Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32332d3233203d3e20323635383936.roa
File:                     3132382e3230312e3138382e302f32332d3233203d3e20323635383936.roa (raw, json)
Hash identifier:          mRT6ifxY8P8VLI1tVW7MWeS7VTqwfRqiZRHT8a6wcis=
Subject key identifier:   F2:70:5B:85:3E:42:D8:48:E4:99:B0:3A:67:12:FB:83:61:13:E3:6C
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       16AB88F947D57D6EC89D9EC1E2A359CCE0411C45
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32332d3233203d3e20323635383936.roa
Signing time:             Wed 29 Nov 2023 04:34:29 +0000
ROA not before:           Wed 29 Nov 2023 04:29:29 +0000
ROA not after:            Wed 27 Nov 2024 04:34:29 +0000
asID:                     265896
IP address blocks:        128.201.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ab:88:f9:47:d5:7d:6e:c8:9d:9e:c1:e2:a3:59:cc:e0:41:1c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Nov 29 04:29:29 2023 GMT
            Not After : Nov 27 04:34:29 2024 GMT
        Subject: CN=F2705B853E42D848E499B03A6712FB836113E36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:09:9e:03:86:bc:76:ad:47:36:cf:9f:fa:
                    48:7e:e3:53:70:f9:91:68:a8:ce:d3:8a:3c:93:77:
                    6a:1b:68:3c:f7:ef:ac:6c:0d:b7:2e:c0:50:16:da:
                    8f:be:20:9b:98:06:29:f5:3c:58:8a:27:11:31:0f:
                    7b:49:11:48:78:a1:8c:0e:a0:4e:82:2d:a8:e8:c5:
                    88:e6:c9:83:a4:91:d2:0e:0c:96:d7:ce:c3:07:89:
                    3a:45:0d:a0:8b:f7:f9:19:f3:17:a8:d9:06:9c:b2:
                    08:d8:f3:ac:c8:36:4a:3b:c7:b3:84:3b:5e:21:17:
                    9c:81:1d:de:df:33:a9:b4:1f:59:58:91:0d:33:52:
                    0a:de:08:c1:14:a9:21:96:7b:bd:bd:04:67:5f:41:
                    88:68:f1:b1:9c:84:c6:03:29:6c:80:06:33:41:01:
                    35:89:87:26:1e:38:6f:a3:c2:b5:2d:c8:d2:f8:a4:
                    7f:90:d5:95:c2:d6:ac:3a:55:e0:3c:6e:fe:df:b9:
                    58:e9:74:23:35:c5:2a:6b:7f:95:cf:ac:ea:41:5c:
                    e9:5e:50:33:9b:92:5b:8b:0d:27:24:d5:57:38:a7:
                    82:a6:c1:39:13:66:05:b3:39:64:88:c7:f7:e6:57:
                    d3:3b:99:de:4f:62:55:c6:ab:a9:df:c8:43:04:6d:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:5B:85:3E:42:D8:48:E4:99:B0:3A:67:12:FB:83:61:13:E3:6C
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32332d3233203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:d3:49:bb:45:d2:d7:7c:87:8e:2f:cc:36:1c:8d:f6:33:53:
         c0:74:55:aa:25:dc:be:18:14:4a:b2:04:eb:49:5a:24:80:15:
         02:36:46:49:7b:bf:f3:64:0a:b2:da:18:88:f4:2a:2e:87:bc:
         9d:b9:1f:eb:5e:15:c8:cd:51:cf:4e:98:82:3f:b8:08:3f:b2:
         9c:07:2b:6d:bb:a1:93:21:1e:4a:78:42:52:b8:10:4d:0f:ae:
         fa:7f:32:24:7b:d4:69:82:75:c2:39:3e:85:3a:7b:20:95:cb:
         ad:f5:f9:31:50:a5:75:af:dd:00:b3:9c:93:a7:38:76:52:0f:
         82:7b:f4:ea:73:0b:4b:2f:31:11:ad:04:5e:4c:0a:14:39:bd:
         34:49:93:b7:26:6c:9d:0e:58:ff:85:d2:bd:cc:ee:16:ea:93:
         b7:43:b8:65:97:ac:63:d1:03:b6:d3:19:43:ad:5a:12:8e:f7:
         66:02:90:6b:11:0a:dc:cb:6c:fb:20:41:d5:f2:53:29:bf:c4:
         2a:55:9a:08:ba:7e:69:ea:ab:8a:36:90:a9:d3:56:3c:b5:c2:
         36:a2:e8:9e:8d:05:8a:86:c5:20:00:ef:67:24:f3:f7:9f:47:
         34:ac:08:44:87:14:07:48:d3:79:72:43:66:67:81:e4:63:a3:
         89:2f:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org