Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32332d3233203d3e20323636363330.roa
File:                     3132382e3230312e3133362e302f32332d3233203d3e20323636363330.roa (raw, json)
Hash identifier:          1IGMacF4yIH7M5qSvF2J6zfKBhx9iwv5iLMkfHh/Kq8=
Subject key identifier:   DF:CE:E2:8C:6E:B1:F9:10:A3:E6:B9:05:80:5F:A3:6F:C7:10:B3:21
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       4AAF06BEEE58F738C39217C4EE364EC673E0E286
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32332d3233203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 15:59:18 +0000
ROA not before:           Thu 27 Jul 2023 15:54:18 +0000
ROA not after:            Thu 25 Jul 2024 15:59:18 +0000
asID:                     266630
IP address blocks:        128.201.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:af:06:be:ee:58:f7:38:c3:92:17:c4:ee:36:4e:c6:73:e0:e2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 15:54:18 2023 GMT
            Not After : Jul 25 15:59:18 2024 GMT
        Subject: CN=DFCEE28C6EB1F910A3E6B905805FA36FC710B321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:ee:0c:8f:b4:f1:f9:83:2d:a5:5f:1b:9a:
                    36:6f:81:69:e6:e0:a5:dd:dd:31:b6:32:e9:fa:b8:
                    8a:b9:4f:c6:4c:66:ae:03:63:fb:c3:7b:83:10:ca:
                    8c:59:11:cd:6a:33:74:fa:85:88:94:f9:96:7b:f0:
                    ce:e4:7a:f2:aa:1f:bc:4b:c6:c0:0a:33:55:cd:58:
                    df:2a:3a:f5:65:cf:6a:8a:54:db:3a:dd:f3:7e:65:
                    68:6b:91:93:3d:46:b2:8a:d0:a4:b9:51:7b:72:2a:
                    e1:85:3d:72:62:65:13:50:76:f8:9a:41:84:36:9a:
                    be:ec:c4:33:c9:26:be:fa:30:2b:ab:15:43:d9:09:
                    81:4d:0b:92:41:ce:10:04:95:9d:09:c4:e8:61:2a:
                    d6:55:91:1e:0d:4e:e1:66:ac:aa:86:29:41:7b:eb:
                    31:28:ad:f2:29:91:ad:f6:23:de:a0:93:93:d7:7d:
                    7b:57:38:1f:d7:a8:0e:cf:ae:da:f6:2d:6e:1c:b7:
                    e4:9b:91:7d:48:cb:ba:ef:24:30:29:d3:69:fe:92:
                    50:04:77:7f:f3:40:b0:8a:c7:61:3d:94:d3:e5:21:
                    ca:7f:47:77:68:60:8a:ec:c1:da:65:d3:2e:7c:84:
                    1e:48:e0:ff:c2:35:d4:c2:10:e9:35:56:c6:fb:f0:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:E2:8C:6E:B1:F9:10:A3:E6:B9:05:80:5F:A3:6F:C7:10:B3:21
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32332d3233203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:10:57:f7:2d:99:36:8b:63:a4:f4:5c:1c:e8:0d:76:ed:
         c4:55:2b:a8:74:fd:13:38:47:a0:7e:2c:07:36:18:a3:33:6f:
         2f:a9:d2:85:7e:e0:64:1d:0a:bd:fa:89:c4:ad:01:e6:21:a3:
         a4:94:8e:c0:bf:0c:be:b6:cb:ca:03:b7:5e:d2:be:be:1f:93:
         56:c3:c2:bd:70:af:d0:46:af:42:36:46:e8:90:98:24:af:66:
         69:f4:0b:48:62:dd:b0:e0:60:c1:7e:6e:d0:33:77:8c:f5:6c:
         74:c6:0b:e3:04:63:30:95:ec:19:77:77:28:a4:82:de:26:44:
         37:cc:83:15:7d:63:e0:5e:b1:a3:01:54:4a:f4:f6:60:8f:59:
         da:44:77:05:7f:bd:36:ff:87:0a:bc:45:e5:37:81:17:9b:b9:
         29:71:e1:ff:67:91:68:fd:b7:be:d6:e5:1d:be:1d:1c:d9:79:
         22:20:bc:c9:15:fc:66:ad:93:b3:56:4d:7f:52:99:79:e2:fb:
         a8:35:3c:73:72:c4:e5:c6:7a:f5:9e:ce:b2:2e:86:8b:7c:c4:
         41:88:84:d6:3a:df:f9:ac:a2:7e:60:b0:63:08:0a:3d:fa:fc:
         0d:19:74:bc:47:e6:6f:74:4b:78:ee:a3:eb:d0:16:98:ee:d2:
         e2:64:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org