Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e34352e3139322e302f32302d3234203d3e203238333433.roa
File:                     3138392e34352e3139322e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          1W9E1PLy3wdH8b0IwdfUMqt5U0HksresZJZG9Sevh3c=
Subject key identifier:   CE:C1:14:66:B4:02:17:43:AE:20:F1:72:1D:F8:38:3B:90:5E:91:B8
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       056EF46D75D71AFB9C71AE85DEFFC3D49B553A88
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e34352e3139322e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:16 +0000
ROA not before:           Thu 28 Apr 2022 13:24:16 +0000
ROA not after:            Thu 27 Apr 2023 13:29:16 +0000
asID:                     28343
IP address blocks:        189.45.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6e:f4:6d:75:d7:1a:fb:9c:71:ae:85:de:ff:c3:d4:9b:55:3a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:16 2022 GMT
            Not After : Apr 27 13:29:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:1e:4b:a9:23:dc:20:83:ec:fc:d2:3e:1f:
                    57:dd:6a:dc:81:7e:2a:1a:30:ab:70:ae:2c:de:ca:
                    23:06:9d:90:5d:da:a3:e2:ea:40:61:50:56:e0:4e:
                    af:d8:84:66:e9:e7:5c:9a:09:12:cc:da:fe:f7:6f:
                    08:b6:91:ef:00:eb:85:2b:10:41:d5:e9:fd:16:d5:
                    ee:2c:4f:13:a9:7a:e7:36:d0:9e:6b:0e:cf:4e:ae:
                    6d:ec:36:a3:59:07:57:e8:9d:21:a9:40:4b:86:9c:
                    e4:54:60:6f:34:aa:16:35:18:a1:84:ec:06:75:fb:
                    88:83:48:db:a2:f9:15:a3:26:a0:f1:30:88:b7:ba:
                    85:0c:62:f1:10:39:be:da:df:09:55:57:99:25:ee:
                    8c:0e:11:ed:85:76:de:75:6b:a7:49:a2:9d:37:46:
                    1f:53:1e:5a:ea:fd:d4:bd:d8:46:50:0a:ff:cb:60:
                    56:1a:46:2f:6b:8c:d0:d2:58:d9:64:a5:78:7d:f3:
                    8b:96:1b:f1:e8:d1:f7:da:04:9e:f9:1b:dc:5b:35:
                    c7:92:4d:02:ab:6a:e1:8d:e8:3b:66:e0:f2:a1:c3:
                    17:6f:a1:92:ef:e6:29:a4:00:3e:e3:9b:85:ec:fd:
                    c5:3e:d2:b5:4e:a6:7b:75:ec:d2:3d:35:88:a1:47:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C1:14:66:B4:02:17:43:AE:20:F1:72:1D:F8:38:3B:90:5E:91:B8
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e34352e3139322e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:cd:97:78:7a:be:85:39:e2:da:94:6c:44:62:6a:75:be:45:
         d3:57:4b:a7:66:16:be:5f:1f:e3:53:8c:c7:cf:15:47:b5:71:
         ad:83:ec:3e:28:74:35:26:46:ed:ec:3a:08:f5:70:01:aa:ae:
         11:14:64:f5:bd:88:de:4e:bf:2e:dc:87:9f:ad:d3:b7:35:be:
         4d:4c:e6:f0:ab:8c:d3:0b:04:f3:f5:40:78:27:cc:45:90:32:
         43:fa:34:b3:85:1a:f4:84:16:45:37:00:76:3e:22:9c:9d:20:
         4a:0c:58:6c:ef:f8:54:a8:dc:d2:5e:b6:ea:be:af:e1:a5:5d:
         a9:a3:59:bd:f0:80:71:ca:cd:ff:16:f4:40:56:45:03:f1:bd:
         ea:50:14:fc:27:4a:db:fb:9a:9f:0a:c4:16:ba:99:28:ec:64:
         f4:c7:65:34:0a:34:4d:05:5f:57:c7:0e:f5:4f:72:86:da:74:
         c4:0f:f7:a4:5e:05:ca:c6:7b:ed:ad:dc:f3:5b:cd:17:41:c9:
         d8:1a:9f:08:99:ee:f9:dc:b9:33:61:9e:e7:35:2e:a5:21:0a:
         8f:1a:85:40:80:ee:27:90:fd:a6:d0:b9:35:39:b4:4c:7d:44:
         3f:f5:a6:ff:7e:f4:16:82:31:7b:27:59:c6:89:b6:e2:32:2d:
         1c:e7:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org