Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32342d3234203d3e20323636363331.roa
File:                     3132382e3230312e3134302e302f32342d3234203d3e20323636363331.roa (raw, json)
Hash identifier:          Wkqj/JO+XZGsaFE7T8DBNZAC1O+Fiav5fTF70fX8sQE=
Subject key identifier:   68:82:84:5F:33:5C:72:08:18:38:BD:B1:35:9F:BF:15:6F:D6:19:FE
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       30FB70433EA4197AF3D7BBB2A4FFCCED96A35914
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32342d3234203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:18 +0000
ROA not before:           Thu 23 Nov 2023 19:28:18 +0000
ROA not after:            Thu 21 Nov 2024 19:33:18 +0000
asID:                     266631
IP address blocks:        128.201.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fb:70:43:3e:a4:19:7a:f3:d7:bb:b2:a4:ff:cc:ed:96:a3:59:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:18 2023 GMT
            Not After : Nov 21 19:33:18 2024 GMT
        Subject: CN=6882845F335C72081838BDB1359FBF156FD619FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:a5:63:6c:06:d8:93:cb:c4:27:d3:a9:ba:
                    96:b9:23:07:58:9a:5c:30:4b:a8:ae:78:6e:20:44:
                    86:3f:b0:63:54:94:72:3a:4b:1d:59:42:fa:ca:3c:
                    3a:06:25:19:73:5f:fa:8d:16:55:2c:fa:47:fe:2c:
                    8f:57:b7:6c:d3:40:c3:c3:8e:2c:7a:03:2d:96:d5:
                    58:a1:28:98:0a:47:cf:3b:17:11:15:07:f4:c0:77:
                    d9:c7:a1:24:20:a2:b3:61:c5:83:32:ac:c2:21:7c:
                    16:bb:5b:ec:e1:4e:36:0f:02:70:6c:0c:10:a4:06:
                    7a:c1:58:49:30:ec:a8:45:e2:9b:67:95:10:fc:96:
                    af:7d:44:15:b3:8e:77:5d:62:e2:bd:07:d7:b3:87:
                    83:22:04:2d:fa:92:ba:5d:91:86:f0:c6:d0:9b:d8:
                    f9:cf:f5:d6:2a:af:51:ef:84:f0:40:b3:5c:aa:3f:
                    3b:11:95:40:b6:10:1e:3e:f8:87:61:f0:5d:60:cd:
                    9e:ee:7c:88:7c:5a:4c:d9:22:88:96:55:b0:d9:03:
                    92:b9:2b:35:d6:e5:38:ad:7d:c3:1c:a4:58:4b:9b:
                    22:bb:0a:e1:65:23:46:81:d9:40:96:ea:46:3b:d1:
                    f0:68:a5:24:bd:00:66:e6:af:d8:0d:0a:67:68:fe:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:84:5F:33:5C:72:08:18:38:BD:B1:35:9F:BF:15:6F:D6:19:FE
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134302e302f32342d3234203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:5d:98:b6:5f:5d:1a:ae:96:63:00:4e:81:e7:02:8b:d5:
         c2:3d:3d:a7:d5:bb:cf:45:9a:9d:ca:54:23:56:27:c1:ec:9a:
         1b:3d:83:0b:64:43:fa:8a:45:27:90:88:f5:7a:f3:f9:24:0c:
         70:cf:0e:9b:64:14:1d:f9:38:7b:31:f6:b9:b4:15:84:0b:b3:
         a0:41:63:07:5a:4d:50:cb:d5:bd:cf:07:c5:0c:3f:42:8e:5f:
         d3:bd:0e:ae:4e:28:1a:4c:3b:f2:af:60:79:83:42:5b:30:fe:
         9b:02:14:d1:26:54:d7:d4:37:7b:12:67:99:46:b6:8e:d2:c4:
         bd:dd:a2:11:95:7c:d6:79:10:ee:7f:45:b6:8e:23:06:61:80:
         0a:db:4a:6a:1e:44:f8:54:32:e1:bc:2d:ae:2d:8b:0c:58:d9:
         ae:3b:a0:cc:33:26:ee:6c:5d:d7:0e:a9:e5:5e:b8:2d:69:e2:
         66:1a:c5:9f:b0:5d:47:99:12:ae:a3:e3:60:74:24:7f:db:8c:
         be:43:e6:69:02:25:28:5e:22:eb:84:9d:75:9d:b2:7c:91:4f:
         9a:a1:77:c0:f2:23:5d:98:b0:ae:cf:2a:6d:e0:78:a7:ee:76:
         20:fe:e2:a0:0b:7c:99:b2:22:2d:78:be:da:2c:17:d6:bd:d1:
         9a:98:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org