Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138392e302f32342d3234203d3e20323635383936.roa
File:                     3132382e3230312e3138392e302f32342d3234203d3e20323635383936.roa (raw, json)
Hash identifier:          uQvGlykuXYsSKpdtXToIIkfItri4YbAFH+MxS+OUAn0=
Subject key identifier:   02:76:8E:E9:32:31:F0:ED:91:E3:0A:72:25:A7:3F:6F:31:6E:41:1C
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       41551AA037F859E940991FE7790D8F224BD34CC5
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138392e302f32342d3234203d3e20323635383936.roa
Signing time:             Wed 29 Nov 2023 04:33:06 +0000
ROA not before:           Wed 29 Nov 2023 04:28:06 +0000
ROA not after:            Wed 27 Nov 2024 04:33:06 +0000
asID:                     265896
IP address blocks:        128.201.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:1a:a0:37:f8:59:e9:40:99:1f:e7:79:0d:8f:22:4b:d3:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Nov 29 04:28:06 2023 GMT
            Not After : Nov 27 04:33:06 2024 GMT
        Subject: CN=02768EE93231F0ED91E30A7225A73F6F316E411C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:7b:b0:b7:9a:7e:bc:cb:51:67:be:98:6d:
                    79:5c:b0:85:fd:d7:0a:ce:46:43:1e:4f:d8:f7:d3:
                    7d:3d:b5:6e:45:f9:52:ec:79:fb:ba:04:b4:9b:2d:
                    83:5d:17:18:a0:dd:4c:3a:19:b6:8e:dc:e4:ec:19:
                    cb:0c:a8:fa:65:d3:7d:4f:30:fe:56:a1:72:65:89:
                    d9:da:22:ad:2c:8d:fa:ed:12:42:c9:17:a7:14:9d:
                    96:23:eb:5b:08:58:e5:3b:71:8c:c3:5c:14:8c:f8:
                    5a:2b:c1:b9:cd:18:47:e5:b4:24:c1:5f:e7:a3:e2:
                    53:d1:1c:e8:34:fa:ff:57:c8:f7:1a:fb:e5:cd:85:
                    1f:67:08:c4:98:6f:32:60:8c:e0:6f:d6:53:91:52:
                    cb:d7:38:e5:fa:9a:a1:89:e8:74:bc:10:d9:3b:67:
                    b8:4c:13:a6:ff:d1:43:fd:4f:8b:2d:a3:0b:61:dc:
                    ee:7a:d3:db:7e:32:cf:76:05:a4:0a:42:d0:c5:8f:
                    6e:8d:f1:ed:e9:55:8e:e4:14:33:1e:d6:6b:12:55:
                    48:25:83:33:5d:47:95:80:3e:ea:b4:52:fd:b1:85:
                    81:a7:ab:81:62:00:69:90:ce:a4:77:d3:a9:5e:07:
                    40:e2:d0:0c:16:ba:8c:f3:0b:cd:20:91:47:12:51:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:8E:E9:32:31:F0:ED:91:E3:0A:72:25:A7:3F:6F:31:6E:41:1C
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138392e302f32342d3234203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:2b:8c:b8:ef:46:9f:80:88:ed:17:49:0b:df:2a:c3:84:
         02:fc:bc:bf:70:42:73:9d:9b:de:e4:74:c5:de:55:39:4e:00:
         32:be:85:a8:3e:6d:07:b4:4a:0a:0c:55:cc:cb:34:af:4d:04:
         eb:33:f5:31:c8:47:4e:83:76:d3:1d:f6:1d:03:9f:d6:6f:f4:
         ef:1d:4d:5a:e9:6d:62:01:8d:a5:60:5a:40:ef:11:76:5d:95:
         57:fc:20:59:b7:39:de:ae:7d:3a:6c:c0:1b:3c:a3:ee:20:aa:
         cf:7a:63:09:e1:c3:cf:ca:7e:8e:b0:af:72:78:3e:fa:35:3e:
         b8:dd:14:71:79:88:f1:86:cc:5a:42:b0:9b:ea:bb:d8:c4:32:
         97:b2:cf:d2:16:90:fb:82:6d:3a:69:c9:8b:87:d5:3b:66:78:
         c0:cc:bc:a3:49:84:20:57:07:a8:0a:6d:62:ed:db:2c:5c:5d:
         5e:d8:54:56:f8:00:bd:fc:fc:da:9b:55:cb:96:e9:6e:d5:a6:
         18:e4:0a:d0:9f:85:f5:e4:37:6e:1c:b7:44:13:84:04:c2:83:
         79:15:f3:49:00:27:35:3a:52:fd:cf:32:49:0a:50:15:16:9e:
         8b:c0:d3:bd:e3:b1:3e:47:97:a2:bb:7a:7f:fe:e3:54:58:79:
         50:f8:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org