Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33342e302f32332d3233203d3e20323731323538.roa
File:                     3132382e3230312e33342e302f32332d3233203d3e20323731323538.roa (raw, json)
Hash identifier:          YMFh3VogsxWwjtuA9fyUY61S/i91DimD2LBqC6h4cmU=
Subject key identifier:   54:5B:BD:71:AF:A3:A4:29:54:7F:82:E0:54:EB:CD:10:2B:81:64:94
Certificate issuer:       /CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
Certificate serial:       3AF0E4F5AD10F9F75A62096B57122EE53434FAE9
Authority key identifier: F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33342e302f32332d3233203d3e20323731323538.roa
Signing time:             Sat 09 Sep 2023 19:33:30 +0000
ROA not before:           Sat 09 Sep 2023 19:28:30 +0000
ROA not after:            Sat 07 Sep 2024 19:33:30 +0000
asID:                     271258
IP address blocks:        128.201.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f0:e4:f5:ad:10:f9:f7:5a:62:09:6b:57:12:2e:e5:34:34:fa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
        Validity
            Not Before: Sep  9 19:28:30 2023 GMT
            Not After : Sep  7 19:33:30 2024 GMT
        Subject: CN=545BBD71AFA3A429547F82E054EBCD102B816494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:b9:6d:60:84:ae:55:00:30:f7:66:79:57:
                    95:66:7e:43:fd:93:f2:89:f8:e2:65:ae:c3:5e:af:
                    4e:a2:3a:b0:a2:a8:01:aa:e5:72:29:ca:46:b1:67:
                    d6:0d:80:22:bb:5b:89:78:49:dd:06:6b:f7:d6:b4:
                    c7:20:3a:63:dc:3c:8e:00:e1:23:65:51:d3:b1:e4:
                    d5:06:e7:ce:ae:42:51:14:b1:0a:7f:d2:ae:75:14:
                    c0:3b:d9:eb:55:6c:2d:b4:e7:be:bd:16:0f:5b:a5:
                    63:f9:cf:76:0a:68:52:bc:2b:eb:89:eb:1c:9f:ee:
                    0b:85:80:ec:dd:c9:7c:a5:1d:d6:ec:eb:97:54:93:
                    9d:d8:75:ea:44:cc:3f:44:99:59:75:3c:b4:81:17:
                    2c:4a:04:8d:0f:38:a9:1b:3d:d4:c8:b2:b4:54:cf:
                    55:69:51:42:ff:65:5d:b5:55:02:75:c1:50:f2:08:
                    ac:90:c1:b2:b5:6d:39:23:89:82:d6:ef:29:a3:25:
                    6b:e6:15:e3:6d:ee:cf:b5:2f:30:9a:83:2e:af:46:
                    2f:78:30:ba:39:08:a3:6f:21:5e:8c:f0:ba:ac:3b:
                    7f:d7:38:ee:79:55:b6:32:14:ca:23:91:b1:ad:08:
                    2f:6c:74:f7:98:9c:44:33:47:98:37:4e:c8:ab:d7:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:BD:71:AF:A3:A4:29:54:7F:82:E0:54:EB:CD:10:2B:81:64:94
            X509v3 Authority Key Identifier:
                keyid:F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33342e302f32332d3233203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:cd:e5:ef:30:13:a2:eb:61:a2:92:26:dc:ac:45:85:4c:
         de:78:9d:d0:1a:bb:6c:eb:4d:5a:15:fc:c2:60:a1:f6:6f:39:
         44:90:8b:ec:bd:c1:1e:5f:0e:11:a5:6f:cb:f8:3b:eb:e9:30:
         e8:7e:ab:7c:50:bd:40:e7:12:87:84:13:80:2e:99:c5:66:db:
         5b:da:f9:59:df:b6:5d:31:1f:e1:cf:96:8a:6e:fa:9b:23:e0:
         da:37:80:b6:b4:ff:54:56:27:55:12:4d:94:bb:f1:85:16:29:
         eb:d6:17:44:6e:fb:51:0a:2e:02:7e:b2:9c:b5:51:af:64:9d:
         fc:95:f3:d8:f7:ba:e5:83:65:97:e5:03:78:76:85:49:dc:fe:
         cb:3e:9d:36:6c:77:cb:5e:83:d8:b4:6b:a6:d2:4c:bc:69:7b:
         fb:80:cc:ec:79:db:28:43:70:a6:6e:b3:21:13:e4:65:2f:72:
         e9:92:61:a8:14:80:9e:8b:1d:af:5f:11:48:04:6d:29:c8:b6:
         d4:30:f1:db:47:7d:1e:f1:fd:ca:ed:07:3f:f2:06:52:00:c5:
         f1:49:f8:3e:96:e5:d1:ef:4e:58:c9:73:a2:a4:fc:ff:f4:a2:
         69:f5:4c:79:c5:01:50:45:6c:f9:15:1a:0e:3b:60:89:d0:d3:
         fa:8c:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org