Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa
File:                     3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (raw, json)
Hash identifier:          cpUXmsNF0GTjrBfdL/dPMmLIZTj7Te124V7R4n7Q5yU=
Subject key identifier:   8C:23:1C:CD:73:ED:EC:F3:39:41:6D:D4:E9:03:64:AB:B2:9D:6F:A0
Certificate issuer:       /CN=D1DE8FC7F5072264D29EC8C48C39E67B06AE9579
Certificate serial:       22BD9F58490AF0291CB32525B0AB65A43B821ECF
Authority key identifier: D1:DE:8F:C7:F5:07:22:64:D2:9E:C8:C4:8C:39:E6:7B:06:AE:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DE8FC7F5072264D29EC8C48C39E67B06AE9579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa
Signing time:             Fri 15 Dec 2023 13:21:20 +0000
ROA not before:           Fri 15 Dec 2023 13:16:20 +0000
ROA not after:            Fri 13 Dec 2024 13:21:20 +0000
asID:                     266631
IP address blocks:        128.201.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bd:9f:58:49:0a:f0:29:1c:b3:25:25:b0:ab:65:a4:3b:82:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DE8FC7F5072264D29EC8C48C39E67B06AE9579
        Validity
            Not Before: Dec 15 13:16:20 2023 GMT
            Not After : Dec 13 13:21:20 2024 GMT
        Subject: CN=8C231CCD73EDECF339416DD4E90364ABB29D6FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:93:ca:d6:10:e2:82:cb:98:a7:5a:e8:9c:
                    9f:4f:f8:2a:43:e3:f6:d4:0f:e1:37:ef:57:79:a3:
                    d8:0a:74:8f:a7:99:65:47:62:77:e9:31:84:a9:5e:
                    e5:04:59:cb:48:0a:ec:ce:1b:a3:85:22:02:2e:76:
                    66:9e:62:20:39:ba:0a:c3:02:a7:f2:41:b3:a9:5e:
                    54:fe:c4:5a:26:6d:87:6e:d8:66:bc:db:c4:4b:8f:
                    f5:a8:49:77:84:ea:7c:b0:4d:f1:e0:ed:3f:52:8e:
                    6a:8e:60:c8:76:d2:cc:d7:d2:df:d4:71:fc:fa:f2:
                    7b:6f:b4:63:7d:75:b3:97:2f:fa:12:4e:89:14:d9:
                    a4:8b:14:69:e4:72:b4:3c:86:c9:6d:37:64:ac:01:
                    50:d8:5c:ca:f7:2c:97:e4:2a:be:41:17:e1:c7:68:
                    34:98:bd:cc:1f:12:ae:11:1e:b8:29:53:8f:35:48:
                    bb:9b:1f:15:b7:6e:8f:d2:71:4f:3d:a8:a5:43:7f:
                    10:8e:06:8d:af:96:bd:e9:75:3d:b0:31:05:98:3b:
                    2c:d7:47:83:12:96:34:e4:c8:dd:bc:92:71:18:45:
                    89:48:3d:c0:d8:77:19:e0:9b:63:24:89:19:ab:f4:
                    50:87:c4:8b:45:cf:9b:0a:af:5d:c1:84:b8:a2:3e:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:23:1C:CD:73:ED:EC:F3:39:41:6D:D4:E9:03:64:AB:B2:9D:6F:A0
            X509v3 Authority Key Identifier:
                keyid:D1:DE:8F:C7:F5:07:22:64:D2:9E:C8:C4:8C:39:E6:7B:06:AE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/D1DE8FC7F5072264D29EC8C48C39E67B06AE9579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DE8FC7F5072264D29EC8C48C39E67B06AE9579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:b0:9f:72:89:81:0d:dd:19:60:8c:5c:5d:14:5c:7d:d1:8d:
         10:af:9e:ed:40:22:49:4f:0f:30:dc:9c:d6:eb:49:4c:0f:db:
         5a:59:9f:22:ad:07:2e:fa:c1:f1:f2:a0:a4:e4:d7:9a:e6:74:
         94:1e:24:d6:25:2a:ed:2c:7f:82:21:b5:f9:b0:d4:5d:b8:a1:
         91:07:e2:43:f3:09:c6:c7:82:e4:4a:6e:30:ef:f5:1d:7c:0e:
         8b:fe:7e:4f:f7:98:a1:72:40:c4:74:bf:2d:85:90:6e:9a:46:
         33:c5:3a:de:80:54:b5:6c:e4:5e:fd:ef:63:dd:3a:85:40:40:
         54:d2:6f:00:0f:4b:d2:b5:fb:09:81:b0:c3:17:df:58:4f:72:
         81:6b:5d:4b:b1:7b:d5:92:ce:cf:d0:10:06:65:5c:09:e6:b7:
         3e:6d:99:90:28:8f:9b:f3:2b:d1:bc:88:f0:ae:6f:de:e3:1c:
         24:51:5c:f0:8c:22:5b:4f:ed:44:ac:6a:6b:43:ea:94:1b:f6:
         44:11:f5:23:38:6e:e6:14:c4:c3:09:5d:00:3d:0d:30:39:67:
         69:76:1a:aa:47:e6:9d:a7:23:53:2a:7a:8b:fa:64:b1:e9:47:
         98:74:5f:8d:fb:9c:d3:85:c0:89:a6:75:86:33:a9:80:d7:41:
         4b:45:ab:88
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIr2fWEkK8CkcsyUlsKtlpDuCHs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFERThGQzdGNTA3MjI2NEQyOUVDOEM0OEMzOUU2N0Iw
NkFFOTU3OTAeFw0yMzEyMTUxMzE2MjBaFw0yNDEyMTMxMzIxMjBaMDMxMTAvBgNV
BAMTKDhDMjMxQ0NENzNFREVDRjMzOTQxNkRENEU5MDM2NEFCQjI5RDZGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgVpPK1hDigsuYp1ronJ9P+CpD
4/bUD+E371d5o9gKdI+nmWVHYnfpMYSpXuUEWctICuzOG6OFIgIudmaeYiA5ugrD
AqfyQbOpXlT+xFombYdu2Ga828RLj/WoSXeE6nywTfHg7T9SjmqOYMh20szX0t/U
cfz68ntvtGN9dbOXL/oSTokU2aSLFGnkcrQ8hsltN2SsAVDYXMr3LJfkKr5BF+HH
aDSYvcwfEq4RHrgpU481SLubHxW3bo/ScU89qKVDfxCOBo2vlr3pdT2wMQWYOyzX
R4MSljTkyN28knEYRYlIPcDYdxngm2MkiRmr9FCHxItFz5sKr13BhLiiPmwnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjCMczXPt7PM5QW3U6QNkq7Kdb6AwHwYDVR0j
BBgwFoAU0d6Px/UHImTSnsjEjDnmewaulXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhLQUpDNzc1Qnk4
Z0ovMC9EMURFOEZDN0Y1MDcyMjY0RDI5RUM4QzQ4QzM5RTY3QjA2QUU5NTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxREU4RkM3RjUwNzIyNjRE
MjlFQzhDNDhDMzlFNjdCMDZBRTk1NzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKU1dINmlnRzNIV3ljcWQ2dHQ2Wms5MlFnWFFGaWZ4S0FKQzc3NUJ5OGdKLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjM2MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJjDANBgkqhkiG9w0BAQsFAAOCAQEAkbCf
comBDd0ZYIxcXRRcfdGNEK+e7UAiSU8PMNyc1utJTA/bWlmfIq0HLvrB8fKgpOTX
muZ0lB4k1iUq7Sx/giG1+bDUXbihkQfiQ/MJxseC5EpuMO/1HXwOi/5+T/eYoXJA
xHS/LYWQbppGM8U63oBUtWzkXv3vY906hUBAVNJvAA9L0rX7CYGwwxffWE9ygWtd
S7F71ZLOz9AQBmVcCea3Pm2ZkCiPm/Mr0byI8K5v3uMcJFFc8IwiW0/tRKxqa0Pq
lBv2RBH1Izhu5hTEwwldAD0NMDlnaXYaqkfmnacjUyp6i/pkselHmHRfjfuc04XA
iaZ1hjOpgNdBS0WriA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org