Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32342d3234203d3e20323636363330.roa
File:                     3132382e3230312e3133362e302f32342d3234203d3e20323636363330.roa (raw, json)
Hash identifier:          zaPiliFsCyWn9ucxT7/7mLkDTTs8lagUuFz66SZuZ7o=
Subject key identifier:   60:9A:51:EE:64:15:09:24:5F:12:AD:18:F9:9E:84:D7:FA:25:80:07
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       6A930A57E1B733C3936DCAD5AE3C4D9D46BF7105
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32342d3234203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 23:03:19 +0000
ROA not before:           Thu 27 Jul 2023 22:58:19 +0000
ROA not after:            Thu 25 Jul 2024 23:03:19 +0000
asID:                     266630
IP address blocks:        128.201.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:93:0a:57:e1:b7:33:c3:93:6d:ca:d5:ae:3c:4d:9d:46:bf:71:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 22:58:19 2023 GMT
            Not After : Jul 25 23:03:19 2024 GMT
        Subject: CN=609A51EE641509245F12AD18F99E84D7FA258007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:36:0c:27:a8:1c:f4:23:27:7d:b8:f0:63:
                    a9:1f:95:60:db:d6:83:a7:6b:a8:80:61:73:ca:a9:
                    4d:76:ca:74:b0:bf:6a:4f:88:4f:82:69:41:5a:9f:
                    56:41:5d:d2:39:f0:fc:df:83:58:dc:74:c9:86:20:
                    18:88:4e:d2:98:36:de:a2:37:3a:a2:56:7f:b0:24:
                    07:42:fb:a2:a4:4b:6d:12:3b:37:8d:70:c4:9a:fc:
                    9f:86:fc:e9:4b:2f:6d:c8:2b:15:66:8c:a0:f1:a4:
                    55:44:09:a2:7d:bb:2f:e2:1c:07:cf:d7:66:35:bb:
                    f5:96:bd:36:e8:c4:a5:7b:69:4d:51:f7:75:44:ec:
                    47:a6:3c:a5:03:86:df:29:81:5c:e7:22:8c:b9:a8:
                    38:d1:64:dc:60:35:dc:22:c7:5b:37:85:2a:78:46:
                    7a:20:52:15:41:bd:f0:f6:22:e9:b1:0f:76:eb:ed:
                    c9:72:e8:6b:09:6c:e8:cd:db:e9:dd:43:ac:e3:e5:
                    53:c1:14:35:ab:5e:5d:d3:6b:e7:a6:ee:29:40:74:
                    ff:e8:f5:49:a6:d6:95:3b:9c:9c:06:83:3a:5d:cf:
                    ba:3c:9a:f0:5d:54:79:0f:2f:94:85:c6:c2:00:d9:
                    bc:b6:3b:63:91:c2:ab:e3:5f:d4:09:58:10:7b:f3:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9A:51:EE:64:15:09:24:5F:12:AD:18:F9:9E:84:D7:FA:25:80:07
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32342d3234203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:b9:30:8a:bb:98:53:fe:07:f0:d7:22:f8:ca:c1:be:cb:
         91:fd:d9:dd:3e:18:13:c1:bb:d1:67:1b:be:c1:f2:82:4d:93:
         fa:dc:1a:60:4f:bc:e6:de:a5:77:d7:b9:97:04:26:75:4e:de:
         4d:c7:bd:c9:a3:7d:35:f1:fb:50:37:27:e4:eb:eb:4e:40:d0:
         3f:e5:66:ff:18:0a:fb:ee:f3:11:af:fb:ea:84:ca:93:91:fb:
         dc:83:9c:7f:a7:f3:18:2e:c0:c6:ca:d7:3a:5c:bd:ad:3b:db:
         27:d9:d7:7a:a6:e4:b0:f7:75:bf:43:f2:dc:3b:fc:76:e4:f7:
         18:38:dc:4c:9a:59:24:10:42:51:fe:24:ce:76:ac:92:8c:21:
         bf:42:7d:0b:fa:ad:e0:b7:0e:93:9a:7c:3e:ac:20:b2:32:2c:
         4f:ab:2c:fe:a7:c1:07:4f:c9:1e:e8:e2:1c:8d:80:fa:fe:99:
         7f:2e:e0:4a:e0:1b:be:dd:6e:51:a3:02:e1:ba:0c:93:04:d5:
         0a:26:dd:1e:7d:4b:39:49:67:3b:cd:b7:79:c0:60:fd:05:65:
         d2:23:74:90:97:80:14:7d:1c:1d:cf:1f:3c:52:24:02:7f:2c:
         2b:64:f2:c9:59:66:2b:86:92:b7:76:c5:63:45:9f:d6:b8:07:
         3f:4e:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org