Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31342e302f32332d3233203d3e20323731303436.roa
File:                     3132382e3230312e31342e302f32332d3233203d3e20323731303436.roa (raw, json)
Hash identifier:          /VXukbJrn8y+Hr2bW2W1EaFA+nTHrUYMeTRgcGyk7x4=
Subject key identifier:   C1:17:3B:FB:1F:35:8D:C9:39:6F:55:6A:78:C1:24:97:9C:31:C9:87
Certificate issuer:       /CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
Certificate serial:       178DE9CEA02F8722978E9E7BA04D6D7E37288400
Authority key identifier: 1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31342e302f32332d3233203d3e20323731303436.roa
Signing time:             Fri 04 Jun 2021 12:13:02 +0000
ROA not before:           Fri 04 Jun 2021 12:08:02 +0000
ROA not after:            Fri 03 Jun 2022 12:13:02 +0000
asID:                     271046
IP address blocks:        128.201.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:e9:ce:a0:2f:87:22:97:8e:9e:7b:a0:4d:6d:7e:37:28:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Validity
            Not Before: Jun  4 12:08:02 2021 GMT
            Not After : Jun  3 12:13:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:93:f9:74:20:7c:19:52:f2:41:26:c3:4c:
                    55:29:1c:bd:78:7b:36:c7:ce:0c:1a:ba:f2:69:74:
                    15:1a:9e:f2:69:cf:7f:2a:7e:16:b8:28:aa:7c:f3:
                    42:89:fd:fa:8a:d3:59:f3:57:a2:a6:37:6f:7b:ec:
                    5a:f9:cd:d3:7b:f1:10:6a:1e:82:21:04:45:51:db:
                    eb:2c:0e:af:16:1b:b9:89:6a:55:31:eb:1e:1b:ab:
                    30:db:2d:fc:ee:09:19:cb:43:ee:15:40:a4:62:67:
                    6c:f7:2d:d2:11:5e:e7:65:89:39:03:35:87:52:0b:
                    52:1c:89:ef:bb:71:6f:62:73:e1:8e:17:5d:a6:27:
                    6f:59:3f:f5:4b:56:65:49:19:27:33:cb:74:71:73:
                    e5:59:1a:fb:ea:92:33:74:64:9a:41:47:0a:e8:72:
                    52:f4:6b:d0:95:c5:56:f9:8b:79:4c:1f:52:05:e5:
                    81:ce:8f:37:92:d8:44:cd:f1:c0:56:75:49:28:24:
                    d6:b6:43:5b:b4:46:6f:ac:a3:07:9e:b3:46:3f:27:
                    43:be:16:5d:24:a6:30:0b:b3:ab:d8:8c:45:a0:43:
                    e2:4b:36:f1:1e:58:ee:13:f9:73:b4:b2:25:75:fe:
                    6a:4b:44:15:cc:c6:7d:57:f5:dd:c6:5b:4c:7a:5d:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:17:3B:FB:1F:35:8D:C9:39:6F:55:6A:78:C1:24:97:9C:31:C9:87
            X509v3 Authority Key Identifier:
                keyid:1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31342e302f32332d3233203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:09:bd:14:92:cf:e8:a2:c0:eb:76:38:03:bd:19:0d:3a:12:
         43:fb:59:38:46:db:d0:ad:d4:4d:68:e5:5f:59:3c:7d:d6:ab:
         68:e0:99:87:9b:e9:a6:a1:27:72:2a:9b:f2:0b:ed:cb:0b:52:
         aa:ef:6d:1c:bf:ad:57:f6:a9:5d:27:af:e0:b0:a7:34:45:61:
         8b:f2:a7:14:b3:88:dc:ac:1e:c4:38:d1:a1:30:6f:a4:f1:c4:
         42:61:f5:69:c5:bd:7d:f9:ae:9e:56:b1:e0:b7:e1:57:0a:c7:
         8f:92:5f:4f:8c:78:a0:49:44:de:fd:fc:73:1e:64:a9:6c:ce:
         ad:1d:49:ea:3b:01:9b:81:c4:49:7a:c3:a5:a7:fc:7d:9d:b9:
         e1:4a:c5:1d:b6:41:f6:af:6e:7d:da:01:c1:24:40:13:9c:95:
         00:20:c3:9d:87:a0:20:0c:a8:75:80:33:40:34:53:d7:37:53:
         ce:8f:57:df:75:95:72:c8:a2:96:9c:93:e0:5f:d9:3c:db:89:
         32:23:51:a2:93:48:78:27:b9:59:57:2d:ca:b1:57:d9:bc:85:
         77:b8:42:70:90:ba:11:1e:4a:1a:68:b2:82:4e:0f:0d:3d:b5:
         f9:95:10:80:4f:d0:b4:4b:3c:84:3d:18:72:19:ff:08:18:5c:
         83:fe:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org