Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38372e39362e302f32302d3234203d3e203238333433.roa
File:                     3138372e38372e39362e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          KiKyqzU8GvHBvBLNXcUDdSr5xplnEDrcWeWLkgFYamY=
Subject key identifier:   28:64:BD:1A:98:66:93:B1:F6:54:7B:9E:EF:F7:06:83:A8:2D:34:D6
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       554754F81174CE588302B7F72F445D66D55EC1D2
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38372e39362e302f32302d3234203d3e203238333433.roa
Signing time:             Fri 27 Jan 2023 13:17:34 +0000
ROA not before:           Fri 27 Jan 2023 13:12:34 +0000
ROA not after:            Fri 26 Jan 2024 13:17:34 +0000
asID:                     28343
IP address blocks:        187.87.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:47:54:f8:11:74:ce:58:83:02:b7:f7:2f:44:5d:66:d5:5e:c1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 27 13:12:34 2023 GMT
            Not After : Jan 26 13:17:34 2024 GMT
        Subject: CN=3082010A0282010100DB1EDEBD16DC29D70B6A9CE52815FE4DCA9F7BC4A8A475D0404398381810C8B26BBF2C6B5D53808B6B5192697940795D037E72796FBCFF048E806F54E4929632144F5A87D49B756E98696AA68CF80390098C5702AC6413B82BD622EB452C52F5D30D9F61B9BE53AD1C27E9212C5CC5AD9B9410E5471341219A9E8E74169612EDA2ADF669A0A15442FC50AB9397A6D11C84DA52F9D7266676E65B1D7E2B51D5D1F9117C6B6D6BC5AC82A8733589E153A50AC4B5FD7D8FAAA85D688EF92EE9391DB666978EE67E85BA3757F06E1F9D157EBEA4F8848F445B4216A5B043D6018808EBB2A2245C184600A2A5DB98D3E3E8119102C38EBC7047DB53333582D53F52350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:de:bd:16:dc:29:d7:0b:6a:9c:e5:28:15:
                    fe:4d:ca:9f:7b:c4:a8:a4:75:d0:40:43:98:38:18:
                    10:c8:b2:6b:bf:2c:6b:5d:53:80:8b:6b:51:92:69:
                    79:40:79:5d:03:7e:72:79:6f:bc:ff:04:8e:80:6f:
                    54:e4:92:96:32:14:4f:5a:87:d4:9b:75:6e:98:69:
                    6a:a6:8c:f8:03:90:09:8c:57:02:ac:64:13:b8:2b:
                    d6:22:eb:45:2c:52:f5:d3:0d:9f:61:b9:be:53:ad:
                    1c:27:e9:21:2c:5c:c5:ad:9b:94:10:e5:47:13:41:
                    21:9a:9e:8e:74:16:96:12:ed:a2:ad:f6:69:a0:a1:
                    54:42:fc:50:ab:93:97:a6:d1:1c:84:da:52:f9:d7:
                    26:66:76:e6:5b:1d:7e:2b:51:d5:d1:f9:11:7c:6b:
                    6d:6b:c5:ac:82:a8:73:35:89:e1:53:a5:0a:c4:b5:
                    fd:7d:8f:aa:a8:5d:68:8e:f9:2e:e9:39:1d:b6:66:
                    97:8e:e6:7e:85:ba:37:57:f0:6e:1f:9d:15:7e:be:
                    a4:f8:84:8f:44:5b:42:16:a5:b0:43:d6:01:88:08:
                    eb:b2:a2:24:5c:18:46:00:a2:a5:db:98:d3:e3:e8:
                    11:91:02:c3:8e:bc:70:47:db:53:33:35:82:d5:3f:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:BD:1A:98:66:93:B1:F6:54:7B:9E:EF:F7:06:83:A8:2D:34:D6
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e38372e39362e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:29:a0:fd:0f:57:30:df:3e:8c:b0:b8:f0:f3:39:8f:b3:c8:
         ab:d2:5c:79:63:c5:d8:60:73:ab:e0:09:69:d7:96:b9:bf:0c:
         33:7c:99:13:f3:5e:14:9d:66:0c:59:3c:8f:00:82:8f:14:67:
         c7:b1:a2:8c:95:c1:0f:62:fb:e5:1a:77:87:b6:b8:70:3c:28:
         f7:77:72:b8:7e:ba:57:fd:17:59:2b:35:24:d1:75:36:d0:3e:
         17:19:7a:f5:9b:8e:f1:ed:b5:68:6f:9a:51:35:96:bd:b0:36:
         6a:69:5f:28:c8:d0:11:65:f9:91:37:00:02:f1:2e:79:ec:27:
         49:e3:bd:f9:4f:a6:f8:f8:c5:ca:68:bc:fb:56:b5:85:77:bd:
         4d:c2:c7:5f:7d:f9:a3:9d:c1:7a:72:02:92:de:0d:01:47:71:
         c5:e9:08:a1:5c:c2:b7:de:1f:06:25:6f:8e:ee:32:3e:49:a5:
         b9:c8:ab:2e:35:16:eb:a9:08:99:77:c6:a0:9f:23:93:5c:38:
         c8:82:48:ac:ef:4d:91:f1:ea:b7:87:1a:1a:4b:39:c1:c6:d5:
         2a:41:23:2b:fc:e9:2a:e6:51:3a:24:08:fe:17:eb:c0:24:40:
         76:9f:3b:2f:6a:e4:d6:6b:bf:33:5b:63:6b:49:d6:a6:63:ef:
         31:51:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org