Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e39302e34382e302f32302d3234203d3e203238333433.roa
File:                     3138392e39302e34382e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          1uiXijv94Js2jdaZWCt/QADbQYLpqDiqA7KZsnyW89Y=
Subject key identifier:   63:D7:14:B4:63:49:3F:4E:AE:AE:7D:7C:A3:C5:0E:63:C0:61:3A:24
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1AE716EFC0A11A9FF5FCBA4B8D82AA92894A2DD5
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e39302e34382e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        189.90.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:16:ef:c0:a1:1a:9f:f5:fc:ba:4b:8d:82:aa:92:89:4a:2d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:56:80:bb:37:2d:c4:17:d7:e5:bb:53:ae:
                    39:55:e4:b5:b9:3b:5b:47:8d:9d:cc:6b:c3:7e:d2:
                    59:1c:0b:71:1a:e1:ee:33:49:6d:74:a9:18:b9:96:
                    54:e9:e5:df:f8:dd:81:06:cf:3c:b1:a0:bf:67:00:
                    42:ca:ad:82:f1:81:e9:4d:9a:98:4c:75:a9:7f:dc:
                    2d:f7:9b:6b:36:cc:9b:87:27:c9:d0:3b:3b:56:95:
                    22:67:05:7c:58:f7:95:7d:3c:61:c8:57:b6:3d:95:
                    b8:89:6a:a6:5b:c2:d8:d6:fe:8f:eb:f0:b0:59:40:
                    0f:a6:00:2d:eb:05:15:d3:86:35:db:bb:56:c1:2f:
                    26:f2:16:4c:0d:bc:b1:ac:a9:84:57:b6:03:01:ce:
                    d0:0b:74:11:e8:38:53:60:98:c0:b6:ef:38:e1:cf:
                    39:41:e1:9f:b2:29:dc:92:08:e0:39:d0:9b:e2:45:
                    37:8f:68:26:dd:f2:78:78:aa:e2:14:5b:c6:0a:2b:
                    a1:c1:7e:16:fc:ee:03:cd:77:b5:18:9f:8b:31:78:
                    2c:71:d2:c6:bb:60:ce:c7:e6:96:ce:5c:f1:c0:19:
                    7c:0e:5f:ac:13:92:3c:71:f3:1d:f9:d8:b1:2a:99:
                    8a:3a:05:14:89:7b:f5:64:fc:77:bd:97:72:61:8d:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:14:B4:63:49:3F:4E:AE:AE:7D:7C:A3:C5:0E:63:C0:61:3A:24
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3138392e39302e34382e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:18:eb:8e:61:19:2a:09:b0:3e:96:ee:d4:ad:49:e4:19:
         17:7f:6e:08:c3:eb:37:50:b2:b9:dd:cf:8a:37:cb:93:d8:30:
         25:ff:90:f0:26:88:6e:21:be:57:04:aa:e1:52:1d:7f:02:cd:
         fe:d0:0a:61:4b:a1:52:0b:5a:a2:22:c5:e4:8a:ba:ff:0f:fd:
         b0:38:10:a5:a8:05:e9:80:06:ca:83:a1:fc:4a:30:57:2a:89:
         95:11:b3:bc:9a:5c:f4:4d:e7:91:59:e5:48:e2:ac:f3:60:e1:
         08:0d:ff:db:8c:2a:7f:c9:3a:6e:0e:54:98:f7:d2:86:4a:32:
         59:32:60:10:f1:39:99:be:a8:44:8a:52:d0:25:36:4b:03:20:
         4e:cc:4a:58:78:15:97:6e:43:e9:27:8f:23:9a:b7:49:c9:26:
         c1:82:84:71:12:6a:38:45:b2:ad:9d:12:49:8d:62:80:78:3a:
         69:21:ed:08:6d:00:33:87:22:35:a8:0e:10:41:fd:d1:63:b9:
         77:d9:9c:f3:6b:ef:ee:60:a6:17:56:69:86:8b:02:78:7b:2e:
         15:a6:50:fd:89:ef:5e:cd:25:8d:81:8e:ca:08:83:67:aa:a1:
         e2:c5:90:ae:92:14:e2:8e:53:40:44:0f:2a:63:51:80:d0:2f:
         19:cf:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org