Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa
File:                     3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          VAN/A/D0M3CdZKJcaRuihPj4WLTkO6Pqqt/LisogQus=
Subject key identifier:   67:02:CB:F8:F1:B9:6B:E8:AD:16:5B:6F:2A:4A:F7:3B:98:16:0C:96
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       1E5516D3FAFDA4732220328767CCA5FAE46D477C
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        191.240.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:55:16:d3:fa:fd:a4:73:22:20:32:87:67:cc:a5:fa:e4:6d:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:9b:9c:f0:90:5f:e5:96:e7:d4:13:5a:da:
                    ef:97:55:ef:bd:89:11:30:07:91:8f:f5:5a:20:84:
                    26:e9:cb:ee:c1:34:33:b6:63:36:45:6d:c2:56:37:
                    8d:c1:7a:7b:13:ff:cc:f3:a5:c5:5a:3f:b2:8c:98:
                    8f:dd:3d:f3:96:3e:56:af:cd:5c:ec:2c:c8:0c:7e:
                    57:43:c4:4b:bb:d2:b3:2b:68:24:66:8d:c6:09:0b:
                    7d:3a:06:60:64:bb:c6:fa:bf:41:fe:b6:96:64:1b:
                    3a:7b:25:bc:cb:99:d9:ce:55:a7:f4:e3:db:37:f5:
                    65:f0:a3:ee:ea:04:65:6f:e1:88:6e:fd:cd:f5:dd:
                    5f:8d:85:b1:f4:6c:c4:61:c7:cf:72:2c:ae:17:49:
                    89:80:63:96:30:07:68:eb:d3:c0:c3:b2:0a:e8:ab:
                    c2:06:76:0c:3c:b4:ce:3e:b7:ac:99:c1:be:58:81:
                    ec:a6:c5:ac:c7:dc:9f:76:37:33:8d:77:d8:1e:a8:
                    f1:bf:ad:d6:00:10:ba:1c:40:88:2e:df:60:88:a0:
                    1d:b1:bd:2e:17:0e:fd:9c:0a:21:00:8e:16:f2:49:
                    90:99:d7:19:d1:e8:f7:a7:f5:f1:ea:99:cd:e0:56:
                    f7:da:2b:93:2a:33:92:07:e6:30:45:e9:1a:28:9a:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:CB:F8:F1:B9:6B:E8:AD:16:5B:6F:2A:4A:F7:3B:98:16:0C:96
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:f6:8c:39:60:36:01:de:c6:a6:38:5c:9f:fb:a9:88:9d:
         d7:13:04:0f:c9:a4:f4:b3:e8:ab:c9:98:65:b6:ce:34:c3:35:
         f2:2f:bc:28:d9:0c:9b:81:df:77:60:95:37:49:58:60:cd:46:
         c6:de:d3:52:e1:19:1b:64:c0:5c:4d:13:42:92:16:6f:b5:6d:
         72:8e:e2:18:47:c6:f3:c6:d5:58:40:03:b9:9c:9d:16:d4:b4:
         1b:1a:3e:af:bb:51:7f:17:4b:31:41:dd:cb:31:14:e6:a4:b8:
         2c:37:c9:38:7c:8c:3b:b4:2a:36:89:cf:49:7d:e8:08:66:9d:
         c0:e4:a2:fb:67:33:15:4e:03:fb:52:0e:58:db:23:76:a8:13:
         c1:0a:cc:f5:20:ad:13:da:14:ce:62:d2:b1:c4:38:fd:3a:6e:
         b1:58:2b:f8:bc:79:16:63:6c:1c:86:17:60:1d:28:8a:38:2e:
         09:90:52:1c:9f:65:d9:cc:17:30:46:04:69:c3:5f:12:d1:a1:
         ac:92:6d:04:2d:3a:d6:02:79:b7:ea:17:5a:4b:69:ee:55:cc:
         c6:e4:a2:02:fc:16:d7:67:07:bd:c1:6d:f2:cb:20:63:10:9a:
         78:19:56:a1:a6:9d:34:81:b9:de:01:43:bd:e3:a0:b4:47:bd:
         78:1a:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org