Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a633a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a633a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          ZhwAPDzHtXG2rKh+RhLPSGm+UWlAfuvorUsp4st6VOI=
Subject key identifier:   FE:83:E7:AD:02:DE:66:74:C3:D1:AC:81:C2:89:6E:2F:1E:65:66:89
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       18719BE73FEC29D2CD7F848D4E9581074A0958FC
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a633a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:20 +0000
ROA not before:           Thu 28 Apr 2022 13:24:20 +0000
ROA not after:            Thu 27 Apr 2023 13:29:20 +0000
asID:                     28343
IP address blocks:        2804:c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:9b:e7:3f:ec:29:d2:cd:7f:84:8d:4e:95:81:07:4a:09:58:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:20 2022 GMT
            Not After : Apr 27 13:29:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:72:96:90:d8:36:2f:99:96:ed:02:1b:b0:
                    98:1b:6e:81:0c:43:f6:e0:68:6e:a6:72:78:08:1a:
                    45:47:fc:7b:35:73:37:f5:a7:b7:6b:84:7e:f7:67:
                    36:8c:1b:83:2f:57:79:d8:04:b2:4f:5b:3b:1c:dd:
                    ba:dd:6b:fc:53:54:88:76:65:14:b3:76:46:83:34:
                    8f:bf:bc:c5:41:24:28:ce:f9:12:08:0b:49:cc:82:
                    7d:6c:72:05:1d:55:27:03:3b:7e:8d:c0:36:cb:90:
                    94:af:a7:89:e3:29:a7:d4:f7:9f:5f:c7:85:ee:ef:
                    61:04:c5:be:c8:ee:05:82:22:1a:a2:bb:cb:bb:7c:
                    f5:46:a7:95:de:80:fa:32:57:d4:fb:e3:da:f4:b7:
                    5f:b0:2e:71:4f:7d:0c:c2:6e:e7:17:7b:70:19:b6:
                    81:30:bc:0c:fd:a0:42:0e:a8:97:37:cc:31:25:c7:
                    09:4f:28:2c:7d:0d:98:4e:1e:07:b8:6e:be:1d:bb:
                    38:11:d0:a4:14:22:50:14:30:ff:fa:b8:43:bb:48:
                    3b:2f:9e:ef:5c:e3:75:d3:6b:0c:2c:75:c0:1e:a1:
                    b4:e2:0c:6f:c6:7d:ba:88:0a:84:ab:e1:3a:67:aa:
                    eb:4c:31:12:4a:96:25:d4:a1:a8:dd:e6:1e:36:97:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:E7:AD:02:DE:66:74:C3:D1:AC:81:C2:89:6E:2F:1E:65:66:89
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a633a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:81:dd:4e:e6:c5:78:e9:db:3b:5e:91:e3:c1:f7:b7:04:f7:
         ee:db:a5:00:38:c2:5b:18:c9:a0:0a:44:bf:2e:fe:98:6a:02:
         6f:1c:d8:b0:9f:6a:5d:ce:ec:75:c1:f1:b0:49:ae:0d:54:e5:
         b2:c5:4d:36:63:51:a5:91:d9:28:55:6d:41:d1:57:5d:2d:ac:
         f2:1a:2d:96:18:9e:dc:84:7f:cf:15:17:13:29:65:38:75:8d:
         b5:e8:53:9e:f3:f9:84:0d:be:fc:e0:9a:54:0e:cd:8f:be:2b:
         0f:da:7b:15:e0:60:8a:71:04:ad:68:96:b7:3c:89:dc:ef:2c:
         75:51:1d:1d:2d:db:e8:45:97:cb:33:30:d2:fd:6a:53:89:40:
         34:50:8c:3c:37:14:d8:ac:b3:26:ae:2d:11:71:17:97:c9:a5:
         27:1c:56:4e:e9:5f:25:2a:e8:33:51:91:bc:d1:b2:dd:87:6b:
         7c:ec:4f:42:77:8b:3b:b4:89:a0:dd:8c:bc:97:ed:f2:e5:6f:
         6e:0b:d0:36:8c:dd:3f:d8:24:de:e1:41:a8:24:e2:f3:c8:86:
         72:3a:1d:4e:98:35:35:01:59:60:c7:45:df:51:56:81:52:49:
         8c:33:83:17:d9:6a:2d:7e:4f:01:4a:d1:50:e9:f9:35:99:19:
         6f:b6:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org