Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa
File:                     3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa (raw, json)
Hash identifier:          xF+WCCnyCQb9RKR+6Oial0y7G0gP9zxP9wMZYVj06A8=
Subject key identifier:   0A:A7:7B:95:1C:4D:34:B9:5E:3E:F6:12:6F:EF:A9:3F:9D:C2:FB:05
Certificate issuer:       /CN=1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986
Certificate serial:       2D29E686C7E5D6C2839E553C452932EF03018F63
Authority key identifier: 1F:03:81:96:A9:CC:9C:D9:67:E3:F5:DA:06:C7:7C:F9:EA:A4:F9:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa
Signing time:             Thu 30 Nov 2023 16:18:57 +0000
ROA not before:           Thu 30 Nov 2023 16:13:57 +0000
ROA not after:            Thu 28 Nov 2024 16:18:57 +0000
asID:                     265897
IP address blocks:        128.201.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:e6:86:c7:e5:d6:c2:83:9e:55:3c:45:29:32:ef:03:01:8f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986
        Validity
            Not Before: Nov 30 16:13:57 2023 GMT
            Not After : Nov 28 16:18:57 2024 GMT
        Subject: CN=0AA77B951C4D34B95E3EF6126FEFA93F9DC2FB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:e0:e0:50:eb:02:72:9f:c5:8b:b1:65:7d:
                    24:03:6b:f3:e1:ad:33:da:bf:06:4c:30:4b:bf:84:
                    1e:ef:96:47:eb:6d:12:6b:b1:3b:a5:05:15:7f:4a:
                    c0:06:12:c7:aa:5e:4d:b9:4f:51:fb:92:f5:b0:a0:
                    62:25:a8:a4:0a:7c:6f:91:12:1d:d6:bb:64:de:48:
                    bd:0e:b5:da:80:45:32:83:1e:96:24:f0:c2:2a:47:
                    a6:e1:c1:45:c2:c4:bf:c9:78:8d:e9:1b:eb:d3:05:
                    fa:a6:49:29:32:9b:4c:34:37:2a:ea:1c:e7:cd:d3:
                    c7:16:a5:6b:36:98:ed:94:ce:94:72:7f:47:6f:7d:
                    f7:bb:cd:78:f0:83:59:e4:84:a7:2a:a3:fa:1f:2e:
                    51:4d:0b:3f:d1:e8:77:76:3b:4f:3b:7b:4d:7a:2c:
                    48:3e:10:45:7d:8e:42:f3:48:a4:ab:1f:29:8f:90:
                    7f:df:c0:a8:08:c4:03:c6:fc:2d:1c:a9:03:06:b3:
                    c6:f1:08:8e:92:2b:3b:c5:81:10:73:a5:39:a5:ad:
                    40:c0:32:92:36:06:50:25:bc:7b:4a:a2:9f:bc:b1:
                    3c:20:ef:d9:7e:9e:da:ca:14:44:44:5b:b5:af:91:
                    4a:3c:7a:17:65:a5:22:ec:91:2c:e5:85:48:03:e2:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:7B:95:1C:4D:34:B9:5E:3E:F6:12:6F:EF:A9:3F:9D:C2:FB:05
            X509v3 Authority Key Identifier:
                keyid:1F:03:81:96:A9:CC:9C:D9:67:E3:F5:DA:06:C7:7C:F9:EA:A4:F9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:25:4e:af:a1:94:47:30:41:b7:d7:9f:7d:ec:d8:45:3f:ac:
         88:3e:44:9f:de:85:41:f7:a6:c7:f7:c1:65:da:cd:77:b5:5f:
         ee:eb:0e:5e:cf:d6:75:c9:7f:60:89:6a:ad:b2:1d:bd:34:95:
         fe:b8:9e:96:08:5c:77:a3:2e:5e:9e:06:94:1a:cb:ea:76:c2:
         0f:ef:4a:f6:55:04:17:85:81:5d:30:b9:a1:e7:82:3c:60:e7:
         1a:0b:8b:e3:6a:cf:5c:55:77:59:19:ec:b6:9d:14:5f:5e:0e:
         a4:f5:f2:a1:3b:d9:74:54:87:9c:65:a5:8a:53:7e:85:b2:5b:
         e0:cb:2a:70:b5:3c:05:b6:19:07:f3:e9:aa:17:b4:78:25:46:
         72:bd:b7:d4:32:76:80:87:59:0e:ae:35:59:dc:aa:77:15:1a:
         f7:85:2f:c2:26:c7:fb:eb:fb:d0:93:07:6d:3d:e5:63:95:a9:
         ec:d7:39:e9:a4:d8:7f:f5:06:13:c2:18:6e:77:4d:b8:32:0b:
         e9:04:3d:cf:a1:eb:9b:a8:41:dc:67:2e:e1:23:1b:ba:a5:86:
         32:fe:5a:d4:5d:88:fb:42:45:57:dc:fe:e6:b7:17:9a:3a:c8:
         74:0e:20:97:b9:20:af:cc:9d:f6:31:be:87:5d:5d:47:0e:02:
         d4:2e:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org