Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/3132382e3230312e31302e302f32342d3234203d3e20323636363033.roa
File:                     3132382e3230312e31302e302f32342d3234203d3e20323636363033.roa (raw, json)
Hash identifier:          2HDaVzF1aeeZ0xXjsCkhZEtq+QtPdsEiXGh5qDWWtSQ=
Subject key identifier:   3B:BF:EB:71:40:E3:9B:78:9E:37:CA:04:DD:5F:A0:89:04:03:E0:4E
Certificate issuer:       /CN=15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE
Certificate serial:       5A97ECC2DD9BEA3F3AE5FCF1E7995342C279C2DF
Authority key identifier: 15:EE:5B:E9:48:C4:D2:5B:AD:71:E1:BC:93:EA:05:D9:04:40:EF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/3132382e3230312e31302e302f32342d3234203d3e20323636363033.roa
Signing time:             Mon 07 Feb 2022 12:09:30 +0000
ROA not before:           Mon 07 Feb 2022 12:04:30 +0000
ROA not after:            Mon 06 Feb 2023 12:09:30 +0000
asID:                     266603
IP address blocks:        128.201.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:97:ec:c2:dd:9b:ea:3f:3a:e5:fc:f1:e7:99:53:42:c2:79:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE
        Validity
            Not Before: Feb  7 12:04:30 2022 GMT
            Not After : Feb  6 12:09:30 2023 GMT
        Subject: CN=3BBFEB7140E39B789E37CA04DD5FA0890403E04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:e4:32:f8:b3:d8:45:74:88:42:81:b8:8b:
                    24:d7:fc:a9:70:07:a7:62:d8:56:3c:ad:f4:b5:88:
                    73:70:a3:a9:b2:4f:d4:14:07:64:30:bf:96:10:fe:
                    81:f4:45:53:8a:95:6c:3f:b1:94:9f:e5:92:77:23:
                    fd:20:00:16:44:ab:98:2a:0e:4b:82:e8:be:1b:d3:
                    f3:a6:98:31:30:b8:d1:82:5e:54:dd:a6:79:2f:a6:
                    a7:01:f4:7e:ca:0f:b1:3a:a3:f6:30:62:af:68:88:
                    a0:47:7c:67:f4:da:a9:89:44:6c:64:ba:6c:23:70:
                    23:ab:43:17:02:83:e4:d6:2c:24:f9:26:61:84:3d:
                    60:2d:7a:26:89:76:6b:a8:f2:49:ed:b8:d1:21:05:
                    ff:04:06:05:b7:cb:0f:f1:10:38:d1:f7:26:da:8c:
                    3f:83:02:f8:e6:b0:20:66:43:b9:1f:91:0a:58:3f:
                    6d:b1:dd:74:6b:9b:7c:a5:c6:64:52:40:24:b1:7b:
                    60:20:b6:1f:45:5c:43:b0:89:9f:9b:94:71:0b:22:
                    f5:e7:9a:ee:72:b5:9b:d2:ce:2c:9b:3b:eb:3f:80:
                    0b:b4:2a:ce:83:d0:f8:db:2e:7c:49:d3:18:ed:cf:
                    a5:7c:fe:1a:75:4a:70:3f:f8:db:b8:21:0a:5d:ec:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BF:EB:71:40:E3:9B:78:9E:37:CA:04:DD:5F:A0:89:04:03:E0:4E
            X509v3 Authority Key Identifier:
                keyid:15:EE:5B:E9:48:C4:D2:5B:AD:71:E1:BC:93:EA:05:D9:04:40:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/3132382e3230312e31302e302f32342d3234203d3e20323636363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:78:db:8a:39:a3:f9:ac:f8:f9:f9:76:bd:b7:b5:2e:db:e4:
         82:40:5e:a3:1b:14:96:03:ad:77:ce:76:fc:b2:ab:10:f5:3d:
         ea:b6:21:19:87:1f:b4:40:a1:11:22:6d:2b:5e:53:7c:a5:7b:
         63:c3:c1:a1:16:b6:b5:cb:1f:74:f1:d6:7a:a7:89:7d:36:cd:
         74:ef:60:bf:8c:02:a6:ad:b6:30:9a:86:16:0d:10:fc:4c:2e:
         2c:4b:bf:32:8a:66:ae:66:a0:19:85:55:ab:98:17:5f:3a:52:
         f6:df:74:52:4d:0b:3b:f7:75:08:71:c7:d6:80:74:e3:10:51:
         5f:08:d6:9a:a7:0d:28:45:89:d1:54:96:d8:83:c3:31:d4:6d:
         05:b9:0f:c9:14:9c:2d:07:f9:3c:f4:10:07:bb:32:b3:13:f1:
         da:7c:ea:57:dd:c1:09:9f:e9:84:38:b2:ed:21:d0:5f:e2:b1:
         c4:79:06:90:20:2d:5a:ae:30:3a:2c:28:03:7f:f2:2b:99:2b:
         a4:b7:28:34:7f:ab:cf:33:71:45:26:c1:81:e4:44:95:01:ce:
         93:22:1c:22:3a:42:64:f6:6f:46:1a:4d:6f:d8:bb:41:e0:84:
         ab:ff:cf:56:48:d8:3c:fe:4b:ef:92:85:46:9c:45:9d:b2:25:
         1b:a6:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org