Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32342d3234203d3e20323731303436.roa
File:                     3132382e3230312e31322e302f32342d3234203d3e20323731303436.roa (raw, json)
Hash identifier:          WzlKUsL52C0yXyqS2q6MKR3Cvx8g0F2swFZmv/6ffJA=
Subject key identifier:   6E:77:FE:A6:8E:20:B8:8A:92:69:B4:1B:AD:BD:80:FD:8F:28:6E:EB
Certificate issuer:       /CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
Certificate serial:       2F34F9EE141EFDD255EC1342F924C0A4931DDD75
Authority key identifier: 1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32342d3234203d3e20323731303436.roa
Signing time:             Mon 24 Jan 2022 02:20:46 +0000
ROA not before:           Mon 24 Jan 2022 02:15:46 +0000
ROA not after:            Mon 23 Jan 2023 02:20:46 +0000
asID:                     271046
IP address blocks:        128.201.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:34:f9:ee:14:1e:fd:d2:55:ec:13:42:f9:24:c0:a4:93:1d:dd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Validity
            Not Before: Jan 24 02:15:46 2022 GMT
            Not After : Jan 23 02:20:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:00:20:7e:01:bb:0f:5a:6d:e9:81:24:1a:
                    29:b6:11:3f:68:0b:1c:dc:77:2b:65:f6:e1:2e:d8:
                    df:98:33:91:4b:d1:1b:99:fa:21:18:7a:47:7d:01:
                    0a:3f:90:7f:db:9d:36:19:9d:d7:99:59:f9:16:4e:
                    b2:80:f4:07:ad:59:1e:e7:0c:d5:0f:89:f9:e7:b8:
                    e7:41:df:5e:0a:aa:0d:50:b8:b2:9e:f5:c3:3b:77:
                    18:d6:6d:68:bb:fd:2f:a5:7c:96:04:1c:9d:8a:7a:
                    9c:0d:02:3d:b4:a9:a9:a1:44:60:63:75:51:95:50:
                    82:f3:6e:b7:4d:63:6d:4b:65:fd:0c:1f:e4:d9:df:
                    91:35:63:19:0f:33:83:18:e3:2d:1e:a9:d8:33:6f:
                    6c:04:97:5b:ad:16:a1:e9:98:fe:cc:34:2e:6f:af:
                    8c:27:7e:41:8d:b2:54:12:13:73:4b:0a:1e:81:84:
                    c4:01:b1:0d:5c:ac:b2:cf:87:fd:96:39:d9:b4:cb:
                    e1:cf:de:94:84:c0:4c:f1:7c:6d:5b:be:b5:d8:c9:
                    2a:d3:9f:20:00:c3:5b:00:34:58:7e:04:45:e1:1b:
                    79:1c:40:37:f4:3b:f5:3b:0f:46:5d:e3:2d:07:00:
                    82:ea:ba:7c:8f:80:af:b9:eb:0b:ad:d6:1f:42:cb:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:FE:A6:8E:20:B8:8A:92:69:B4:1B:AD:BD:80:FD:8F:28:6E:EB
            X509v3 Authority Key Identifier:
                keyid:1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32342d3234203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3c:68:7a:ee:2c:ff:a7:f1:15:91:4e:cd:f3:3f:de:5b:5b:
         de:87:cb:f9:e7:8d:fe:7d:5b:98:fb:27:5a:1f:69:2e:f8:e3:
         2b:b8:08:ca:64:e6:fa:69:c7:ca:fa:4d:47:fc:a2:60:88:5f:
         7e:52:c3:36:9a:d9:59:e7:2d:65:dd:30:49:6a:b4:8d:0c:38:
         6a:88:34:16:01:2e:e0:0f:e2:4e:55:89:da:8d:5e:ef:85:31:
         0b:00:58:ff:01:a9:ff:da:3d:dd:c4:98:0e:b9:91:18:bd:d5:
         3c:5c:5f:13:89:7d:ee:b5:38:57:9e:ae:4a:ac:0f:07:55:fb:
         0e:ec:d9:87:c0:84:2f:8f:a5:21:f4:5f:36:bd:94:15:0c:83:
         4d:9f:30:70:27:88:f1:2e:dc:28:1d:e9:f4:93:e9:68:d7:c1:
         5d:ff:69:89:94:a4:32:43:df:50:ed:29:ca:fb:41:e2:00:71:
         d1:61:9b:13:c2:6c:4d:38:0c:b0:25:a5:bd:14:73:c1:99:03:
         0d:26:fb:3e:ed:aa:55:b3:b2:b3:36:ac:64:18:57:cc:0b:bf:
         a6:52:ca:0c:bd:4d:95:32:97:bf:00:68:90:01:58:de:3a:4c:
         32:4c:8d:3c:fe:1e:07:9b:db:de:ad:39:be:a8:83:ec:32:12:
         e5:fa:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org