Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31352e302f32342d3234203d3e20323731303436.roa
File:                     3132382e3230312e31352e302f32342d3234203d3e20323731303436.roa (raw, json)
Hash identifier:          vXF2YHUX8i0rKXz1le+g6W2ssWBS35hXSvbIZ1kDShg=
Subject key identifier:   23:D4:F3:02:F4:9C:47:D9:A9:D3:8C:EC:D2:BC:9F:21:83:7D:FB:A0
Certificate issuer:       /CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
Certificate serial:       3A295B8F63B6771A91F03FDA6C261B688D9BACDD
Authority key identifier: 1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31352e302f32342d3234203d3e20323731303436.roa
Signing time:             Mon 24 Jan 2022 02:22:12 +0000
ROA not before:           Mon 24 Jan 2022 02:17:12 +0000
ROA not after:            Mon 23 Jan 2023 02:22:12 +0000
asID:                     271046
IP address blocks:        128.201.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:29:5b:8f:63:b6:77:1a:91:f0:3f:da:6c:26:1b:68:8d:9b:ac:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Validity
            Not Before: Jan 24 02:17:12 2022 GMT
            Not After : Jan 23 02:22:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:3c:93:e3:fa:38:ec:df:73:71:ac:17:9a:
                    d0:56:db:58:ee:8b:fd:33:49:5b:4c:3e:bb:7a:18:
                    18:91:2a:d2:4d:99:57:ca:e8:03:a6:ea:b9:59:a4:
                    e2:9e:40:a2:e4:8b:33:5f:7a:3c:37:d5:08:8e:96:
                    dc:2b:86:1c:5e:03:92:db:75:4f:aa:f6:5b:a0:51:
                    26:58:d7:fd:82:c0:a7:74:08:d4:3c:e7:c0:c5:3f:
                    68:67:9f:51:da:07:57:70:00:87:b9:13:3a:ad:ed:
                    fd:d9:75:cb:03:a6:30:d7:18:34:82:84:28:15:9c:
                    6e:46:05:6f:54:19:b1:44:00:19:3f:8c:3e:7d:8a:
                    5d:21:98:83:95:09:2e:80:dc:81:f4:31:27:ff:c3:
                    4c:97:3a:de:20:17:4c:c6:93:f3:13:d5:38:8d:ca:
                    d7:5b:e3:64:09:e4:ee:90:6a:5c:a7:46:0e:8d:e3:
                    70:d2:88:09:2f:74:1a:12:28:8c:d1:e2:07:fa:33:
                    0e:24:e8:cd:f3:58:bb:7d:61:12:d8:a8:f6:98:f7:
                    a5:a8:7c:94:41:45:7e:56:45:6d:ad:ed:8e:e7:d4:
                    58:f6:e1:1c:a6:4a:27:47:67:68:dc:6e:48:53:3c:
                    8f:14:04:00:f7:ee:a0:df:f4:8b:e2:a2:c4:71:ef:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D4:F3:02:F4:9C:47:D9:A9:D3:8C:EC:D2:BC:9F:21:83:7D:FB:A0
            X509v3 Authority Key Identifier:
                keyid:1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31352e302f32342d3234203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:a6:30:56:e8:b6:5f:80:c6:2a:97:cf:f0:d3:ee:f6:8c:
         f7:78:2c:b9:9e:37:d7:c0:9e:2f:11:61:b2:ee:69:60:57:9f:
         2a:6d:91:e1:4d:f2:2d:cc:e0:cc:10:78:c6:e1:c4:95:da:dd:
         0e:8c:8b:60:05:08:de:60:70:d8:1e:59:b5:18:61:46:86:77:
         77:56:4c:28:93:fd:0d:a3:3c:a5:7e:b6:53:10:b0:6f:0d:82:
         fe:73:1a:af:f9:b1:a0:6f:93:50:a5:9a:c6:7d:d1:45:d4:da:
         f0:49:bc:fa:5e:09:ac:f8:d9:8e:0e:26:00:55:55:d1:fc:51:
         14:ad:e9:11:ff:9f:f6:b1:e4:28:14:cc:df:ab:35:dd:07:cf:
         49:cc:16:d1:9a:7f:f0:c1:93:8e:41:6c:5a:1d:4c:74:8d:e4:
         4e:5c:15:53:f7:c5:e4:72:1a:04:63:dc:0b:ea:01:e5:fc:ae:
         0d:7f:46:43:0a:99:d4:95:27:61:f8:51:4e:68:27:bc:07:58:
         f7:08:11:0b:d4:ed:ef:16:91:e3:91:1e:d9:e0:b8:23:e9:0f:
         dd:1b:59:73:ab:04:4e:da:f5:f2:65:73:7d:8f:94:53:1a:e0:
         a0:26:69:d7:10:87:51:c8:8a:aa:96:be:ef:f0:c5:3b:c4:a4:
         20:41:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org