Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3232203d3e20323731303436.roa
File:                     3132382e3230312e31322e302f32322d3232203d3e20323731303436.roa (raw, json)
Hash identifier:          HajOzWA94163LAaCzLBHBYEQgpOwi+L46rs4T81o//k=
Subject key identifier:   0A:0D:F7:EF:CE:54:F1:55:A8:E6:63:34:44:E9:B7:F3:05:E2:2E:FE
Certificate issuer:       /CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
Certificate serial:       2FC43130D7AA3FFF751DE2A58D60D1C3F3541DB3
Authority key identifier: 1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3232203d3e20323731303436.roa
Signing time:             Fri 04 Jun 2021 12:07:30 +0000
ROA not before:           Fri 04 Jun 2021 12:02:30 +0000
ROA not after:            Fri 03 Jun 2022 12:07:30 +0000
asID:                     271046
IP address blocks:        128.201.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c4:31:30:d7:aa:3f:ff:75:1d:e2:a5:8d:60:d1:c3:f3:54:1d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Validity
            Not Before: Jun  4 12:02:30 2021 GMT
            Not After : Jun  3 12:07:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:97:5d:67:d4:59:9e:19:17:6a:8f:3b:50:
                    c5:3c:05:e8:06:b5:c5:d6:e6:fb:0c:5a:4e:5f:4c:
                    bc:19:a1:75:0f:57:7b:d0:61:72:72:a5:5b:2f:20:
                    0e:5f:0b:17:96:34:34:05:08:2e:7e:68:52:ff:65:
                    84:a5:2b:71:97:c1:93:20:89:0e:09:9d:a7:c2:73:
                    a0:ca:be:e9:21:b9:28:82:97:64:7c:4b:60:ec:af:
                    e2:2b:ff:6a:e3:57:ed:f6:fd:4e:ed:87:66:6a:70:
                    15:e7:ff:0b:dd:1d:00:af:2e:ea:25:65:68:41:28:
                    6c:da:25:0b:f1:a9:04:a5:8a:be:52:99:93:74:29:
                    7c:82:49:2d:2b:83:90:e4:d6:63:4a:6f:21:fc:d9:
                    9a:3b:6f:40:10:ab:4f:78:f8:13:30:4f:eb:42:40:
                    34:ad:1d:d8:89:78:54:ff:aa:2d:5c:dc:b8:ee:bb:
                    b5:1e:94:3f:11:59:8a:11:51:76:24:b0:8d:45:67:
                    e8:54:f0:f1:d7:18:2b:d1:d4:c7:00:a3:e8:30:c2:
                    d8:cc:16:5b:92:87:21:b6:fc:f5:02:c7:89:bb:32:
                    30:2f:57:c5:e7:a7:e7:56:0f:36:8b:51:16:1b:e4:
                    c4:0c:a3:79:37:2d:6e:58:13:f6:60:7a:cc:bd:19:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0D:F7:EF:CE:54:F1:55:A8:E6:63:34:44:E9:B7:F3:05:E2:2E:FE
            X509v3 Authority Key Identifier:
                keyid:1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3232203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:b5:c4:b5:a3:2b:67:a5:65:3f:3e:92:57:24:17:97:80:1d:
         2a:b0:77:7b:a7:6f:7e:db:33:99:00:bf:d1:37:e9:4f:66:30:
         8a:0a:12:2f:e6:e2:11:92:32:01:94:da:72:3d:9c:f7:89:4f:
         a7:1c:00:b1:de:a3:8e:87:b6:7e:a7:fd:69:c3:e2:84:a1:af:
         37:e4:4d:4d:13:9f:18:e7:31:cc:20:cc:55:98:b9:cb:12:10:
         7e:27:87:48:5d:3c:70:c1:61:7a:a5:29:16:76:e1:2e:54:77:
         2e:28:12:6b:d0:8f:a0:e7:ea:0c:c9:8e:a4:2c:d4:cd:b9:1b:
         9b:cb:b6:3e:28:86:82:ca:52:42:71:ce:d1:ca:e9:11:4e:bc:
         61:32:d4:b3:f5:37:89:fa:fa:cd:75:0f:2d:a7:45:6c:2b:e0:
         83:1c:3f:38:10:ec:03:15:d5:43:65:3e:cb:07:7e:65:6e:d0:
         28:37:b7:ef:28:89:f6:cd:ca:f4:12:80:56:95:62:5c:f2:0f:
         b2:d3:7d:9b:ff:54:f4:47:8e:1e:3c:24:d5:34:4b:eb:26:9f:
         fe:8d:4f:70:16:b7:48:42:73:bd:bb:29:14:66:d3:f7:cb:4c:
         21:4f:ab:00:b5:e2:8f:bb:68:14:7c:16:a8:63:43:5c:bc:2c:
         ef:36:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org