Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32322d3232203d3e20323636363330.roa
File:                     3132382e3230312e3133362e302f32322d3232203d3e20323636363330.roa (raw, json)
Hash identifier:          LcJxxL2i/beXf86osqm2jro3lmPBELPZ+AVSJcUZ8Dg=
Subject key identifier:   FB:89:7A:01:21:6D:84:95:42:B9:0D:35:CC:8D:36:7F:ED:45:6B:61
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       41D109043C39F836059F4A6B8B283AAA8558AF8E
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32322d3232203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 15:59:18 +0000
ROA not before:           Thu 27 Jul 2023 15:54:18 +0000
ROA not after:            Thu 25 Jul 2024 15:59:18 +0000
asID:                     266630
IP address blocks:        128.201.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:09:04:3c:39:f8:36:05:9f:4a:6b:8b:28:3a:aa:85:58:af:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 15:54:18 2023 GMT
            Not After : Jul 25 15:59:18 2024 GMT
        Subject: CN=FB897A01216D849542B90D35CC8D367FED456B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:72:81:2b:b2:c2:68:2b:36:d7:5d:cd:f0:
                    54:6c:6a:2c:6f:21:a1:d2:de:86:27:de:60:db:48:
                    4f:db:03:8f:cd:0d:18:25:b2:a5:43:c9:11:74:6b:
                    25:0a:f3:b0:4a:ee:06:5f:0a:b8:76:33:e0:8e:61:
                    d6:5e:4c:18:df:5b:f9:e3:78:43:2e:6d:66:ea:e0:
                    0d:bd:13:7b:4c:1a:a9:8c:bd:7e:82:9d:57:44:01:
                    e3:0e:7a:18:3c:ad:8e:d5:93:0c:f8:11:a4:5b:44:
                    43:0a:16:50:e4:ea:b7:a6:3e:ec:e6:99:e0:44:1b:
                    39:c1:4c:81:00:9c:97:80:8a:1a:a1:58:e9:ac:44:
                    4f:aa:6b:44:b1:da:f6:e2:93:5f:66:17:a4:37:ac:
                    e9:99:b0:ff:3e:e3:ac:0a:6a:9a:86:42:48:16:85:
                    40:50:32:00:46:1e:51:68:d3:68:a0:ab:da:c5:bb:
                    a1:fa:53:3f:ba:ff:9e:3f:47:64:b7:60:38:4f:c0:
                    d9:64:b9:25:a9:4c:16:a2:13:7e:0e:3a:54:8d:0b:
                    0a:41:81:21:1b:28:c2:e5:c0:f2:fb:a2:9b:ca:56:
                    c8:01:c8:19:88:aa:e4:16:9b:0c:74:fc:ac:4c:11:
                    eb:e5:bd:c3:2a:2f:21:89:08:e1:d6:1e:f2:a6:80:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:7A:01:21:6D:84:95:42:B9:0D:35:CC:8D:36:7F:ED:45:6B:61
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32322d3232203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:07:e1:ab:d5:2c:15:78:d1:c2:1c:bf:61:a3:c6:7f:d5:a8:
         4c:e7:f8:31:c4:fb:6b:ed:26:fe:3c:bb:4c:9a:fb:36:38:1b:
         e5:70:41:4c:2f:94:02:65:93:71:37:9b:61:2b:42:9a:25:01:
         61:43:fd:a0:08:35:a7:54:a6:b5:b7:2c:98:10:8b:67:d2:cf:
         8f:ba:b7:99:90:35:78:86:1a:3c:74:76:5e:1f:77:c4:83:a6:
         bf:a7:c3:0c:2e:b9:c6:b2:2b:24:41:3e:cf:d2:35:0b:68:c3:
         cb:18:37:4f:63:ac:c3:ae:6d:cf:c4:f4:e2:33:9f:da:89:0d:
         20:bc:1e:4d:cf:88:1a:d0:1d:c0:b6:3e:38:c1:fc:4a:9e:50:
         d7:ff:af:26:0a:ed:7f:f3:61:62:fb:fd:d5:b9:14:11:b1:97:
         3b:98:3c:11:0a:10:52:27:49:8a:ae:d2:4d:b7:9d:ed:cd:2c:
         ed:92:cc:41:25:25:d0:f8:4c:b2:f8:c6:27:fe:52:6c:f0:ac:
         4a:18:a0:c5:7e:08:40:46:e5:d8:99:a6:c6:be:32:c1:49:00:
         9a:a7:5e:9f:1f:7c:3f:6b:2a:6a:49:1c:ba:a2:32:f5:56:c9:
         3c:33:d6:ec:74:37:1e:0e:87:fc:64:00:62:32:81:0a:b3:8e:
         c9:39:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org