Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134312e302f32342d3234203d3e20323636363331.roa
File:                     3132382e3230312e3134312e302f32342d3234203d3e20323636363331.roa (raw, json)
Hash identifier:          IfVz1THDlPX9UXIDsT89jO1hXGc2TvhzvUZAhiQK9qg=
Subject key identifier:   28:59:34:61:63:7C:40:75:73:06:43:4B:0C:0A:2B:20:42:2B:9B:90
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       533D62551BD67EA3C5FFFE4C445C42B20ADEB3DA
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134312e302f32342d3234203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:17 +0000
ROA not before:           Thu 23 Nov 2023 19:28:17 +0000
ROA not after:            Thu 21 Nov 2024 19:33:17 +0000
asID:                     266631
IP address blocks:        128.201.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3d:62:55:1b:d6:7e:a3:c5:ff:fe:4c:44:5c:42:b2:0a:de:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:17 2023 GMT
            Not After : Nov 21 19:33:17 2024 GMT
        Subject: CN=28593461637C40757306434B0C0A2B20422B9B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:a3:0d:85:21:de:d0:41:8e:3e:96:2f:b5:
                    d0:49:52:9f:d4:97:16:64:b3:14:fd:2a:35:cd:ee:
                    75:bf:7b:ef:27:12:75:1a:c2:ac:4e:01:d1:6a:57:
                    aa:fd:cb:9c:eb:8e:b2:ed:a0:13:cb:de:3a:79:07:
                    50:98:62:5b:6c:f0:79:27:60:56:07:2f:4e:07:ef:
                    fa:97:88:3e:7a:79:b7:2c:1d:7a:de:e9:a8:69:a7:
                    8d:d5:17:0b:9c:86:6b:31:53:30:98:84:43:fb:be:
                    3f:67:3e:7d:51:8e:74:7d:71:42:80:6f:f4:43:2b:
                    a7:74:db:5e:42:2e:85:9a:6f:80:45:cf:c5:78:12:
                    da:6e:09:f5:02:d7:84:4a:4d:c7:7e:6e:ec:fc:02:
                    24:8a:a6:df:b9:35:b9:7e:25:a1:71:18:a1:99:16:
                    5f:40:77:e5:07:40:cd:2b:d7:ab:35:50:df:91:31:
                    61:cc:6e:fd:ba:a8:70:1f:b4:39:12:24:a3:7e:ba:
                    ec:7c:3b:7b:b3:8f:c3:0a:01:27:ca:ed:9f:b5:07:
                    7d:f1:03:26:0c:2b:1c:9a:b6:2a:fd:1b:e8:62:c5:
                    14:11:9f:09:54:0f:aa:14:31:fc:cc:9a:2d:a5:21:
                    8f:30:77:64:ec:98:c7:9f:aa:68:04:fe:95:14:c9:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:59:34:61:63:7C:40:75:73:06:43:4B:0C:0A:2B:20:42:2B:9B:90
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134312e302f32342d3234203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:3b:c0:ca:a4:b0:6e:34:71:91:5e:eb:21:14:f5:ea:c0:
         ac:c8:5b:8d:8b:52:b5:a8:7b:e6:01:fa:2f:d6:a3:1b:83:c2:
         b8:8d:db:de:24:a2:ea:9c:b6:4a:e4:38:92:95:20:21:55:bf:
         c7:c6:b9:4c:b1:3e:30:ef:a6:78:28:36:b0:e0:25:22:98:5d:
         24:51:05:e9:ac:7a:cc:52:c4:cc:dc:d8:b1:91:2b:31:a8:5a:
         ba:6f:67:93:2f:0c:2b:d9:20:a8:7f:28:b3:b0:d7:aa:3b:e7:
         94:59:27:b7:60:8a:98:4e:14:a2:c7:c1:4b:db:c9:fa:3f:e2:
         8d:fc:da:0f:65:7e:69:2a:a5:5f:b8:2b:f5:cf:b5:82:cd:b2:
         10:b4:de:ed:28:1a:f2:33:36:20:62:81:1c:3d:8a:ef:64:1e:
         d6:67:3b:16:8c:2c:10:e6:5e:7e:ad:92:5d:aa:80:0c:c9:99:
         3c:78:e3:33:66:17:b3:eb:53:57:fa:d2:f5:67:1b:25:93:c8:
         a2:e7:0b:02:de:0d:e3:c3:95:f0:18:fb:54:3e:aa:4b:13:e7:
         0d:a0:6b:65:28:4b:70:5a:e4:b6:6f:59:a6:82:de:c6:93:7e:
         56:b1:52:3b:c9:75:4d:ff:1b:b5:75:6f:49:9a:b4:22:82:13:
         f3:06:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org