Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e362e38382e302f32312d3234203d3e203238333433.roa
File:                     3139312e362e38382e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          +RyykPUEJoVT9WodqnPNQFsJEpG6kT8e8EYrV40dlrg=
Subject key identifier:   19:F6:C8:88:D4:9F:15:43:68:5B:8D:7D:18:99:D7:B4:EF:73:8D:59
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       182524F9A520492D9E239B4D52A062D65F084440
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e362e38382e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:22 +0000
ROA not before:           Thu 28 Apr 2022 13:24:22 +0000
ROA not after:            Thu 27 Apr 2023 13:29:22 +0000
asID:                     28343
IP address blocks:        191.6.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:25:24:f9:a5:20:49:2d:9e:23:9b:4d:52:a0:62:d6:5f:08:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:22 2022 GMT
            Not After : Apr 27 13:29:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:9e:25:f4:a3:9f:bd:c2:c2:8c:25:4e:0e:
                    ba:e1:90:63:4d:11:47:7d:cb:19:c4:fe:c9:16:0a:
                    22:e1:cd:3c:0d:d0:2f:33:88:65:32:6f:02:aa:0d:
                    95:34:43:2f:16:b0:ee:68:c7:61:bf:87:91:d7:46:
                    59:44:09:92:01:3d:97:6b:93:f3:c6:14:b6:6d:36:
                    53:55:3e:8b:af:30:18:4d:f7:fb:fb:5f:e2:a1:37:
                    b9:7d:f3:09:75:8b:cd:92:6a:c3:75:42:43:48:5d:
                    54:14:68:db:96:42:38:ef:13:c4:ba:d2:7d:5c:04:
                    70:1f:a9:3b:72:e0:56:96:90:30:f9:4d:19:fc:04:
                    4c:54:5b:d6:55:28:59:25:5b:ef:bd:01:07:f3:55:
                    91:09:19:99:a5:ba:ec:f1:91:c5:a6:e1:52:e7:63:
                    a2:9d:33:f9:7e:3a:df:c5:f7:70:a0:f7:0e:b0:c1:
                    60:e4:43:b6:9f:78:ac:75:a7:b4:64:1d:66:04:f5:
                    2c:58:f7:76:71:20:1c:d4:92:c5:d1:7e:3d:b1:a2:
                    61:15:c9:45:bf:7c:84:35:56:6e:b6:e5:55:91:cc:
                    74:a4:ba:96:f6:b3:1b:fe:a7:2a:d3:ad:7f:b4:53:
                    be:7b:4d:84:56:17:e2:81:09:cf:c4:f5:cc:12:7e:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:C8:88:D4:9F:15:43:68:5B:8D:7D:18:99:D7:B4:EF:73:8D:59
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3139312e362e38382e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:ad:b0:e5:33:a8:23:c7:f5:8c:36:54:6c:1b:25:d5:44:
         7c:d9:39:27:95:1a:23:aa:7d:ef:1f:8c:0b:83:55:d7:0d:5e:
         cd:33:7d:e4:25:27:26:a3:93:c7:f4:bf:2a:49:2e:f9:1e:c3:
         30:c5:e4:14:7f:ee:fb:e1:72:0b:01:b4:1f:d2:14:df:45:f5:
         4e:11:bb:95:22:6b:17:f6:5d:99:b5:38:61:fb:2e:23:62:7d:
         c5:f1:54:0b:f1:50:68:0f:02:d4:0b:44:a5:39:20:30:94:6a:
         fa:70:af:d5:c6:ea:24:77:cf:d3:73:4c:8e:2c:42:a6:a7:8c:
         f2:d7:6d:5e:86:41:dc:a3:77:93:df:5f:8d:42:a5:c6:50:be:
         f5:7c:ab:6f:70:f2:69:29:11:a9:52:84:84:31:bd:f7:12:9f:
         d1:b7:55:18:44:fb:34:ee:72:2f:00:19:05:7c:b8:17:84:b4:
         bc:c2:67:fc:5d:9c:2d:d0:f2:6e:97:c6:c2:c3:1d:b5:d4:cb:
         76:8f:3a:d0:43:ce:fe:41:c4:51:97:4c:ba:1e:7f:34:d1:2e:
         0c:13:fb:25:29:fc:c2:9c:3b:d0:aa:ec:7b:c3:02:00:27:23:
         bd:19:61:75:9a:0b:06:d4:5a:ed:31:9e:07:eb:c6:83:b1:51:
         f5:54:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org