Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e3131332e3232342e302f31392d3234203d3e203238333433.roa
File:                     3138392e3131332e3232342e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          TQL4E81OvH0o0TOolASOEWvqU0Eg9goxO3h2vRSIpEs=
Subject key identifier:   2E:80:EB:55:E0:8A:2E:0F:23:1E:26:8B:8C:B9:6D:91:1D:7F:FF:FC
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       0365F59F3EF5AA6CC2DC74A1A91728A4858BB23C
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e3131332e3232342e302f31392d3234203d3e203238333433.roa
Signing time:             Fri 27 Jan 2023 13:17:34 +0000
ROA not before:           Fri 27 Jan 2023 13:12:34 +0000
ROA not after:            Fri 26 Jan 2024 13:17:34 +0000
asID:                     28343
IP address blocks:        189.113.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:65:f5:9f:3e:f5:aa:6c:c2:dc:74:a1:a9:17:28:a4:85:8b:b2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 27 13:12:34 2023 GMT
            Not After : Jan 26 13:17:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:de:bf:0f:1a:18:be:93:41:5a:8c:36:05:
                    73:17:a4:26:b5:1f:8b:3d:af:89:a1:31:c5:b1:f0:
                    fc:85:88:6c:c6:02:2b:6e:19:64:26:10:09:f3:ca:
                    37:af:38:85:81:6f:29:f8:05:1d:c5:f1:ad:b1:8a:
                    0a:fc:34:3d:da:27:bc:cf:19:cb:53:91:60:de:85:
                    51:39:77:21:34:a4:c7:b1:90:d1:d8:60:bc:e3:c4:
                    ab:c6:a5:b2:1e:25:dd:9f:c6:06:67:72:f1:49:d0:
                    7a:34:93:f3:ba:1e:65:e8:33:2f:ff:f6:05:b5:c8:
                    f9:5a:f6:6a:72:40:bf:dd:0b:fc:ef:db:8e:40:36:
                    ad:71:6e:d8:17:80:45:5a:a3:ff:a3:33:9d:1a:fa:
                    00:15:12:07:5d:41:89:18:a3:4e:21:5f:44:d4:d0:
                    25:56:6e:a4:5c:cd:ec:4b:9e:3a:cc:94:e6:19:0c:
                    74:80:63:d3:68:9a:72:74:e5:2a:da:fe:e8:96:7f:
                    c9:4a:d8:9d:9a:7e:20:29:a7:18:18:ef:81:e1:87:
                    00:db:f2:55:2e:c3:2a:f0:5f:78:45:4e:4a:de:8c:
                    f4:f7:6b:73:77:01:21:13:8f:8d:82:e2:e3:10:4c:
                    26:e8:06:02:d8:5b:b2:52:4c:2e:87:b1:9a:8f:85:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:80:EB:55:E0:8A:2E:0F:23:1E:26:8B:8C:B9:6D:91:1D:7F:FF:FC
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e3131332e3232342e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:12:cd:e0:f0:a7:37:c9:51:5d:0a:e2:7f:3d:5b:4f:c8:f3:
         1d:ec:33:42:8e:92:a8:d7:ca:7f:14:29:d9:bd:09:77:22:fe:
         db:6b:30:e8:86:0c:6b:85:e6:da:ce:aa:df:7f:d3:56:0a:87:
         47:86:f5:9c:20:57:b4:d6:42:ac:fd:73:9c:65:ea:d9:c4:22:
         1e:38:7d:23:73:31:db:ac:2b:e7:64:b4:ac:75:c2:c0:d6:17:
         fd:ba:3c:5f:b9:34:33:69:61:63:46:fb:05:e1:a7:3c:9d:04:
         8e:eb:f1:5f:2c:3a:61:ab:46:19:4a:43:cd:44:ad:c2:e9:47:
         ef:2e:bb:e7:ac:5f:4a:5a:59:d7:68:78:eb:94:ea:b9:50:ee:
         d7:f2:9d:ee:f0:94:fa:91:08:ed:d4:26:4e:6e:be:53:f3:c7:
         c5:30:e3:09:58:4a:57:41:7f:5b:b9:b4:a2:0f:33:5d:38:5d:
         fa:64:46:1a:4e:19:1c:fa:2b:99:bd:98:be:b7:d4:3d:7d:b1:
         33:1c:bb:5a:0c:e9:1a:f5:d9:35:bc:38:00:80:2b:a9:8d:42:
         b6:58:38:c6:1d:10:df:5b:a7:53:ff:ac:ed:92:1d:0a:e2:7b:
         ac:4a:19:b1:c4:13:1f:1a:1a:83:79:0c:66:08:eb:e7:3a:c0:
         20:e5:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org