Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa
File:                     3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          04Fr/iHZIX7shCVHxuq4CsuaLoqsNBC/yDG4WRd05tk=
Subject key identifier:   4C:DB:47:9D:05:51:DD:0C:2A:3B:CE:78:87:25:06:BE:C0:F3:06:54
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       246E26CFC32FF7FB277709CE0B1EFDB1B74EF528
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:24 +0000
ROA not before:           Thu 28 Apr 2022 13:24:24 +0000
ROA not after:            Thu 27 Apr 2023 13:29:24 +0000
asID:                     28343
IP address blocks:        201.131.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6e:26:cf:c3:2f:f7:fb:27:77:09:ce:0b:1e:fd:b1:b7:4e:f5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:24 2022 GMT
            Not After : Apr 27 13:29:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:e0:f5:9a:c7:88:43:4a:f7:1d:e3:2f:0e:
                    d4:ee:33:30:c8:58:66:46:cb:47:90:d0:a2:a0:29:
                    40:06:1c:12:5f:f0:a1:f6:b1:88:15:76:38:a1:f4:
                    84:61:21:d4:f1:bf:f7:f3:01:b1:df:e7:a9:96:5b:
                    ef:9f:50:23:27:8b:48:98:52:32:97:e3:af:5e:81:
                    ae:14:34:fd:86:45:62:04:6f:ce:aa:39:69:26:35:
                    1d:8f:99:44:72:63:96:f6:3c:9b:60:b6:f3:a0:f8:
                    e6:92:7a:f2:54:99:a2:c7:6c:a9:9e:b5:ab:63:98:
                    e3:99:4b:1f:c1:e2:43:7f:66:f5:dc:ee:8c:43:15:
                    19:85:35:78:b6:96:c8:42:a4:97:c1:b4:ba:89:26:
                    7c:8b:56:dd:48:3b:4c:86:ae:6e:b8:40:2e:ef:fa:
                    5a:97:27:dc:91:b7:8b:5a:ee:59:bb:db:d4:3b:5f:
                    11:9c:c4:30:a6:2c:e7:df:67:bb:4c:10:f7:60:97:
                    f4:9f:19:9e:53:69:15:ea:e3:29:e3:0b:37:a5:ab:
                    a4:92:ba:60:2a:15:a3:0a:61:3f:2a:45:1f:2c:13:
                    47:ba:df:16:2c:5a:57:9f:76:15:91:63:01:70:8e:
                    fe:86:1f:be:06:1e:06:49:54:ed:23:af:86:65:fd:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:47:9D:05:51:DD:0C:2A:3B:CE:78:87:25:06:BE:C0:F3:06:54
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3133312e3133362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:d9:9a:31:ec:a7:10:3b:56:26:b7:c9:9d:b6:c5:03:b5:
         62:85:c9:6a:f3:e0:1d:07:bd:34:76:22:ab:3e:b9:1f:bc:6f:
         d4:ba:0c:98:a0:0e:3d:93:c5:06:08:a5:ec:23:06:71:dc:e2:
         0c:8f:a4:6a:fd:9a:66:87:30:33:a1:55:90:f9:c9:f6:21:b6:
         d2:6b:63:e6:37:af:85:f8:2b:52:b7:a9:08:86:a3:2c:30:0e:
         54:88:07:97:07:b9:b8:21:40:1c:a1:50:2f:32:15:03:75:79:
         60:d8:55:41:d2:c7:c3:be:be:fe:3b:c2:8c:a4:6b:f6:9a:d3:
         ea:46:3c:84:cc:09:c1:b3:20:6c:e1:94:c5:4e:d1:17:b1:fe:
         5f:7c:6a:62:3b:39:85:b0:59:6e:30:9a:da:73:ce:85:88:bb:
         a3:f4:be:e5:0c:65:6b:84:51:a3:6f:33:f4:42:a4:84:cf:62:
         e5:19:e9:14:5b:e2:fd:2c:ad:a9:21:f2:91:a4:b9:87:a6:b4:
         70:3e:56:e3:c5:e3:28:50:de:ce:63:cf:1e:da:7d:82:30:8a:
         0e:1c:20:54:b0:d3:2b:43:43:47:ca:24:83:e6:6d:eb:4b:ae:
         ce:55:e0:66:63:c5:1e:3f:ea:da:d9:ec:7f:fd:09:7e:38:7d:
         2a:f7:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org