Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32322d3232203d3e203238313238.roa
File:                     3138372e31392e35362e302f32322d3232203d3e203238313238.roa (raw, json)
Hash identifier:          NgJocA/lAAyjy77IeIIhLjZrpk4TUyzWDaglnPD7q6U=
Subject key identifier:   50:C2:3D:75:EC:FE:E3:DB:91:FB:C1:7D:83:F2:53:7D:66:83:85:13
Certificate issuer:       /CN=A6BBCE5F119AD79C647870759BE6F5AB38A98F26
Certificate serial:       1AD9ACC0A19ABCAB932636ED98E22431BA81142C
Authority key identifier: A6:BB:CE:5F:11:9A:D7:9C:64:78:70:75:9B:E6:F5:AB:38:A9:8F:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6BBCE5F119AD79C647870759BE6F5AB38A98F26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32322d3232203d3e203238313238.roa
Signing time:             Thu 11 Aug 2022 20:06:08 +0000
ROA not before:           Thu 11 Aug 2022 20:01:08 +0000
ROA not after:            Thu 10 Aug 2023 20:06:08 +0000
asID:                     28128
IP address blocks:        187.19.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d9:ac:c0:a1:9a:bc:ab:93:26:36:ed:98:e2:24:31:ba:81:14:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6BBCE5F119AD79C647870759BE6F5AB38A98F26
        Validity
            Not Before: Aug 11 20:01:08 2022 GMT
            Not After : Aug 10 20:06:08 2023 GMT
        Subject: CN=50C23D75ECFEE3DB91FBC17D83F2537D66838513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:8a:3e:92:41:c8:e4:df:90:86:03:1a:e6:
                    73:d5:5f:a5:9e:b2:fc:88:00:89:fa:3c:4e:6a:50:
                    1e:44:ae:3b:6f:41:8c:5a:44:f8:58:fc:dd:30:d1:
                    c9:2d:64:66:df:8b:5d:50:12:2d:18:1d:86:15:20:
                    17:06:2b:fb:a1:0c:ff:b6:14:40:0d:04:15:c0:6e:
                    c9:ba:e0:27:77:93:69:41:a5:17:2b:dc:8c:4e:b3:
                    02:c7:4b:86:71:4d:58:21:22:a1:4d:26:dd:f4:fd:
                    38:74:cb:9b:5e:52:6b:e6:7d:37:f4:08:33:61:f7:
                    4d:e5:c4:42:a5:c0:41:97:36:57:c8:ea:b7:62:95:
                    c9:46:e9:f2:a0:3d:50:40:a8:3a:54:9e:3b:eb:f5:
                    6c:83:c5:58:c1:68:9a:cc:40:97:41:a5:a8:c0:cf:
                    0d:c4:6c:09:5d:d0:20:2d:c8:98:07:d8:c5:0f:16:
                    45:b6:ea:d1:d8:08:45:59:5e:c9:fa:29:21:9a:85:
                    90:39:3e:5a:b2:06:e6:71:73:82:08:66:d9:c3:73:
                    d9:d5:95:01:21:95:60:c9:8a:96:c7:e8:d5:6a:a3:
                    60:98:cf:7b:60:c5:c1:15:17:5a:12:ee:9e:f4:67:
                    37:10:8b:18:7b:7a:18:52:4a:dc:83:c9:bd:fa:ba:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:3D:75:EC:FE:E3:DB:91:FB:C1:7D:83:F2:53:7D:66:83:85:13
            X509v3 Authority Key Identifier:
                keyid:A6:BB:CE:5F:11:9A:D7:9C:64:78:70:75:9B:E6:F5:AB:38:A9:8F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/A6BBCE5F119AD79C647870759BE6F5AB38A98F26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6BBCE5F119AD79C647870759BE6F5AB38A98F26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32322d3232203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:45:45:31:20:30:43:4a:04:0a:a5:e4:e0:24:76:8d:f6:
         ed:94:2d:f5:92:cf:53:49:3a:00:6d:7e:61:40:bc:9c:dd:f9:
         dd:ad:6b:57:a5:09:ec:f3:c7:13:07:ae:23:9b:8d:a1:17:ea:
         17:85:ab:62:c3:5d:26:5f:3c:76:9b:12:b0:f8:76:6f:e1:06:
         b8:f7:27:6f:39:7f:bb:3d:31:74:ef:69:e2:7f:24:3e:ac:49:
         70:a6:fd:af:f8:4a:72:0c:6a:8b:d4:13:2b:55:94:ff:73:3a:
         28:1b:80:63:3b:42:62:15:03:87:a1:53:9b:59:99:c6:5b:3b:
         c3:b5:56:af:b0:56:88:00:65:9e:1c:22:13:9d:da:22:87:4a:
         44:4f:ee:3c:28:c8:45:4e:81:de:ab:6f:48:60:04:c3:b1:e3:
         3d:56:a0:f1:60:87:2e:d6:43:81:b6:2d:48:6a:a9:38:99:bb:
         56:95:d7:d6:21:6c:85:17:38:9d:5a:99:b3:f3:ae:42:a6:ff:
         97:ca:54:5c:36:f0:d7:db:c5:d2:db:79:07:37:bd:74:7b:d8:
         cc:47:68:64:85:91:ba:4b:50:c5:f1:62:15:9f:0e:db:c0:3f:
         b2:bc:46:15:0a:94:fc:41:95:06:ca:64:e2:f9:9b:f1:ad:2f:
         db:d2:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org