Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31332e302f32342d3234203d3e20323731303436.roa
File:                     3132382e3230312e31332e302f32342d3234203d3e20323731303436.roa (raw, json)
Hash identifier:          1+JNAk7DJzBlvdfUObyxC/kLr6fy9tRIW0gDr8TvLdM=
Subject key identifier:   98:47:10:63:4F:6F:DE:85:ED:36:B4:BB:A5:24:B5:79:3F:AA:5E:D4
Certificate issuer:       /CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
Certificate serial:       76DB0183E5910A65E34C6AB71D0422624C89693F
Authority key identifier: 1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31332e302f32342d3234203d3e20323731303436.roa
Signing time:             Mon 24 Jan 2022 02:21:20 +0000
ROA not before:           Mon 24 Jan 2022 02:16:20 +0000
ROA not after:            Mon 23 Jan 2023 02:21:20 +0000
asID:                     271046
IP address blocks:        128.201.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:db:01:83:e5:91:0a:65:e3:4c:6a:b7:1d:04:22:62:4c:89:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Validity
            Not Before: Jan 24 02:16:20 2022 GMT
            Not After : Jan 23 02:21:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:f6:82:96:2f:35:61:eb:62:b7:c9:37:84:
                    dd:41:37:ac:12:47:3f:1f:a4:c2:80:4c:b6:a5:13:
                    60:56:e5:ef:9e:59:25:41:e2:7e:17:dc:20:e8:c6:
                    fa:03:86:0e:ca:b3:59:69:03:01:a0:ae:f0:6e:e7:
                    85:e0:36:10:96:00:63:c6:82:a0:72:6d:89:bc:42:
                    10:4b:99:93:25:73:24:3c:ce:f6:19:9a:7a:d1:dc:
                    5f:53:01:5e:0e:a9:7f:46:3f:0a:39:0d:17:10:ed:
                    06:65:99:cf:2c:25:fc:e9:92:ac:a2:a3:25:98:f3:
                    cc:50:3a:3b:8d:59:c6:c3:96:f4:5d:e0:8b:27:68:
                    8a:58:73:b3:e3:41:c0:0f:ea:f6:76:3f:93:64:2a:
                    3e:21:a4:1b:a4:4d:58:4c:ba:5c:34:1f:c7:07:03:
                    30:18:0d:75:32:a6:0f:5d:5a:fc:48:54:be:53:6f:
                    88:3d:2d:cb:df:1b:f6:61:1e:19:fa:b7:5d:fc:a4:
                    dc:9f:c3:54:01:cb:81:0c:83:37:9c:5d:a5:37:78:
                    b8:ed:5e:71:0a:4c:71:a1:3d:d5:3b:d3:6c:d0:4f:
                    06:1f:e0:a9:db:6a:e5:0c:b9:60:79:e1:ca:94:8c:
                    71:d6:30:90:cf:47:ea:69:66:7e:c9:45:c9:dd:a8:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:47:10:63:4F:6F:DE:85:ED:36:B4:BB:A5:24:B5:79:3F:AA:5E:D4
            X509v3 Authority Key Identifier:
                keyid:1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31332e302f32342d3234203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:01:fc:24:bb:0e:ac:66:04:b3:7e:e3:a5:2f:4c:33:a5:2f:
         6e:b7:0e:95:af:26:5e:f6:f9:61:8d:c6:0d:00:14:bd:f5:23:
         18:f2:ce:6e:b3:6a:70:b4:42:9b:2b:56:fa:e2:53:60:ed:0b:
         88:b3:30:3f:9e:cd:d2:5e:2f:de:0a:7d:37:a8:3c:f6:ea:be:
         93:ec:a5:0c:7c:c0:ac:2d:a6:84:44:d0:af:c7:a0:29:ce:ea:
         5d:3d:98:6b:76:e0:75:e7:47:be:64:4b:fc:da:85:bb:bd:06:
         22:4d:41:7f:71:f6:d1:ce:8c:98:13:3c:ea:fe:28:c1:ec:4c:
         32:67:a8:a6:61:56:56:09:99:98:11:ae:f0:df:e5:0e:de:62:
         f0:0c:11:73:0a:99:4a:59:a9:15:5c:47:7e:d7:67:c7:f8:4c:
         9b:20:69:62:11:2e:d8:26:94:1e:65:9e:bd:8a:f4:91:64:31:
         95:2c:e5:ea:aa:c5:3c:68:c5:e3:2c:7f:5e:03:62:9d:3b:8b:
         3b:4b:3a:34:30:60:9f:03:75:44:6e:32:5b:8e:dd:54:00:b3:
         79:78:25:12:82:cf:f0:f1:49:8e:89:4f:1a:3c:c3:dd:88:a6:
         ec:bb:24:e0:2c:ef:d9:21:14:d7:a1:95:1c:38:5b:98:49:6e:
         7d:c3:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org