Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33352e302f32342d3234203d3e20323731323538.roa
File:                     3132382e3230312e33352e302f32342d3234203d3e20323731323538.roa (raw, json)
Hash identifier:          ZmjrMeJG5X6+Md4z/jvnYDTrbpsujoZOvQLVXDhtStU=
Subject key identifier:   E1:6E:2B:5C:B9:E1:F5:CE:EB:99:B3:CC:BA:B7:BE:C4:91:D1:15:D8
Certificate issuer:       /CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
Certificate serial:       094DCEEF4425221C7CC29B2BA75BFF9BBD63E94A
Authority key identifier: F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33352e302f32342d3234203d3e20323731323538.roa
Signing time:             Fri 25 Aug 2023 02:29:50 +0000
ROA not before:           Fri 25 Aug 2023 02:24:50 +0000
ROA not after:            Fri 23 Aug 2024 02:29:50 +0000
asID:                     271258
IP address blocks:        128.201.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4d:ce:ef:44:25:22:1c:7c:c2:9b:2b:a7:5b:ff:9b:bd:63:e9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
        Validity
            Not Before: Aug 25 02:24:50 2023 GMT
            Not After : Aug 23 02:29:50 2024 GMT
        Subject: CN=E16E2B5CB9E1F5CEEB99B3CCBAB7BEC491D115D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:45:a0:a4:98:22:7d:8d:22:54:b4:8b:62:
                    34:7c:b0:3c:a8:c5:2d:cb:e6:5a:05:fd:40:f0:05:
                    ba:15:34:37:e0:c6:b7:78:15:55:58:ad:3a:a8:42:
                    b4:5b:91:02:27:70:ab:0f:e8:e0:23:28:54:0b:c3:
                    d2:54:dc:4d:5a:7f:05:e5:fb:1e:6c:49:78:dc:6c:
                    4b:8e:cd:f5:3e:e2:5d:e2:b8:88:40:87:20:74:65:
                    bc:98:e3:ee:d8:96:d4:28:62:6e:3e:3d:3b:4a:a5:
                    3c:9c:20:44:85:ee:9e:43:84:f8:f5:d5:a9:f6:d3:
                    9f:47:9f:4c:ff:5a:4c:78:d6:63:1e:20:03:e3:8b:
                    38:41:e3:d9:d2:af:98:a0:1d:20:c4:69:3f:53:20:
                    e4:cf:fe:5d:b8:93:f1:e0:b2:c6:eb:da:ba:65:0f:
                    5b:88:d3:ad:9f:5f:a0:30:0b:3e:6c:b5:b3:7c:a6:
                    b5:af:85:f0:ea:14:07:52:3c:8f:bd:30:50:ef:02:
                    b2:64:27:50:4e:8f:e8:0e:d9:bc:b2:1e:c5:5c:32:
                    d1:36:57:e6:73:19:ab:f8:0f:d9:5f:f8:32:dc:44:
                    b5:39:00:6e:b1:96:a8:72:f2:1c:43:7b:03:0d:2a:
                    8a:55:d5:bd:e0:5f:d1:94:6d:16:49:4a:50:17:77:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:2B:5C:B9:E1:F5:CE:EB:99:B3:CC:BA:B7:BE:C4:91:D1:15:D8
            X509v3 Authority Key Identifier:
                keyid:F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33352e302f32342d3234203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:e2:c7:4f:8b:23:d4:00:0a:c4:7d:60:0b:9a:44:46:5e:
         b7:26:e2:a6:be:fc:ee:65:3d:c5:b8:ad:cb:03:fd:e2:58:c5:
         3b:d2:65:09:ac:04:a7:74:2a:d4:fd:8f:d5:67:77:3b:c3:64:
         8a:92:d9:76:b3:15:e8:a2:9d:01:4a:49:09:04:f3:1e:25:78:
         b0:af:d0:b4:9b:dd:ef:ac:68:da:26:02:62:81:da:49:28:c2:
         d5:fb:8c:f3:ae:8b:82:1e:ae:06:f4:08:85:86:56:e0:f3:a7:
         ee:c0:79:d4:a9:f5:99:1a:8f:1a:9d:2c:3d:9e:3f:97:9f:67:
         fd:95:ea:53:34:e6:e1:45:8a:22:f5:66:33:91:af:c2:4c:d0:
         84:0e:3e:29:c4:b0:f5:c5:24:3d:24:ef:5e:3d:bc:af:8b:fe:
         5a:42:1e:02:1c:b0:c4:7c:26:2d:74:89:0a:89:b1:a4:30:49:
         75:50:01:ca:a9:37:6a:8b:64:7f:6c:14:a8:dd:35:eb:7c:bc:
         37:5d:15:c9:13:10:5a:49:f9:c5:d2:dd:a1:e6:cd:11:81:9c:
         b6:62:04:bd:6c:69:08:52:98:c2:07:25:c6:a1:6f:28:a4:2c:
         d2:2c:59:cd:f5:98:1c:c5:96:f7:61:36:30:8a:ca:ab:e8:31:
         23:fa:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org