Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa
File:                     3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa (raw, json)
Hash identifier:          UReSsPS7Jhabe15OTrU/R+hT2WNYONqTGPKRZwjteqc=
Subject key identifier:   B2:F3:70:F6:02:FB:6F:DB:ED:14:6A:D7:60:32:3B:22:FD:3E:27:3D
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       15C8ED1C061146B6B8518412ACF0C29AEA721632
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa
Signing time:             Fri 15 Dec 2023 16:00:00 +0000
ROA not before:           Fri 15 Dec 2023 15:55:00 +0000
ROA not after:            Fri 13 Dec 2024 16:00:00 +0000
asID:                     266623
IP address blocks:        128.201.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c8:ed:1c:06:11:46:b6:b8:51:84:12:ac:f0:c2:9a:ea:72:16:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Dec 15 15:55:00 2023 GMT
            Not After : Dec 13 16:00:00 2024 GMT
        Subject: CN=B2F370F602FB6FDBED146AD760323B22FD3E273D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:8f:06:9d:fa:78:c8:a7:03:aa:12:dd:e9:
                    cc:b9:89:7f:ac:e8:15:06:56:8b:1f:55:52:04:17:
                    50:7f:43:db:08:c5:4c:01:0c:79:87:b0:8c:cb:ce:
                    fc:bf:7e:11:eb:ff:59:a8:16:0f:60:8f:e2:fb:19:
                    b0:6f:8c:f3:da:2e:26:fd:56:54:13:3e:00:bf:ea:
                    bb:1b:c2:d1:0b:4d:f2:5a:0b:88:f9:39:b1:a0:ef:
                    ed:7d:51:e8:13:51:7a:05:ee:38:5b:a2:0f:67:c4:
                    81:c0:32:6d:45:87:fd:45:79:d2:4f:20:f7:cc:cd:
                    3f:00:a8:43:65:a2:e8:d8:01:bd:94:2a:60:a5:ec:
                    b0:54:e2:3b:42:13:da:6a:06:51:4f:f3:1f:c0:f0:
                    29:88:88:b7:8f:70:a6:3c:a6:93:c7:39:9f:b8:5b:
                    67:4e:82:dd:2d:ad:eb:5a:17:e5:4b:f3:84:a0:60:
                    fb:4e:0c:c9:40:00:a5:3c:95:6b:34:81:ec:c1:41:
                    95:df:17:ca:22:28:d5:b4:db:3d:46:42:00:3a:80:
                    da:22:41:0b:58:13:e1:90:7e:5b:1f:52:18:62:df:
                    aa:ce:b0:d0:d9:6a:78:88:27:8d:b4:7f:cb:4b:7c:
                    53:b5:90:d3:7f:6d:09:31:f8:e1:7f:6b:4d:80:db:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F3:70:F6:02:FB:6F:DB:ED:14:6A:D7:60:32:3B:22:FD:3E:27:3D
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:f0:33:6f:bd:1b:31:2e:90:6e:22:75:cb:d1:82:38:81:
         8b:c7:12:d3:3a:09:e4:00:44:fb:14:13:8e:f1:45:24:a0:22:
         a5:26:42:89:fb:18:dc:c2:54:bb:96:02:51:01:4f:0f:26:bc:
         19:d3:e2:e6:f2:d2:38:dd:c0:aa:2a:fa:02:57:b4:4e:5c:61:
         4b:ae:bd:e1:a2:e4:ff:8b:14:c1:47:47:08:62:2c:33:fb:1c:
         03:bb:77:ed:98:c0:87:fa:34:7d:b7:52:8e:6e:f0:2c:8b:f3:
         91:ed:2c:3d:21:a5:60:b6:96:f6:1f:cb:7a:22:b6:c5:6a:28:
         6d:aa:c7:4d:d9:cd:e0:59:e4:9a:c9:22:ec:f3:1d:30:81:d5:
         bf:c0:36:11:c5:b4:cd:41:c3:95:17:8d:b3:5c:e2:a9:0e:a6:
         14:d0:05:08:97:11:b7:5d:bd:e0:bf:c0:ae:62:b9:d9:ce:73:
         5d:4e:12:80:2c:37:e9:37:77:cf:8a:fa:1b:b0:65:34:a8:a7:
         a6:2a:48:2a:87:5f:6b:06:76:35:d3:b4:ba:34:64:72:83:03:
         79:79:e6:a2:ca:a0:fb:6d:f2:c4:60:a8:a2:fd:58:ab:c6:d2:
         ea:d7:b9:f6:ab:8d:99:7e:c2:17:fd:cd:e8:7d:c6:5a:17:47:
         7d:b1:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org