Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa
File:                     3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          VXyay/FqBAOs0BTPjU/m16kKP8c0NFm+75RmWQC9jGc=
Subject key identifier:   81:C0:21:82:A6:C6:23:4B:B5:92:15:29:F5:1B:FD:7F:32:FB:D0:40
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       531FC5EC9063CBBC4D9D02C5CE8E1E878BE0EE55
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 01:00:08 +0000
ROA not before:           Thu 25 Jan 2024 00:55:08 +0000
ROA not after:            Thu 23 Jan 2025 01:00:08 +0000
asID:                     266611
IP address blocks:        128.201.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1f:c5:ec:90:63:cb:bc:4d:9d:02:c5:ce:8e:1e:87:8b:e0:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:55:08 2024 GMT
            Not After : Jan 23 01:00:08 2025 GMT
        Subject: CN=81C02182A6C6234BB5921529F51BFD7F32FBD040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fa:64:41:bf:3a:1b:44:66:f2:1d:4f:eb:63:
                    d8:d7:58:ad:be:cd:d0:38:e6:d1:2c:fd:5e:24:aa:
                    02:53:18:e1:2e:38:e8:13:39:cd:c4:37:81:f8:78:
                    2c:ec:c2:59:bb:2e:58:ce:4a:33:bc:67:23:ba:a7:
                    21:b3:96:0c:3d:cf:2c:3f:c1:ca:38:39:3f:c4:b7:
                    4d:24:d2:53:3d:97:fd:d7:98:f3:4e:4c:c4:bc:b7:
                    c5:a2:1c:10:03:a7:8c:69:93:b3:a0:8d:36:c6:98:
                    c1:c9:1b:1f:cc:e5:fe:42:86:44:c8:d3:57:41:61:
                    17:48:76:a8:aa:0c:85:ff:9c:ee:dc:1d:83:08:4a:
                    f1:ba:5a:04:9d:1f:1d:c1:9c:8b:8d:ad:cc:3f:42:
                    ac:93:b3:f2:aa:c0:0e:e5:5a:99:aa:19:a3:c5:af:
                    60:a9:96:cf:51:4d:4c:07:5b:43:cc:0d:40:a6:73:
                    f0:33:d1:25:07:56:ad:6d:4e:7f:8e:71:a1:1d:b6:
                    ab:7c:c6:dc:9b:93:a4:14:0a:17:96:d9:c1:28:03:
                    77:65:17:8d:0b:0e:f6:ae:e6:53:c0:58:97:06:94:
                    1e:8c:d1:16:af:85:8a:fa:f6:1f:72:17:48:98:ac:
                    64:1b:6e:9a:be:67:82:d3:ea:f7:e8:68:ce:e8:96:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C0:21:82:A6:C6:23:4B:B5:92:15:29:F5:1B:FD:7F:32:FB:D0:40
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:fe:f6:09:ff:63:f2:0a:e4:ae:e5:a2:b2:8b:e7:7a:99:6e:
         10:39:ab:35:ba:7e:4e:d9:28:e1:07:e8:bb:65:e6:ab:c7:06:
         03:78:17:88:53:76:4d:d1:64:90:3c:5e:c8:80:d4:bb:fb:38:
         b6:fc:23:fb:20:56:3d:f4:20:42:ca:93:5d:a1:ba:86:e9:0c:
         26:c8:8f:3a:b6:82:e5:9a:f5:18:47:32:92:84:0d:02:9d:21:
         35:35:bb:32:ad:a3:c5:d0:0d:0f:52:2b:1a:dd:1f:c6:31:88:
         a3:02:6d:7d:ec:31:4d:ca:d5:38:28:98:4a:dc:38:11:45:ed:
         01:5f:16:ed:5a:38:85:c1:f8:f8:06:87:97:1c:15:99:a7:b4:
         aa:8d:ee:75:91:03:ec:f6:5d:37:ba:82:fb:88:d4:91:6e:72:
         68:32:b7:45:75:50:87:d3:28:78:2f:07:48:61:49:5f:5a:94:
         1c:1e:69:11:a7:97:8b:4f:f6:a4:d9:3d:d3:48:98:1e:3a:41:
         84:de:a6:3d:9d:64:af:9f:dc:66:52:10:04:18:7f:cb:2b:36:
         a3:33:33:a4:6b:99:b6:e6:5c:4e:cb:25:a1:1f:91:9f:da:bd:
         1e:d4:cc:f9:18:19:4e:ea:94:a2:d9:4f:58:9c:79:86:49:bf:
         88:4a:b4:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUx/F7JBjy7xNnQLFzo4eh4vg7lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4RTNERjlEOTY3MDMyQTU2MkU4MDREMkU3ODFEQjFE
QzQ1NEE3OTAeFw0yNDAxMjUwMDU1MDhaFw0yNTAxMjMwMTAwMDhaMDMxMTAvBgNV
BAMTKDgxQzAyMTgyQTZDNjIzNEJCNTkyMTUyOUY1MUJGRDdGMzJGQkQwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+mRBvzobRGbyHU/rY9jXWK2+
zdA45tEs/V4kqgJTGOEuOOgTOc3EN4H4eCzswlm7LljOSjO8ZyO6pyGzlgw9zyw/
wco4OT/Et00k0lM9l/3XmPNOTMS8t8WiHBADp4xpk7OgjTbGmMHJGx/M5f5ChkTI
01dBYRdIdqiqDIX/nO7cHYMISvG6WgSdHx3BnIuNrcw/QqyTs/KqwA7lWpmqGaPF
r2Cpls9RTUwHW0PMDUCmc/Az0SUHVq1tTn+OcaEdtqt8xtybk6QUCheW2cEoA3dl
F40LDvau5lPAWJcGlB6M0RavhYr69h9yF0iYrGQbbpq+Z4LT6vfoaM7olhg/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgcAhgqbGI0u1khUp9Rv9fzL70EAwHwYDVR0j
BBgwFoAUEo49+dlnAypWLoBNLngdsdxFSnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZ
SmUvMC8xMjhFM0RGOUQ5NjcwMzJBNTYyRTgwNEQyRTc4MURCMURDNDU0QTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyOEUzREY5RDk2NzAzMkE1
NjJFODA0RDJFNzgxREIxREM0NTRBNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzSmViY0JuS1ZWN0xKV3JFWGdNeWQ1NDRKdm9mSnBFcVA0NThGb1NXWUplLzAv
MzEzMjM4MmUzMjMwMzEyZTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACAyRwwDQYJKoZIhvcNAQELBQADggEBADH+9gn/
Y/IK5K7lorKL53qZbhA5qzW6fk7ZKOEH6Ltl5qvHBgN4F4hTdk3RZJA8XsiA1Lv7
OLb8I/sgVj30IELKk12huobpDCbIjzq2guWa9RhHMpKEDQKdITU1uzKto8XQDQ9S
KxrdH8YxiKMCbX3sMU3K1TgomErcOBFF7QFfFu1aOIXB+PgGh5ccFZmntKqN7nWR
A+z2XTe6gvuI1JFucmgyt0V1UIfTKHgvB0hhSV9alBweaRGnl4tP9qTZPdNImB46
QYTepj2dZK+f3GZSEAQYf8srNqMzM6RrmbbmXE7LJaEfkZ/avR7UzPkYGU7qlKLZ
T1iceYZJv4hKtNM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org