Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e32382e3139322e302f31392d3234203d3e203238333433.roa
File:                     3138392e32382e3139322e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          FoAZwVWh/ws6JjV/xrrLggNV0RLhtlgf6AX7sxTiRAU=
Subject key identifier:   65:FE:06:7E:F3:66:B9:23:C6:0C:EA:6F:11:5F:7B:39:62:59:FB:66
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       49C4510290C4BCBC98302DBF227364E294CD2FE2
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e32382e3139322e302f31392d3234203d3e203238333433.roa
Signing time:             Fri 27 Jan 2023 13:17:34 +0000
ROA not before:           Fri 27 Jan 2023 13:12:34 +0000
ROA not after:            Fri 26 Jan 2024 13:17:34 +0000
asID:                     28343
IP address blocks:        189.28.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:51:02:90:c4:bc:bc:98:30:2d:bf:22:73:64:e2:94:cd:2f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Jan 27 13:12:34 2023 GMT
            Not After : Jan 26 13:17:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:72:51:f7:32:8b:63:0a:83:02:2f:cf:90:
                    e6:b9:b1:3d:59:43:92:94:88:0a:19:3f:cf:85:5c:
                    46:13:38:1e:2b:9a:c7:09:d3:27:1b:2a:6e:26:11:
                    1f:d3:60:bc:ce:14:00:34:22:26:a1:23:6a:19:a5:
                    51:21:01:82:aa:b9:44:4d:a3:76:dd:de:39:3d:86:
                    99:3c:2f:9d:7f:9c:c6:ba:a3:9f:c4:0b:19:38:03:
                    50:27:90:a1:ae:2e:5a:b5:d3:d1:13:61:ed:07:9e:
                    01:be:58:9b:ca:fc:fd:e3:3b:44:a9:5e:7e:eb:67:
                    db:43:c1:ba:d6:fe:98:4b:09:80:c0:2a:03:61:1f:
                    00:a9:64:0f:ac:8d:5c:1e:6d:3c:f5:df:11:d7:20:
                    e2:9d:fe:7a:d0:80:de:d4:a5:a2:35:ca:23:ef:82:
                    99:68:46:7c:4f:dc:97:0c:c9:7e:63:3f:96:32:dc:
                    b5:24:a7:09:bb:9b:b5:ab:b4:52:d4:19:ce:e6:ee:
                    71:c3:a8:f5:fc:37:e1:b8:4c:10:4b:70:0d:9d:a5:
                    22:e0:f4:57:37:d3:9e:79:64:b3:a0:89:c1:06:d8:
                    94:3e:ca:22:75:41:23:a9:37:6f:57:b2:d9:1f:5a:
                    1e:ff:bd:74:8c:21:9b:6f:5f:22:bd:80:d5:4a:8c:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FE:06:7E:F3:66:B9:23:C6:0C:EA:6F:11:5F:7B:39:62:59:FB:66
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e32382e3139322e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:18:2b:b0:69:e7:7f:2f:0f:af:c6:f5:a4:66:0c:1d:ef:
         5b:2b:83:15:48:d8:ad:4c:bb:8d:b6:a9:72:72:54:b5:86:45:
         35:f6:b3:64:20:18:88:fa:49:36:03:ee:6c:9f:99:37:f4:57:
         62:bd:c5:d8:93:cf:a3:66:ad:84:ca:73:a7:1d:22:21:60:8a:
         ad:49:d0:2a:a2:9d:38:73:d7:ce:f7:c8:62:0d:50:cd:14:a7:
         27:45:f3:32:f3:48:dc:18:72:b2:59:5e:bf:b2:7f:5c:65:c0:
         47:c0:6a:2c:ff:e1:49:a2:dd:21:7c:f1:8a:41:17:e8:77:8e:
         ac:0c:b1:5a:7f:44:e5:38:04:14:a6:e0:a0:7c:8f:4f:fd:a6:
         2e:7b:57:6e:03:46:98:d4:06:2b:c3:61:0c:ec:1d:71:9e:0b:
         6d:d3:ac:35:af:94:bf:90:ee:37:3b:e6:4d:e2:7e:d3:0a:af:
         4c:33:f8:93:a3:f6:b6:54:e7:6b:f5:05:12:f1:26:eb:58:9d:
         11:49:ed:e4:24:24:8e:14:ad:5d:c4:78:cb:ca:ef:81:97:e7:
         6c:2c:12:cc:57:ff:e3:4c:ee:74:38:bb:a5:81:ed:7d:e9:a8:
         0f:56:41:fd:40:9c:05:cf:1a:f3:98:c3:a2:64:0d:48:56:df:
         71:e0:97:3e
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUScRRApDEvLyYMC2/InNk4pTNL+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMzAxMjcxMzEyMzRaFw0yNDAxMjYxMzE3MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTI5MjcyNTFGNzMyOEI2MzBB
ODMwMjJGQ0Y5MEU2QjlCMTNENTk0MzkyOTQ4ODBBMTkzRkNGODU1QzQ2MTMzODFF
MkI5QUM3MDlEMzI3MUIyQTZFMjYxMTFGRDM2MEJDQ0UxNDAwMzQyMjI2QTEyMzZB
MTlBNTUxMjEwMTgyQUFCOTQ0NERBMzc2RERERTM5M0Q4Njk5M0MyRjlEN0Y5Q0M2
QkFBMzlGQzQwQjE5MzgwMzUwMjc5MEExQUUyRTVBQjVEM0QxMTM2MUVEMDc5RTAx
QkU1ODlCQ0FGQ0ZERTMzQjQ0QTk1RTdFRUI2N0RCNDNDMUJBRDZGRTk4NEIwOTgw
QzAyQTAzNjExRjAwQTk2NDBGQUM4RDVDMUU2RDNDRjVERjExRDcyMEUyOURGRTdB
RDA4MERFRDRBNUEyMzVDQTIzRUY4Mjk5Njg0NjdDNEZEQzk3MENDOTdFNjMzRjk2
MzJEQ0I1MjRBNzA5QkI5QkI1QUJCNDUyRDQxOUNFRTZFRTcxQzNBOEY1RkMzN0Ux
Qjg0QzEwNEI3MDBEOURBNTIyRTBGNDU3MzdEMzlFNzk2NEIzQTA4OUMxMDZEODk0
M0VDQTIyNzU0MTIzQTkzNzZGNTdCMkQ5MUY1QTFFRkZCRDc0OEMyMTlCNkY1RjIy
QkQ4MEQ1NEE4Q0M0OTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAopJyUfcyi2MKgwIvz5DmubE9WUOSlIgKGT/PhVxGEzgeK5rHCdMn
GypuJhEf02C8zhQANCImoSNqGaVRIQGCqrlETaN23d45PYaZPC+df5zGuqOfxAsZ
OANQJ5Chri5atdPRE2HtB54Bvlibyvz94ztEqV5+62fbQ8G61v6YSwmAwCoDYR8A
qWQPrI1cHm089d8R1yDinf560IDe1KWiNcoj74KZaEZ8T9yXDMl+Yz+WMty1JKcJ
u5u1q7RS1BnO5u5xw6j1/DfhuEwQS3ANnaUi4PRXN9OeeWSzoInBBtiUPsoidUEj
qTdvV7LZH1oe/710jCGbb18ivYDVSozEkQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGX+Bn7zZrkjxgzqbxFfezliWftmMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzgzOTJlMzIzODJlMzEzOTMy
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb0c
wDANBgkqhkiG9w0BAQsFAAOCAQEAKa4YK7Bp538vD6/G9aRmDB3vWyuDFUjYrUy7
jbapcnJUtYZFNfazZCAYiPpJNgPubJ+ZN/RXYr3F2JPPo2athMpzpx0iIWCKrUnQ
KqKdOHPXzvfIYg1QzRSnJ0XzMvNI3Bhysllev7J/XGXAR8BqLP/hSaLdIXzxikEX
6HeOrAyxWn9E5TgEFKbgoHyPT/2mLntXbgNGmNQGK8NhDOwdcZ4LbdOsNa+Uv5Du
NzvmTeJ+0wqvTDP4k6P2tlTna/UFEvEm61idEUnt5CQkjhStXcR4y8rvgZfnbCwS
zFf/40zudDi7pYHtfemoD1ZB/UCcBc8a85jDomQNSFbfceCXPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org