Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e3235332e39362e302f31392d3234203d3e203238333433.roa
File:                     3139312e3235332e39362e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          OSMGLvM3NrCQTgiRcoZQrXsslIt/KRzfHVUmrpy68mk=
Subject key identifier:   0D:89:D6:4F:54:4E:D6:26:9D:02:84:64:0D:F6:7C:23:8A:4D:F9:E5
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       21CCD8A5017C285E18EF56D6D68165D7F74A1CE9
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e3235332e39362e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        191.253.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cc:d8:a5:01:7c:28:5e:18:ef:56:d6:d6:81:65:d7:f7:4a:1c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject: CN=3082010A0282010100B76A319870FF0F030A36A883816B46FC9BFCEEBB525DF69B52CC6FE29AB2094F4E03C8878AA401EF862D4B8CF5D421ED7797DA9D7ACD317B0DFD64655A1705925102A3F27D87CBAB071E2F5CEC28544A33CFC058630C2F0BBBAB2992C876DA97CB258CC11BE790D0DCF5F85862DC89C430C7B66044B68D18E778E956DF67CB18E32FCB966B66221F901E63AF7A8FDC213572C1A81A42816D52291395FE9962F987102B77E1DFAF4FE6509D56488F8BAE7D41CA39D60D179A8BB3DF6439033561B7F1D33DF9EAAA7AD35F63331F048BBBD913854BE18C3986321673E9DF7942D475570F3D9FC3CEC79E432CC1DB2CC4416BFDB337FC934B6CF45167D2589742270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:31:98:70:ff:0f:03:0a:36:a8:83:81:6b:
                    46:fc:9b:fc:ee:bb:52:5d:f6:9b:52:cc:6f:e2:9a:
                    b2:09:4f:4e:03:c8:87:8a:a4:01:ef:86:2d:4b:8c:
                    f5:d4:21:ed:77:97:da:9d:7a:cd:31:7b:0d:fd:64:
                    65:5a:17:05:92:51:02:a3:f2:7d:87:cb:ab:07:1e:
                    2f:5c:ec:28:54:4a:33:cf:c0:58:63:0c:2f:0b:bb:
                    ab:29:92:c8:76:da:97:cb:25:8c:c1:1b:e7:90:d0:
                    dc:f5:f8:58:62:dc:89:c4:30:c7:b6:60:44:b6:8d:
                    18:e7:78:e9:56:df:67:cb:18:e3:2f:cb:96:6b:66:
                    22:1f:90:1e:63:af:7a:8f:dc:21:35:72:c1:a8:1a:
                    42:81:6d:52:29:13:95:fe:99:62:f9:87:10:2b:77:
                    e1:df:af:4f:e6:50:9d:56:48:8f:8b:ae:7d:41:ca:
                    39:d6:0d:17:9a:8b:b3:df:64:39:03:35:61:b7:f1:
                    d3:3d:f9:ea:aa:7a:d3:5f:63:33:1f:04:8b:bb:d9:
                    13:85:4b:e1:8c:39:86:32:16:73:e9:df:79:42:d4:
                    75:57:0f:3d:9f:c3:ce:c7:9e:43:2c:c1:db:2c:c4:
                    41:6b:fd:b3:37:fc:93:4b:6c:f4:51:67:d2:58:97:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:D6:4F:54:4E:D6:26:9D:02:84:64:0D:F6:7C:23:8A:4D:F9:E5
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e3235332e39362e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:5e:77:31:e4:21:74:2b:a2:c4:0f:96:0b:45:c3:24:fd:e2:
         00:60:92:11:50:24:06:a4:21:68:53:80:49:62:52:77:21:37:
         9d:19:29:d0:72:8d:8d:e8:6c:7c:39:cb:81:d3:b8:b9:b5:d6:
         79:d0:1c:28:c6:3d:82:f0:7a:ec:24:ac:c3:62:52:6b:f2:13:
         dc:cf:53:4e:ed:b0:dc:fd:0a:a2:b6:b7:c0:fe:c1:87:d4:f7:
         1c:ca:4e:b2:3c:54:93:6a:ce:9d:b2:41:1f:ae:41:8c:8e:42:
         fa:44:25:f2:15:98:e0:27:da:fd:8c:2b:bd:8b:dc:0c:5d:8b:
         ef:87:5f:10:b3:d3:74:83:63:89:c9:00:90:12:33:3b:20:57:
         43:69:ec:37:04:fe:20:f8:4f:04:e4:f4:5a:4e:32:1b:24:20:
         4e:68:18:2b:4c:a2:36:b9:38:b1:85:f9:a0:90:45:a2:e8:e3:
         68:81:f0:5b:bc:5a:b3:90:c6:68:95:b1:56:ef:3f:11:69:92:
         cb:b7:2e:ac:c6:af:9e:91:69:30:df:87:43:e2:4e:ea:e0:b6:
         8f:ea:57:55:3a:7b:dd:64:65:2a:dc:9b:72:b5:2a:09:2a:73:
         4d:a9:a5:ca:e1:35:24:19:ce:45:85:22:13:50:fa:9d:0c:73:
         1f:80:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org