Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32322d3232203d3e20323636363331.roa
File:                     3132382e3230312e3134302e302f32322d3232203d3e20323636363331.roa (raw, json)
Hash identifier:          6FZWzwSVsVQE/42tbbzVqfMUtFGDgwy7gpjwuaBEaT4=
Subject key identifier:   F7:B2:23:BC:6B:87:F5:6F:AB:8F:F1:E1:AB:C8:4B:FC:5F:B6:65:D0
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       3514887027B7E6755B509BF1E68E7A9CE9404FAD
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32322d3232203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:18 +0000
ROA not before:           Thu 23 Nov 2023 19:28:18 +0000
ROA not after:            Thu 21 Nov 2024 19:33:18 +0000
asID:                     266631
IP address blocks:        128.201.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:14:88:70:27:b7:e6:75:5b:50:9b:f1:e6:8e:7a:9c:e9:40:4f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:18 2023 GMT
            Not After : Nov 21 19:33:18 2024 GMT
        Subject: CN=F7B223BC6B87F56FAB8FF1E1ABC84BFC5FB665D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:fa:e8:fb:3c:2c:fb:d5:46:b2:f5:2f:dd:
                    0a:b8:1e:c1:6a:45:e3:cd:70:a4:2c:69:71:2a:cf:
                    81:4f:72:5a:77:70:73:c1:01:6b:44:1e:b7:e9:33:
                    2c:09:72:21:26:15:42:0b:ea:f4:b8:53:68:39:b6:
                    df:ec:e5:e8:6b:3d:09:03:6d:09:98:a8:44:4f:a5:
                    79:b4:20:d7:c8:12:89:c3:f5:73:b0:87:67:2f:65:
                    6c:38:8a:66:6c:8a:59:99:82:ea:a1:60:81:f8:72:
                    74:ea:8e:15:ae:84:98:53:59:c6:86:91:e6:1b:4c:
                    01:53:63:90:00:ab:a2:a1:27:28:21:5e:c2:af:4b:
                    d5:37:57:f3:06:10:33:91:f4:ab:6e:e0:8c:54:a3:
                    21:8e:28:9b:34:94:6a:28:c0:62:f4:5a:53:8a:aa:
                    5f:6c:df:f4:2b:7f:fc:38:d8:30:75:09:62:c6:6a:
                    4f:6b:7f:32:b8:0c:8d:be:36:ef:f2:27:32:e9:6b:
                    a6:38:ee:fc:55:7c:43:6e:7e:69:71:39:c8:9f:07:
                    5b:5c:02:e0:fb:a5:b6:d9:d3:b5:36:af:7d:18:54:
                    9a:0b:c2:f7:d2:2c:7a:a9:f5:2d:0b:d8:4d:ee:13:
                    44:6f:08:51:52:de:9e:e8:20:6a:54:d1:a4:74:ac:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B2:23:BC:6B:87:F5:6F:AB:8F:F1:E1:AB:C8:4B:FC:5F:B6:65:D0
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32322d3232203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:64:ec:88:53:d3:86:e8:30:a9:a8:28:6f:0d:ed:dd:9c:
         d5:c3:e5:d3:8f:6e:39:28:9d:81:ff:47:e7:89:16:9d:c5:67:
         8b:3a:f6:78:07:e8:ff:bd:c5:c4:0b:9f:88:af:77:d3:7f:9a:
         8a:b0:8e:ad:bb:84:9d:b8:49:09:4e:fc:86:fe:ce:1d:ac:ef:
         60:09:71:86:83:9b:e4:d0:86:80:fe:67:70:42:de:e0:9f:fe:
         82:b1:1c:d9:c5:4a:f0:35:b1:78:06:c1:b2:9b:9d:5e:41:8f:
         d7:49:89:3c:7f:0c:16:90:97:ea:a7:24:d7:72:06:1e:30:7a:
         d7:97:19:eb:ae:9c:7e:42:07:4b:d1:92:8c:44:66:6a:27:12:
         b0:b7:54:0f:e1:01:66:37:4e:1b:bf:1a:4f:50:db:5f:3e:b5:
         52:45:c2:57:9d:1d:17:1e:fe:16:5b:95:3e:20:41:15:85:f7:
         d3:d9:da:79:62:19:46:e8:68:0c:8e:b8:59:4f:48:bd:16:16:
         85:da:bf:a6:76:ab:e7:04:28:00:76:4d:79:d7:d2:3c:b7:f5:
         68:e1:8d:c9:ad:96:9b:a0:f3:57:4e:41:50:15:53:5a:d2:a3:
         9c:83:ff:6c:75:c1:69:7b:b1:2c:e0:1f:ba:ea:1e:e9:0c:2c:
         3d:6f:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org