C
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3137362e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        187.85.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:99:dc:28:eb:40:ef:68:3b:d5:28:de:0f:1b:49:0e:39:97:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:d8:ce:48:a4:bc:98:1e:9a:2e:92:38:d5:
                    47:83:c0:50:da:13:76:54:26:4a:39:25:33:6b:12:
                    25:11:f0:9a:44:80:ad:a5:d9:e5:98:05:5b:fb:1b:
                    6c:01:c3:85:8e:65:61:53:a8:7c:3b:3e:0f:2e:91:
                    28:5e:61:d0:b9:83:c3:c3:e5:3e:f3:d9:7a:44:13:
                    60:a7:b6:38:6d:d7:1e:77:ff:85:08:88:91:e9:c1:
                    9f:d7:c8:4e:bf:8d:cb:d8:7a:15:24:dc:5d:3f:ac:
                    34:ed:fb:5d:fe:26:e2:db:34:45:31:53:37:ca:be:
                    a6:a9:3b:7a:e3:c0:d8:58:7e:68:7a:ba:74:cc:28:
                    ab:d8:39:6b:a4:ff:ee:3e:da:a3:99:ad:7e:cb:9b:
                    1d:ed:29:11:d6:2b:fb:f4:e7:31:67:6f:ef:a9:80:
                    9d:27:c8:a0:4a:8d:e4:1f:6c:78:15:80:12:e5:9d:
                    60:9a:ef:4a:d9:92:a4:6b:2d:91:24:60:96:2d:9f:
                    c4:41:14:65:5b:4b:56:c7:bd:36:95:1e:75:1c:18:
                    45:d6:2d:46:a2:e5:c2:09:69:28:e2:a6:19:29:4a:
                    9a:e7:5b:b9:f5:7f:1e:78:de:4b:58:b0:cc:93:24:
                    61:37:86:6b:18:b6:7a:1c:4b:b3:cd:5d:ec:57:b0:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:51:C1:A9:E0:0D:A5:E3:9A:12:DF:68:66:96:B9:48:D8:4F:C0
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38352e3137362e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:44:2b:8a:45:bc:5d:87:7d:53:c9:b7:a4:f6:20:2e:7f:
         be:2c:d8:8e:5a:29:dc:45:72:47:ed:c6:b8:60:a4:ca:80:ab:
         ca:dc:5c:91:62:05:7b:a9:a8:98:87:a5:bc:8e:13:b0:54:9e:
         2f:69:41:13:f9:e5:f0:2a:4f:4e:84:49:22:66:ed:6e:29:22:
         1a:26:0b:b6:aa:cf:aa:47:a0:47:76:c0:3b:46:d1:4e:55:f4:
         0f:9e:a1:e4:c0:a5:77:64:6e:d2:d3:56:c9:ad:28:90:2e:f2:
         eb:0d:3d:47:86:2d:4d:98:21:c4:58:3a:27:2c:77:d7:3a:eb:
         a3:18:91:4a:09:e8:fc:21:ca:47:44:b8:80:e2:ce:1c:ca:2d:
         7f:d0:97:aa:3f:68:fd:d7:1b:7b:e1:65:d5:78:34:c6:b7:1b:
         de:40:8e:79:e4:e8:93:2a:41:e9:ac:4e:10:39:47:3f:8d:3c:
         89:04:aa:fe:76:f7:0f:73:b0:3c:af:f1:93:26:46:d3:a9:d0:
         f8:6a:5f:67:da:66:2d:e8:a6:88:bd:8c:c7:e5:ea:3e:83:59:
         62:03:07:92:5d:18:c4:3d:18:8c:d2:ee:35:55:0d:7c:eb:c5:
         82:fa:53:17:1c:c0:96:20:bb:55:32:c9:c8:af:0b:e0:10:9a:
         3a:bc:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org