Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa
File:                     3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          pv2Gt5wDr6HsXOQaGxvmKXgagUGYhlu/Au1eYFE1B8c=
Subject key identifier:   F4:D7:51:8A:0D:38:08:21:28:31:1D:21:8F:22:8B:15:63:E0:03:42
Certificate issuer:       /CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
Certificate serial:       1FC5A959AF3A75A2AD253DB1F40437104E57A94F
Authority key identifier: 0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa
Signing time:             Fri 14 Apr 2023 22:00:00 +0000
ROA not before:           Fri 14 Apr 2023 21:55:00 +0000
ROA not after:            Fri 12 Apr 2024 22:00:00 +0000
asID:                     264525
IP address blocks:        128.201.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c5:a9:59:af:3a:75:a2:ad:25:3d:b1:f4:04:37:10:4e:57:a9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
        Validity
            Not Before: Apr 14 21:55:00 2023 GMT
            Not After : Apr 12 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:cd:d0:69:71:b7:d1:b4:61:6f:84:72:61:
                    4f:9b:9d:83:6f:ed:0d:77:29:ec:21:4b:f9:5e:09:
                    e0:6f:2e:4f:9e:0a:2e:3e:0e:20:a0:5e:7b:05:19:
                    09:88:d8:1e:69:d5:67:6f:77:45:54:8d:64:d5:5f:
                    d8:cc:86:82:48:23:c5:60:56:0a:5f:45:c6:27:c0:
                    a4:b2:3d:fa:77:03:20:89:05:d4:cb:f7:50:4a:8f:
                    b4:73:0e:14:42:f9:8d:14:cc:24:65:db:37:12:8c:
                    f0:2d:70:30:bd:02:04:4b:28:74:63:1d:99:f7:ad:
                    9d:f0:7f:b4:64:7e:9d:f6:19:65:7a:8a:ea:2e:4f:
                    54:59:80:76:43:7a:8c:03:4d:2d:b7:9f:5a:cf:ea:
                    ee:8d:d2:a1:08:4c:e9:ad:10:0d:8a:81:96:c4:7d:
                    25:6e:a2:00:e1:c2:7a:f7:ba:0d:1a:60:67:57:41:
                    81:0d:e6:fe:89:76:11:67:be:fc:27:63:3d:92:c6:
                    14:d6:46:92:88:09:49:be:ba:85:ba:dd:93:f3:2e:
                    0a:0f:fc:5c:a6:75:9e:f1:a9:4a:f4:40:93:0d:87:
                    87:8c:54:d0:6e:6e:77:55:88:c6:e9:8b:35:67:92:
                    52:77:81:9e:9c:53:e5:94:01:e5:88:b9:4f:ce:0c:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D7:51:8A:0D:38:08:21:28:31:1D:21:8F:22:8B:15:63:E0:03:42
            X509v3 Authority Key Identifier:
                keyid:0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:43:0b:1e:d8:f5:29:b0:63:87:e0:df:78:21:6e:c8:c4:67:
         1b:7e:18:0d:1b:86:5c:aa:bb:0d:60:2e:1e:52:cc:4e:1e:ba:
         e9:a2:4b:51:9c:f8:0d:7a:50:03:69:73:3b:34:83:96:aa:6b:
         8e:fd:62:5e:38:b9:45:f4:b3:f9:14:73:7d:32:e8:c0:12:92:
         6b:92:3f:bf:3b:49:e2:d8:af:25:d7:48:e5:02:a1:7e:e5:75:
         68:af:84:c3:61:f6:06:84:b9:6d:48:d8:b3:ad:04:a7:18:de:
         99:5b:3b:24:f3:26:ee:16:2e:60:6c:77:f5:3b:8c:25:1d:44:
         cf:50:e1:6e:13:12:c9:21:ac:28:33:39:04:74:a0:80:62:1f:
         14:ca:53:35:26:e1:7b:17:fd:a3:b1:b2:5e:f3:02:7d:1b:1e:
         71:10:0a:48:33:34:20:0c:cb:11:7e:3d:d1:5b:88:09:fc:f1:
         c1:0b:81:a0:1b:b7:89:7a:36:e9:3e:a9:3d:43:4b:13:27:ec:
         40:1f:da:78:18:7c:1e:26:89:57:c1:f9:3a:74:a8:eb:71:cc:
         2f:60:ae:78:ec:76:69:ca:0c:9f:d9:6f:7f:54:66:9b:1a:23:
         9d:25:07:36:be:d2:99:f0:2e:3d:09:60:74:5f:0f:6a:c3:c3:
         c8:08:8c:49
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUH8WpWa86daKtJT2x9AQ3EE5XqU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFCMEI3NTM0QkM1NUNBOTU5NjRFRTY5QjRGQjEwMjk3
QjA0MjgxODAeFw0yMzA0MTQyMTU1MDBaFw0yNDA0MTIyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTMxRkNERDA2OTcxQjdEMUI0
NjE2Rjg0NzI2MTRGOUI5RDgzNkZFRDBENzcyOUVDMjE0QkY5NUUwOUUwNkYyRTRG
OUUwQTJFM0UwRTIwQTA1RTdCMDUxOTA5ODhEODFFNjlENTY3NkY3NzQ1NTQ4RDY0
RDU1RkQ4Q0M4NjgyNDgyM0M1NjA1NjBBNUY0NUM2MjdDMEE0QjIzREZBNzcwMzIw
ODkwNUQ0Q0JGNzUwNEE4RkI0NzMwRTE0NDJGOThEMTRDQzI0NjVEQjM3MTI4Q0Yw
MkQ3MDMwQkQwMjA0NEIyODc0NjMxRDk5RjdBRDlERjA3RkI0NjQ3RTlERjYxOTY1
N0E4QUVBMkU0RjU0NTk4MDc2NDM3QThDMDM0RDJEQjc5RjVBQ0ZFQUVFOEREMkEx
MDg0Q0U5QUQxMDBEOEE4MTk2QzQ3RDI1NkVBMjAwRTFDMjdBRjdCQTBEMUE2MDY3
NTc0MTgxMERFNkZFODk3NjExNjdCRUZDMjc2MzNEOTJDNjE0RDY0NjkyODgwOTQ5
QkVCQTg1QkFERDkzRjMyRTBBMEZGQzVDQTY3NTlFRjFBOTRBRjQ0MDkzMEQ4Nzg3
OEM1NEQwNkU2RTc3NTU4OEM2RTk4QjM1Njc5MjUyNzc4MTlFOUM1M0U1OTQwMUU1
ODhCOTRGQ0UwQzkwNjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAox/N0Glxt9G0YW+EcmFPm52Db+0NdynsIUv5Xgngby5PngouPg4g
oF57BRkJiNgeadVnb3dFVI1k1V/YzIaCSCPFYFYKX0XGJ8Cksj36dwMgiQXUy/dQ
So+0cw4UQvmNFMwkZds3EozwLXAwvQIESyh0Yx2Z962d8H+0ZH6d9hlleorqLk9U
WYB2Q3qMA00tt59az+rujdKhCEzprRANioGWxH0lbqIA4cJ697oNGmBnV0GBDeb+
iXYRZ778J2M9ksYU1kaSiAlJvrqFut2T8y4KD/xcpnWe8alK9ECTDYeHjFTQbm53
VYjG6Ys1Z5JSd4GenFPllAHliLlPzgyQZQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPTXUYoNOAghKDEdIY8iixVj4ANCMB8GA1UdIwQYMBaAFAqwt1NLxVypWWTuabT7
ECl7BCgYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0Und5RVE1Q25GaGdS
Qm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAvMEFCMEI3NTM0QkM1NUNB
OTU5NjRFRTY5QjRGQjEwMjk3QjA0MjgxOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wQUIwQjc1MzRCQzU1Q0E5NTk2NEVFNjlCNEZCMTAyOTdCMDQy
ODE4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ydFJ3eUVRNUNuRmhnUkJvTEN0
bTFQUlRKVEVxM0NFN0pvR0xhQmhVNDh3aS8wLzMxMzIzODJlMzIzMDMxMmUzMjMw
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMyMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKAydAwDQYJKoZIhvcNAQELBQADggEBABlDCx7Y9SmwY4fg33ghbsjEZxt+GA0b
hlyquw1gLh5SzE4euumiS1Gc+A16UANpczs0g5aqa479Yl44uUX0s/kUc30y6MAS
kmuSP787SeLYryXXSOUCoX7ldWivhMNh9gaEuW1I2LOtBKcY3plbOyTzJu4WLmBs
d/U7jCUdRM9Q4W4TEskhrCgzOQR0oIBiHxTKUzUm4XsX/aOxsl7zAn0bHnEQCkgz
NCAMyxF+PdFbiAn88cELgaAbt4l6Nuk+qT1DSxMn7EAf2ngYfB4miVfB+Tp0qOtx
zC9grnjsdmnKDJ/Zb39UZpsaI50lBza+0pnwLj0JYHRfD2rDw8gIjEk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org