Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3233203d3e20323634353235.roa
File:                     3132382e3230312e3230382e302f32322d3233203d3e20323634353235.roa (raw, json)
Hash identifier:          21nySNuxIfJ0BvnpPiTMrv6sM2VFh7mFsZVvKVo/0Mg=
Subject key identifier:   7A:F6:1D:35:37:7B:30:A6:D9:90:72:1D:4F:64:10:97:C3:E7:2F:FF
Certificate issuer:       /CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
Certificate serial:       6BE889FC169F841C0B5E0E166723B57FFA8FA3CD
Authority key identifier: 0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3233203d3e20323634353235.roa
Signing time:             Mon 22 May 2023 20:42:19 +0000
ROA not before:           Mon 22 May 2023 20:37:19 +0000
ROA not after:            Mon 20 May 2024 20:42:19 +0000
asID:                     264525
IP address blocks:        128.201.208.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e8:89:fc:16:9f:84:1c:0b:5e:0e:16:67:23:b5:7f:fa:8f:a3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
        Validity
            Not Before: May 22 20:37:19 2023 GMT
            Not After : May 20 20:42:19 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:62:06:e7:25:6d:41:9f:0b:9b:c4:ad:95:
                    50:40:81:e9:33:70:de:6f:53:ba:c8:6d:da:0e:44:
                    15:6a:3d:95:78:c9:3e:f5:13:c1:63:53:86:cd:8b:
                    77:92:5d:5e:8b:6c:78:8d:62:74:bb:cb:f1:bc:54:
                    59:4f:bf:06:2c:a7:60:bc:38:88:92:1d:c4:17:2a:
                    dd:51:e2:09:6b:cc:3b:ea:c0:d1:0f:db:ef:1d:a9:
                    db:f5:8d:a9:9b:b4:23:be:fa:8e:49:5d:eb:b7:2f:
                    be:8b:f6:b6:df:57:a2:da:aa:0e:26:b9:a2:5c:1b:
                    18:36:51:95:48:91:f1:33:c1:58:d1:09:04:3f:63:
                    0d:fd:4e:65:25:1b:3c:c3:d8:ce:67:de:e3:06:81:
                    03:87:7e:e3:43:17:e5:8c:d1:43:96:b9:3b:f8:1f:
                    27:58:97:af:20:c7:31:78:4d:1e:cf:1f:49:eb:a7:
                    d9:04:33:97:60:22:20:ed:f3:63:9f:59:ea:e9:48:
                    8f:93:f9:27:a0:a0:74:ae:fc:77:f1:6e:a8:f3:d8:
                    f0:9e:c0:36:30:29:c0:09:d4:09:f5:55:56:78:d5:
                    a9:69:e0:9c:e2:92:84:88:c2:e8:56:9a:38:6a:5b:
                    6e:e1:48:6d:bb:cd:de:56:7e:bc:d9:f1:14:ec:b9:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F6:1D:35:37:7B:30:A6:D9:90:72:1D:4F:64:10:97:C3:E7:2F:FF
            X509v3 Authority Key Identifier:
                keyid:0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3233203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:d9:a8:a5:51:cf:83:51:f5:42:d4:04:bf:51:eb:3d:bb:
         e9:ee:a4:38:3d:09:f2:9e:5c:92:99:a5:80:ba:e7:10:ea:fc:
         56:73:93:cf:30:f4:3b:8a:53:b2:cc:9c:65:90:31:99:64:7e:
         cf:a1:f7:a8:c7:06:72:bb:c5:38:e8:28:ab:b6:be:53:ae:a0:
         dd:66:8f:c6:a5:20:c2:23:89:e0:0a:69:91:0a:83:cb:d9:a5:
         34:32:ad:5c:8f:3b:f4:cc:17:d1:23:17:9b:1c:ee:e6:e1:a3:
         4c:04:f4:cb:5c:6d:40:e5:d0:8b:61:5e:4b:10:6e:3a:2d:a3:
         8f:58:ae:d8:a7:d7:18:4d:59:93:b7:0e:63:57:5b:65:41:3d:
         79:d7:17:cb:d3:ba:92:66:77:3e:b4:f5:44:0d:8e:6d:8b:4a:
         07:43:ad:16:2a:00:08:32:1c:54:16:e0:e9:f8:a8:7e:2d:67:
         57:57:d4:3b:c6:88:6a:9a:28:f6:57:a0:ba:6c:3f:7b:e6:20:
         fc:f4:9e:74:a8:1b:f1:9c:f1:42:e2:33:67:56:b4:51:45:89:
         3d:3c:82:50:3c:27:5f:54:68:0a:fb:9c:54:75:43:62:b7:a3:
         b3:0f:1c:d8:0d:f5:8b:cb:f0:b7:5c:42:37:fc:0f:ae:99:ef:
         e0:db:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org