Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134322e302f32342d3234203d3e20323636363331.roa
File:                     3132382e3230312e3134322e302f32342d3234203d3e20323636363331.roa (raw, json)
Hash identifier:          Iyq3okXrFb/tMsIfSUapbfzqfOFb5ox9FFj5WttvPrI=
Subject key identifier:   40:3C:6C:3A:15:75:A1:23:49:DF:9D:F9:26:8D:6F:B1:2C:0E:C6:DB
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       4761A6DC024F2D63C060490208DC827F15CCB537
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134322e302f32342d3234203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:17 +0000
ROA not before:           Thu 23 Nov 2023 19:28:17 +0000
ROA not after:            Thu 21 Nov 2024 19:33:17 +0000
asID:                     266631
IP address blocks:        128.201.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:61:a6:dc:02:4f:2d:63:c0:60:49:02:08:dc:82:7f:15:cc:b5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:17 2023 GMT
            Not After : Nov 21 19:33:17 2024 GMT
        Subject: CN=403C6C3A1575A12349DF9DF9268D6FB12C0EC6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:37:dc:8d:1e:a3:02:27:f3:26:de:46:7a:
                    7c:a9:01:aa:4f:64:c7:28:f6:e0:10:aa:c7:56:42:
                    c4:68:d0:96:57:66:ec:be:cd:86:9d:4d:c9:86:f4:
                    b9:09:2a:57:07:3f:cd:3e:be:b1:a3:c9:2c:51:14:
                    68:b2:97:e0:e9:6f:e3:df:d3:59:d1:a4:26:52:04:
                    af:d7:f6:87:6c:4a:94:a7:57:95:35:90:52:96:d9:
                    b1:15:c9:a1:4b:1d:07:b7:c5:cd:56:de:ac:74:41:
                    a1:0e:54:8c:eb:15:49:38:65:75:30:9f:87:3c:3a:
                    ae:0e:07:01:62:a6:5e:76:34:d7:5b:76:16:56:f3:
                    b7:ae:80:fb:3d:e8:f2:eb:da:96:0c:ca:d0:8b:df:
                    f7:a5:20:1c:48:e9:c3:60:22:89:5a:76:dc:94:af:
                    67:f6:1b:01:e1:b2:0a:ee:d5:51:a2:92:4d:96:78:
                    bb:cd:61:ed:e1:d3:fe:7d:75:58:51:81:56:97:98:
                    71:ff:4b:53:1b:21:09:d3:13:c7:38:3c:13:93:bd:
                    0e:aa:76:a1:bb:51:56:cb:18:3c:ea:15:99:28:8a:
                    f7:91:b8:26:74:2a:78:68:94:7a:16:f9:1e:1a:94:
                    3a:dc:30:8e:de:26:78:26:c2:76:c3:05:3a:b2:70:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:6C:3A:15:75:A1:23:49:DF:9D:F9:26:8D:6F:B1:2C:0E:C6:DB
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134322e302f32342d3234203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:e7:88:53:04:46:4a:44:d3:8f:b0:84:16:13:eb:60:c2:
         38:83:a0:35:4c:33:0b:92:24:7a:22:a7:aa:78:c3:b9:58:e6:
         48:0a:09:bd:d2:ca:94:33:d4:bf:fd:07:92:72:03:69:d3:f5:
         fe:90:61:bc:dd:c2:fc:46:28:42:36:7e:ea:78:4f:85:fa:f6:
         b2:5e:37:62:14:01:3d:c6:35:ee:bd:8d:cc:43:1f:92:2f:1e:
         8b:11:6b:21:85:61:bd:9d:10:4a:cd:9a:ba:41:39:bd:91:af:
         f0:a2:62:a5:0e:49:68:1f:20:9b:a3:aa:be:9d:19:cc:36:ad:
         ef:0d:d9:55:ce:e2:f2:cc:ef:5a:90:af:12:50:0d:c5:50:6c:
         a5:67:f2:b2:0d:d6:5f:0c:3b:22:26:f7:b5:51:de:d4:75:82:
         68:61:a0:9e:6c:95:d0:6f:74:b0:e6:b5:56:d3:c6:48:49:e0:
         46:bb:15:fc:f7:83:dc:e6:9b:aa:2d:9c:e7:35:e5:c1:d9:d1:
         e1:2b:b8:96:12:f5:03:a5:df:7b:24:6e:72:cd:97:1d:a6:88:
         db:00:2f:19:60:63:20:ed:3b:9d:e9:39:50:ba:6d:77:3d:9a:
         9d:8f:e8:0b:7b:01:68:e2:a3:53:9c:56:88:b0:2f:c7:4e:be:
         81:9e:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org