Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134322e302f32332d3233203d3e20323636363331.roa
File:                     3132382e3230312e3134322e302f32332d3233203d3e20323636363331.roa (raw, json)
Hash identifier:          7MbD9YulQzwsj0f+nuxuSa+LToHBAVNFgyYNC4CepGo=
Subject key identifier:   32:18:08:9C:BF:72:75:C1:A9:88:E5:EB:F0:74:8A:22:10:FF:A7:17
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       5FCF7C08B7BEB6203659FFA5D467A826C397359F
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134322e302f32332d3233203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:18 +0000
ROA not before:           Thu 23 Nov 2023 19:28:18 +0000
ROA not after:            Thu 21 Nov 2024 19:33:18 +0000
asID:                     266631
IP address blocks:        128.201.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cf:7c:08:b7:be:b6:20:36:59:ff:a5:d4:67:a8:26:c3:97:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:18 2023 GMT
            Not After : Nov 21 19:33:18 2024 GMT
        Subject: CN=3218089CBF7275C1A988E5EBF0748A2210FFA717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:72:ee:29:98:a6:29:3e:2a:a0:c6:6c:5c:
                    f4:e8:9f:cf:f7:7b:42:fe:94:39:d9:70:9c:a1:56:
                    c9:00:6e:11:38:f6:00:f6:7e:75:ac:2a:97:11:5c:
                    42:1f:cd:ba:1f:14:0b:d5:9e:68:5a:1b:78:b8:80:
                    42:5c:73:5a:ae:4d:b7:e4:a9:4e:02:22:32:41:f7:
                    aa:56:f9:bb:cf:ec:49:c5:e0:c1:2e:e5:4c:f1:26:
                    e8:3c:58:3b:b4:de:70:1d:2c:0e:2d:5f:2e:1c:73:
                    3a:1d:90:dd:29:df:f6:48:88:b9:99:e0:6d:88:ae:
                    ab:31:55:6c:77:1a:1e:ce:36:f1:c7:8b:e9:60:eb:
                    64:41:5b:31:13:94:2d:45:a2:54:cd:ab:35:f6:c6:
                    8b:8e:be:e3:4d:4f:dd:08:68:ac:e1:a8:6c:60:f6:
                    1a:66:a2:b4:32:d0:63:82:91:af:e2:7f:22:90:0a:
                    04:cc:c5:8f:0a:e6:24:6c:07:dd:7c:4c:5f:3e:45:
                    23:69:05:58:3f:f9:c6:26:88:04:00:2b:98:ab:89:
                    09:be:8f:4a:df:bd:dd:54:20:fb:0e:da:ee:90:a2:
                    96:54:50:8c:77:f0:b9:10:dc:56:7c:5f:53:05:e2:
                    a2:db:d1:54:aa:6d:ee:9c:ad:22:a3:65:48:fd:c7:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:18:08:9C:BF:72:75:C1:A9:88:E5:EB:F0:74:8A:22:10:FF:A7:17
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134322e302f32332d3233203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:a3:64:44:d3:6f:61:d7:d3:a1:d9:f1:e7:f3:a7:6e:a0:
         ad:69:45:84:43:85:e4:6c:c0:88:3a:e5:74:32:6e:5c:2e:b1:
         19:ee:ba:17:eb:2f:c8:79:1d:d5:4d:6a:07:1f:f2:9e:a4:bb:
         d0:17:07:d4:83:fb:d2:1a:88:b9:b9:28:21:4e:b6:b7:e0:d0:
         6a:aa:a8:08:86:97:43:f7:36:1f:58:8c:a6:4e:9d:12:f2:d8:
         97:3d:e3:93:a9:b6:03:e5:d5:7a:a8:a2:62:e4:dd:8c:21:e5:
         eb:05:f3:a7:29:79:8d:37:bb:24:a4:89:29:b1:16:c0:da:3b:
         2c:36:3f:bc:69:b0:31:d2:35:d8:83:51:5e:85:fe:a1:28:59:
         47:1e:cc:fe:ac:b6:4b:37:01:74:ed:de:13:01:21:74:d0:65:
         6c:e0:98:13:df:e0:8b:7a:ed:6b:68:9d:1d:fd:f1:cb:89:72:
         24:6b:fb:c8:7d:07:7e:68:06:8e:23:ad:4a:f6:60:97:ec:91:
         21:15:1b:6b:0a:a4:1f:f1:f5:2b:52:6f:4b:ef:63:8b:b9:26:
         78:5c:d7:52:8a:09:2f:25:9f:f6:54:ed:b0:cf:dc:ba:df:34:
         9e:db:16:63:1c:4a:28:cf:db:ac:5b:f5:fd:46:01:78:6b:f5:
         5a:4c:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org