Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa
File:                     3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          MuEfZVs3rBBmwvFILIspYGYmrggbq2YKNiOBVqlHCV0=
Subject key identifier:   7E:73:4F:03:97:88:C3:EE:90:E2:EE:8A:2F:83:AD:F8:BE:76:0C:5F
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       5E93213A96FBB5F1B1CF7506B07D2F696CBA5E26
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        201.159.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:93:21:3a:96:fb:b5:f1:b1:cf:75:06:b0:7d:2f:69:6c:ba:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:c6:4b:86:7e:f8:c0:aa:a6:21:44:99:85:
                    a0:b8:92:12:39:40:52:84:01:48:74:f7:bd:a7:3f:
                    df:40:0f:fd:76:54:d3:20:0f:89:b8:f9:1d:fc:05:
                    4f:c5:b0:b9:0b:f1:e8:73:47:ad:4f:48:92:ea:53:
                    c5:83:41:dc:c6:55:b4:73:fe:10:57:88:bd:d7:a3:
                    6f:d5:c8:9b:75:61:db:1b:b4:d9:e9:09:9a:52:dc:
                    78:ab:ff:c6:e8:fd:39:d4:4e:81:bc:22:39:33:0b:
                    be:f8:bd:c3:43:e8:b6:b0:ef:a5:35:4d:06:d0:6d:
                    2b:5e:7d:ea:ac:eb:af:d7:fc:f9:8d:88:c0:f3:57:
                    22:78:59:19:6f:82:f4:cd:08:fd:c6:ed:78:81:2a:
                    9c:38:ef:94:61:25:10:ba:fb:d7:07:93:84:54:80:
                    e6:d8:ed:31:28:c5:f5:67:46:3f:cd:54:0f:28:50:
                    41:68:5b:fd:43:b1:28:b2:72:09:0e:92:dd:34:37:
                    9e:85:20:97:ad:85:31:05:e3:c7:f9:2d:bd:d0:44:
                    39:39:92:b3:b3:a4:c4:a5:88:fc:d6:18:15:d1:4b:
                    96:52:f0:35:0b:74:42:2a:21:57:c3:75:1a:cd:89:
                    b8:23:02:d1:45:c1:17:0a:cc:53:d7:97:34:60:33:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:73:4F:03:97:88:C3:EE:90:E2:EE:8A:2F:83:AD:F8:BE:76:0C:5F
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3230312e3135392e3234382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:8a:69:44:fb:95:72:af:6b:a1:d0:31:f7:12:cc:a0:46:
         b1:7c:a4:e8:ab:1c:5e:af:f7:da:ff:43:fd:b7:c8:6c:e6:92:
         34:c6:d1:a2:12:17:f4:b2:db:dd:72:22:20:eb:08:15:90:79:
         97:a9:42:6b:0d:d3:f2:e9:41:8b:e4:f1:b1:e3:09:35:4c:58:
         c6:72:32:11:be:8a:9c:99:7e:42:16:f4:7c:87:9d:28:9e:55:
         b6:e2:88:8a:83:8d:ff:26:5f:90:28:f9:22:77:00:c5:36:ce:
         7e:37:97:b0:47:85:29:7b:d7:55:b0:80:3c:8a:e7:44:43:ef:
         4e:a8:bd:55:08:50:12:86:c9:62:99:30:fc:f5:a6:77:76:3c:
         b0:95:fc:e6:41:c7:79:7b:be:22:c1:e7:15:8d:21:aa:39:1e:
         f0:7f:a3:65:33:1b:81:4a:c2:ad:11:b7:e4:7c:21:e8:f7:00:
         93:54:ef:e6:bd:fb:cd:48:ee:43:29:54:ad:2d:f5:45:fb:79:
         c8:41:1d:08:a6:df:ba:e2:cc:f1:88:24:27:f7:4e:f5:6b:ae:
         7e:c1:d0:ed:1f:d6:2e:9c:89:98:7b:59:ab:0c:2c:ac:17:a8:
         e5:35:1f:df:ea:21:44:92:b3:66:88:7c:4e:cc:b9:9e:33:3f:
         3f:57:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org