Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e39342e39362e302f32302d3234203d3e203238333433.roa
File:                     3138372e39342e39362e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          7QZG8Dl1qIOpkOxRZiOfZZmfm/Qww4W1OOHUyP9NBo0=
Subject key identifier:   C6:C5:E7:C6:31:5A:CE:CE:FB:CB:03:7A:8D:18:F2:52:E5:93:9C:7C
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       21BDBFF9669C15041576BC928F575AFCEAB80A46
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e39342e39362e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        187.94.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bd:bf:f9:66:9c:15:04:15:76:bc:92:8f:57:5a:fc:ea:b8:0a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:fe:ab:04:dd:1f:80:3b:3d:9d:85:a1:c3:
                    20:44:63:fc:16:db:e1:e7:f0:4b:72:47:75:60:9e:
                    5f:24:7d:12:6e:da:f5:ce:b3:3f:fe:81:34:90:9a:
                    e1:7f:97:72:63:63:08:18:5d:5d:ff:32:45:84:49:
                    e8:73:6c:81:39:28:1c:94:8b:d6:00:16:6b:b9:83:
                    33:31:fc:9e:cf:6f:22:5b:9e:d3:a0:20:c8:bd:42:
                    66:26:d3:00:e4:13:4f:e7:25:c7:cd:e2:e5:71:51:
                    ae:a1:fd:97:c0:f8:49:6f:2d:d4:c8:bf:40:e7:38:
                    b6:aa:42:e8:96:f9:a1:90:56:f8:06:e6:9d:85:12:
                    50:57:71:dd:01:72:64:e5:d5:3d:ae:c4:21:69:e9:
                    6a:78:70:49:4a:f2:26:0e:8c:f7:87:36:f5:1a:31:
                    41:02:1c:e5:03:06:ca:9f:67:ab:04:46:1b:f7:64:
                    be:d7:87:e0:20:49:0c:b0:d6:34:fc:4d:b1:e8:53:
                    9a:2b:70:b3:5c:ea:5b:87:4f:82:9b:04:37:49:d4:
                    76:e0:c1:e5:64:92:11:9b:e7:7a:a1:b5:97:14:ca:
                    57:07:57:a4:6b:38:87:d2:d4:b2:47:9f:89:8b:9e:
                    84:37:2a:ad:6e:59:3d:94:fd:cb:20:b2:d4:ec:1e:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C5:E7:C6:31:5A:CE:CE:FB:CB:03:7A:8D:18:F2:52:E5:93:9C:7C
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138372e39342e39362e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:42:bb:97:be:0d:fa:2b:ca:d2:f4:2b:d2:e4:13:54:c6:76:
         04:e1:de:5f:d8:d8:bf:04:c9:20:7f:71:48:ec:cf:1f:ba:66:
         17:b0:76:35:cd:71:a4:be:6d:65:1a:fb:39:5d:a8:16:9c:c6:
         5f:01:10:40:cc:3d:96:2f:70:05:a5:1b:52:89:23:f2:04:40:
         50:14:d7:06:bd:59:8f:18:62:50:c1:44:ce:e5:f9:1c:f7:ce:
         3c:78:04:29:ee:bd:07:58:9a:27:c7:cf:d7:a6:a4:22:58:61:
         77:a9:dc:0d:89:38:bd:0a:96:99:ad:b7:e1:7f:b1:91:df:69:
         96:35:3f:06:fb:b1:3c:2c:8b:ed:f4:b8:15:cd:3b:8f:d5:a9:
         3f:9b:5d:d3:53:bb:52:b5:04:8e:4d:4a:22:be:a3:c4:47:0c:
         47:06:7d:be:6f:86:e1:d6:36:22:10:26:ac:75:e9:2c:50:cf:
         3c:ca:82:6b:cb:f8:2b:b8:f8:fe:db:fe:69:e5:29:c3:15:14:
         cb:12:5d:f8:63:a9:86:05:a6:42:1f:a2:2a:58:85:33:fb:20:
         3a:a0:37:d8:95:dd:ea:f9:ce:4a:be:b9:27:2b:29:bc:57:7d:
         93:c9:b5:bf:b8:f5:32:df:61:89:ed:f8:94:06:f8:21:be:b4:
         0e:37:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org