Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33342e302f32342d3234203d3e20323731323538.roa
File:                     3132382e3230312e33342e302f32342d3234203d3e20323731323538.roa (raw, json)
Hash identifier:          bm2TSuQBqNjkEGgI2qGAHBBLhn2wxtlvGFvRmnhFyUk=
Subject key identifier:   CF:15:41:1F:C2:4F:17:23:01:81:22:E2:60:DF:C0:5F:A3:9D:7E:A3
Certificate issuer:       /CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
Certificate serial:       0AE716CEBD8E7A28FE3559583D0708E66E1AC197
Authority key identifier: F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33342e302f32342d3234203d3e20323731323538.roa
Signing time:             Fri 25 Aug 2023 02:29:48 +0000
ROA not before:           Fri 25 Aug 2023 02:24:48 +0000
ROA not after:            Fri 23 Aug 2024 02:29:48 +0000
asID:                     271258
IP address blocks:        128.201.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e7:16:ce:bd:8e:7a:28:fe:35:59:58:3d:07:08:e6:6e:1a:c1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
        Validity
            Not Before: Aug 25 02:24:48 2023 GMT
            Not After : Aug 23 02:29:48 2024 GMT
        Subject: CN=CF15411FC24F1723018122E260DFC05FA39D7EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:ef:c4:40:91:11:74:13:ef:d1:f1:b3:ab:
                    d2:b5:64:19:ff:dd:d8:56:aa:50:6f:ac:78:d4:e6:
                    a4:c7:b3:b3:c2:2e:31:5c:6a:c2:ba:54:2e:af:a3:
                    1d:83:f9:07:21:9f:77:33:f7:2b:9b:d1:da:8a:f0:
                    96:74:25:2f:d8:ae:0f:8b:e8:88:df:da:99:61:ef:
                    0b:79:ec:97:03:19:f0:f9:92:7b:fc:2f:24:ee:8f:
                    a7:2c:4f:a9:5c:7e:9a:93:f2:c2:ed:8b:c5:da:ef:
                    f7:e3:7f:d1:bc:a5:39:b1:2c:09:a8:da:5a:21:70:
                    7d:0a:96:e4:cd:7d:19:79:da:29:cd:51:a6:f5:60:
                    54:34:d6:b7:66:9f:2e:53:7b:56:d5:27:6f:b0:88:
                    ca:18:7b:12:96:b1:96:7e:80:ef:08:81:ef:8b:ce:
                    9f:dc:29:b0:62:fe:35:7a:e7:c2:36:00:b7:71:6a:
                    24:5e:93:4b:42:dc:d0:c2:36:30:6b:f6:42:f3:fa:
                    28:eb:d0:35:56:e9:de:d5:6a:47:42:23:c0:29:a7:
                    ae:a9:ad:0f:d8:d0:c5:ae:fb:6c:c3:9f:63:b4:0a:
                    52:e8:03:0a:35:a6:11:51:ae:26:76:71:61:91:24:
                    9c:d9:d7:b6:5b:0d:e1:06:b6:ff:54:91:d6:a2:a1:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:41:1F:C2:4F:17:23:01:81:22:E2:60:DF:C0:5F:A3:9D:7E:A3
            X509v3 Authority Key Identifier:
                keyid:F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33342e302f32342d3234203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:1b:dc:20:c6:e7:cc:cb:3b:f9:4e:e9:c4:44:b9:6b:f5:
         0c:b4:02:65:90:c5:ea:ef:10:16:2f:42:fd:d2:c2:3e:b5:b5:
         aa:ea:f9:d1:ef:8d:1f:af:93:99:93:1f:b9:ec:92:c6:a9:fe:
         8d:29:1c:1f:98:10:ac:98:92:15:3c:44:65:e8:18:28:8e:17:
         e4:d7:16:11:29:d2:79:6d:53:50:f5:de:dc:d8:9c:48:9c:19:
         4f:c9:0b:96:2c:ca:dc:5a:88:9e:4d:24:4e:0c:87:57:a7:a5:
         8b:29:e0:ae:ed:51:b0:33:59:72:c1:9e:1c:0e:2c:97:97:85:
         34:ea:15:51:18:0c:ed:02:ea:f1:89:ac:15:78:78:54:34:0f:
         e4:1f:00:7f:8e:8d:90:73:45:fc:97:73:42:be:27:f0:78:2a:
         8f:5e:1a:94:51:73:9b:9a:03:78:99:67:46:a2:c1:9f:c6:1f:
         e0:f6:e7:95:a3:6a:56:1d:e5:15:d4:13:59:d0:9f:e4:74:80:
         fc:a8:a8:c2:33:e6:36:9e:44:ef:53:85:e0:7c:1d:2a:38:18:
         82:a9:a0:08:7f:3e:d7:2b:b0:7e:03:c2:cd:e1:b3:3f:34:4a:
         d8:6f:e4:eb:4c:e2:3f:5e:50:fa:64:e8:53:4b:d0:1c:e0:f9:
         ad:31:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org