Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa
File:                     3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa (raw, json)
Hash identifier:          1It053fSVRh0wtihLwRFW8JKcaQyTpVSy9GfDdxG30I=
Subject key identifier:   1D:06:D6:10:49:DF:27:A2:75:D5:1C:0C:12:8F:06:A2:60:8B:BE:74
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       35ABCB0CAF6B543C884B6418B3D037A2A15DD048
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 00:59:09 +0000
ROA not before:           Thu 25 Jan 2024 00:54:09 +0000
ROA not after:            Thu 23 Jan 2025 00:59:09 +0000
asID:                     266611
IP address blocks:        128.201.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ab:cb:0c:af:6b:54:3c:88:4b:64:18:b3:d0:37:a2:a1:5d:d0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:54:09 2024 GMT
            Not After : Jan 23 00:59:09 2025 GMT
        Subject: CN=1D06D61049DF27A275D51C0C128F06A2608BBE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:52:88:72:9f:b1:e0:53:60:77:87:d4:b2:
                    c2:52:09:bc:b1:3b:a5:47:25:65:58:9b:a1:c0:3b:
                    40:33:d3:c1:0e:6f:87:8b:53:48:38:f1:c8:0f:b4:
                    6f:6a:ba:fb:5e:5c:5a:8a:af:4b:3f:c7:cf:a7:4f:
                    49:a5:b3:8d:79:40:c8:31:b6:0e:7c:3d:4e:d2:66:
                    42:21:cc:c8:db:a0:5f:21:78:32:64:37:71:52:62:
                    2e:e5:5a:1e:c2:c7:00:10:e6:32:e5:76:87:30:81:
                    11:79:44:e4:43:32:a9:1e:cc:67:58:ec:91:cd:d8:
                    cb:24:b8:f0:67:c8:88:38:bc:c2:3e:8d:6b:f1:6c:
                    47:93:40:0a:f0:a3:52:ba:52:ad:28:9f:53:7a:19:
                    86:14:85:3d:6c:41:07:dc:2e:01:d9:23:77:8a:68:
                    f2:41:74:66:e6:dc:0f:50:6d:bf:ef:a2:95:61:d6:
                    c7:1c:6b:c7:d6:a1:f0:2b:01:78:05:47:74:ff:b0:
                    02:5c:4c:fe:1a:c6:7a:40:f7:87:23:18:24:34:ea:
                    ca:09:6f:f3:7b:9e:a5:b2:09:2a:e4:bd:9c:6f:28:
                    68:97:97:50:94:6a:86:3f:82:21:f8:39:62:38:38:
                    3a:38:bb:8b:ad:a1:ea:31:ea:ac:df:7d:79:ca:22:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:D6:10:49:DF:27:A2:75:D5:1C:0C:12:8F:06:A2:60:8B:BE:74
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:eb:97:f8:4d:59:5f:55:79:86:25:50:77:44:5d:3f:52:
         37:37:6e:10:aa:27:c9:8d:09:3d:92:9a:13:ec:02:ca:29:d2:
         7a:7d:6d:ee:ad:ff:b8:89:07:12:0f:12:6b:33:e0:f2:56:dd:
         0b:ab:28:77:7f:86:bc:17:9c:35:7d:6a:a8:df:ef:27:7d:c1:
         1f:43:16:0b:6c:6b:49:77:52:be:d7:ef:15:d5:bd:27:2a:55:
         da:62:b6:78:2b:b7:20:59:08:7d:b4:65:04:c8:3c:e1:4b:10:
         4e:f3:02:42:8d:5e:b8:47:52:5f:a8:95:93:d2:36:db:39:f8:
         63:a3:bd:23:60:9d:90:fc:e2:06:d9:0e:c4:8a:4b:2e:fa:27:
         a7:bb:b2:91:97:15:0b:56:0b:55:7b:eb:4c:53:3c:a0:d2:de:
         24:4d:c4:68:56:73:e7:ef:ec:4c:fd:cf:6b:ef:fe:5a:99:57:
         8e:6f:2b:96:23:93:19:49:71:63:7a:36:81:20:d3:10:21:15:
         56:fd:9b:bb:a3:db:82:57:57:f0:7c:95:29:8a:f0:1c:6c:87:
         96:fa:d4:a2:2f:13:2c:dc:df:7e:86:7b:05:f9:4a:4d:46:58:
         24:e1:16:80:7b:e8:72:ce:c1:c2:bd:7e:0d:1c:72:52:4f:d9:
         1e:12:8f:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNavLDK9rVDyIS2QYs9A3oqFd0EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4RTNERjlEOTY3MDMyQTU2MkU4MDREMkU3ODFEQjFE
QzQ1NEE3OTAeFw0yNDAxMjUwMDU0MDlaFw0yNTAxMjMwMDU5MDlaMDMxMTAvBgNV
BAMTKDFEMDZENjEwNDlERjI3QTI3NUQ1MUMwQzEyOEYwNkEyNjA4QkJFNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQlKIcp+x4FNgd4fUssJSCbyx
O6VHJWVYm6HAO0Az08EOb4eLU0g48cgPtG9quvteXFqKr0s/x8+nT0mls415QMgx
tg58PU7SZkIhzMjboF8heDJkN3FSYi7lWh7CxwAQ5jLldocwgRF5RORDMqkezGdY
7JHN2MskuPBnyIg4vMI+jWvxbEeTQArwo1K6Uq0on1N6GYYUhT1sQQfcLgHZI3eK
aPJBdGbm3A9Qbb/vopVh1scca8fWofArAXgFR3T/sAJcTP4axnpA94cjGCQ06soJ
b/N7nqWyCSrkvZxvKGiXl1CUaoY/giH4OWI4ODo4u4utoeox6qzffXnKIpoZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHQbWEEnfJ6J11RwMEo8GomCLvnQwHwYDVR0j
BBgwFoAUEo49+dlnAypWLoBNLngdsdxFSnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZ
SmUvMC8xMjhFM0RGOUQ5NjcwMzJBNTYyRTgwNEQyRTc4MURCMURDNDU0QTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyOEUzREY5RDk2NzAzMkE1
NjJFODA0RDJFNzgxREIxREM0NTRBNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzSmViY0JuS1ZWN0xKV3JFWGdNeWQ1NDRKdm9mSnBFcVA0NThGb1NXWUplLzAv
MzEzMjM4MmUzMjMwMzEyZTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKAyRwwDQYJKoZIhvcNAQELBQADggEBADbS65f4
TVlfVXmGJVB3RF0/Ujc3bhCqJ8mNCT2SmhPsAsop0np9be6t/7iJBxIPEmsz4PJW
3QurKHd/hrwXnDV9aqjf7yd9wR9DFgtsa0l3Ur7X7xXVvScqVdpitngrtyBZCH20
ZQTIPOFLEE7zAkKNXrhHUl+olZPSNts5+GOjvSNgnZD84gbZDsSKSy76J6e7spGX
FQtWC1V760xTPKDS3iRNxGhWc+fv7Ez9z2vv/lqZV45vK5YjkxlJcWN6NoEg0xAh
FVb9m7uj24JXV/B8lSmK8Bxsh5b61KIvEyzc336GewX5Sk1GWCThFoB76HLOwcK9
fg0cclJP2R4Sjy0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org