Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa
File:                     3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          eqeJQPjuwbuMqJ+QF68zFM2PZDiC3YGfDt21mXJrJK8=
Subject key identifier:   1F:76:0E:93:F6:FF:65:5C:E6:56:58:AB:27:32:D6:B6:8D:DF:F5:BA
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       08920EE7700E13489D736907C758D9B6BC239270
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 00:59:11 +0000
ROA not before:           Thu 25 Jan 2024 00:54:11 +0000
ROA not after:            Thu 23 Jan 2025 00:59:11 +0000
asID:                     266611
IP address blocks:        128.201.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:0e:e7:70:0e:13:48:9d:73:69:07:c7:58:d9:b6:bc:23:92:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:54:11 2024 GMT
            Not After : Jan 23 00:59:11 2025 GMT
        Subject: CN=1F760E93F6FF655CE65658AB2732D6B68DDFF5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:6b:b3:50:2d:0b:62:f3:ad:99:b1:db:54:
                    3a:2c:6e:7d:83:73:a0:69:ba:fa:58:bf:cc:9b:b9:
                    cd:5e:c9:0a:7f:b9:29:e7:cf:5d:f2:93:ee:92:be:
                    2d:db:28:69:4e:18:c9:83:ff:a0:e2:fe:fa:05:c4:
                    f1:00:bc:52:d7:69:a8:5f:a5:aa:69:49:10:d3:3f:
                    7e:c7:70:17:c9:67:e3:79:af:0f:8f:f8:88:0f:27:
                    68:55:3a:4d:a7:01:46:d4:a2:2b:f0:ab:e6:7c:97:
                    40:9f:cd:25:6e:5f:99:04:f8:5b:24:cb:df:67:b2:
                    84:00:06:1e:72:0f:bc:8e:a5:9e:1f:da:ee:97:5a:
                    f6:62:8a:77:5d:2b:50:60:00:1b:fd:ea:7e:dc:e6:
                    c4:14:52:16:4b:4a:c1:17:c1:47:29:86:84:28:3c:
                    e9:75:ba:6a:1b:70:0e:37:fc:5b:12:08:c1:17:5e:
                    53:b2:4a:34:cc:fb:2e:3d:ac:a1:45:1f:62:8d:54:
                    9e:6f:72:f1:6e:30:a7:a7:c4:33:92:68:59:de:06:
                    81:2b:20:64:33:49:88:09:74:b8:d0:0c:e1:2a:af:
                    9f:15:1e:11:ba:fa:ce:ac:8b:2c:4b:14:da:02:a8:
                    67:5d:ec:b0:8f:77:02:f5:1b:55:1e:d1:74:a3:16:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:76:0E:93:F6:FF:65:5C:E6:56:58:AB:27:32:D6:B6:8D:DF:F5:BA
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:ce:10:4a:d9:ee:ec:38:d1:46:a0:8f:d7:96:b7:f4:3e:
         ca:27:7f:16:cb:60:fb:f2:5d:d1:be:4f:61:d3:59:e9:f6:26:
         6e:a5:f9:25:28:6d:07:55:14:29:7c:0d:c7:a8:00:c6:89:96:
         08:09:3e:38:65:9c:09:37:10:c1:2e:59:f4:03:4e:01:5a:11:
         14:2c:9a:9c:49:8d:eb:7a:ca:13:f7:15:d6:e8:9f:20:71:5c:
         25:15:1d:a0:4a:2c:2f:ba:69:4a:2f:2f:5f:54:0a:7f:49:7e:
         fb:7c:26:79:5e:54:bf:91:20:ff:48:ca:d7:81:7a:b9:8d:3f:
         e2:de:81:d3:1c:8f:6c:7a:0b:ef:77:6c:66:22:9e:c0:e4:d4:
         29:d4:75:3a:a9:48:cf:84:bb:54:6d:24:37:0c:2c:36:90:35:
         8b:77:4f:05:c8:e1:1a:04:28:79:ca:3b:2c:4c:18:f8:5b:87:
         8f:4a:73:f2:83:07:c9:f9:94:68:00:b2:b2:f6:ee:e9:f9:26:
         d2:bf:7f:9f:d8:fb:16:66:a6:d0:97:03:41:4b:9e:02:97:f6:
         69:82:9f:b7:d1:32:98:59:e5:07:2c:a7:5a:4a:81:ef:89:62:
         3c:c1:c2:7f:b5:bd:22:37:c1:d4:a0:74:fe:44:b4:0c:0d:a0:
         37:c7:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org