Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/3132382e3230312e31312e302f32342d3234203d3e20323636363033.roa
File:                     3132382e3230312e31312e302f32342d3234203d3e20323636363033.roa (raw, json)
Hash identifier:          dHHo+1QQ3bfMy7QELJBfpggaqsDjFP3IXI4/cjAu2og=
Subject key identifier:   52:99:B4:7E:99:E5:C2:3D:06:1A:C7:2A:03:92:F9:D4:C9:E5:1A:5A
Certificate issuer:       /CN=15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE
Certificate serial:       68A3BB1E62002FF4DE6BA3A6666FF761725C40DA
Authority key identifier: 15:EE:5B:E9:48:C4:D2:5B:AD:71:E1:BC:93:EA:05:D9:04:40:EF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/3132382e3230312e31312e302f32342d3234203d3e20323636363033.roa
Signing time:             Mon 07 Feb 2022 12:09:30 +0000
ROA not before:           Mon 07 Feb 2022 12:04:30 +0000
ROA not after:            Mon 06 Feb 2023 12:09:30 +0000
asID:                     266603
IP address blocks:        128.201.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a3:bb:1e:62:00:2f:f4:de:6b:a3:a6:66:6f:f7:61:72:5c:40:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE
        Validity
            Not Before: Feb  7 12:04:30 2022 GMT
            Not After : Feb  6 12:09:30 2023 GMT
        Subject: CN=5299B47E99E5C23D061AC72A0392F9D4C9E51A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:35:23:c2:8e:84:a0:e5:cc:7a:18:0e:5d:
                    12:ae:91:ea:d2:53:71:91:20:b0:9d:f8:3f:77:93:
                    71:d2:fd:fd:cc:20:f7:ad:7a:86:48:ac:eb:35:24:
                    39:3e:ec:84:ca:00:f1:c5:de:76:47:dd:51:3a:94:
                    36:e6:bd:13:4a:66:24:3a:a3:aa:a4:57:58:71:5a:
                    79:5a:f2:5c:2e:bc:85:19:4b:47:d4:2a:66:74:1f:
                    75:4b:3b:86:74:f2:65:dc:65:bd:c8:c3:66:0c:7b:
                    74:24:20:8c:86:3e:54:c4:73:14:61:24:67:34:02:
                    eb:ac:97:95:3e:e0:53:4f:f1:c3:a6:ea:8b:92:2f:
                    93:5d:c8:03:b2:79:28:1b:76:7d:ab:b8:b1:ca:b9:
                    6f:e1:ef:fd:71:24:0c:3a:ae:cb:1b:31:a3:77:b7:
                    d3:7e:77:cb:d1:71:fa:6c:0f:53:dc:32:80:16:ef:
                    e8:7e:8b:4f:e2:a1:5c:1a:0f:eb:3b:1d:a9:bd:bc:
                    e4:5c:3e:29:fc:04:c2:97:12:63:45:f5:4d:e7:e1:
                    88:e9:1b:05:47:bf:21:1e:98:19:91:75:99:b1:f9:
                    db:c5:76:46:2c:34:71:62:d2:6e:a0:2a:41:d5:c4:
                    f5:fc:50:35:dc:7b:a0:88:af:11:88:29:49:db:5d:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:99:B4:7E:99:E5:C2:3D:06:1A:C7:2A:03:92:F9:D4:C9:E5:1A:5A
            X509v3 Authority Key Identifier:
                keyid:15:EE:5B:E9:48:C4:D2:5B:AD:71:E1:BC:93:EA:05:D9:04:40:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/3132382e3230312e31312e302f32342d3234203d3e20323636363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:e4:2b:ca:dd:9c:bc:d4:56:45:6c:fb:97:c4:9e:e3:ae:
         4b:03:4c:74:6d:ba:be:29:9d:c6:09:08:da:ce:df:b4:50:7d:
         70:88:2d:06:dd:a2:de:63:5b:fd:f4:9f:90:ed:1e:9c:a7:26:
         0d:63:ec:14:14:61:6b:12:94:99:58:45:9d:85:cd:40:7b:05:
         b1:58:b0:dd:3b:b5:88:89:a3:3d:b0:67:3c:f6:00:ba:2c:de:
         70:cc:b7:12:66:a0:99:52:b4:13:7c:db:c2:d2:7a:30:e2:cd:
         c0:2d:08:dc:de:a6:f4:3b:32:3a:1e:5c:1b:0b:2b:ad:ca:c9:
         d0:a7:3e:28:d3:ad:93:53:d2:f2:46:6a:36:b5:8e:51:08:c2:
         dd:45:fc:ad:06:2b:f7:2b:c7:15:b0:9f:95:59:de:04:c8:72:
         2d:f8:cf:18:63:49:75:44:01:6e:94:e1:62:ec:39:3a:cc:5f:
         f7:31:39:2f:9b:22:7f:16:35:7c:84:64:a5:67:5f:35:39:bf:
         0f:c6:74:ed:72:6e:99:cd:c0:67:81:9d:61:55:c5:c7:1e:8b:
         69:dc:b6:ae:bf:b4:7e:b1:17:39:51:20:45:2b:fa:1a:5f:0d:
         c2:bf:c5:30:b0:74:21:05:da:0c:3a:97:fe:f3:59:df:03:4f:
         19:e4:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org