Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa
File:                     3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          E2h+qDspjFpNdAJA2YTUCZTGqM2XMj7MHQL0mIlwBzo=
Subject key identifier:   F6:6F:B4:FC:67:13:DA:29:8A:03:27:31:26:E1:8D:C2:3F:1D:E4:3F
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       5D3F3F3FD08BDE35CC9169ACA7DC91A6726303DD
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 01:00:19 +0000
ROA not before:           Thu 25 Jan 2024 00:55:19 +0000
ROA not after:            Thu 23 Jan 2025 01:00:19 +0000
asID:                     266611
IP address blocks:        128.201.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:3f:3f:d0:8b:de:35:cc:91:69:ac:a7:dc:91:a6:72:63:03:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:55:19 2024 GMT
            Not After : Jan 23 01:00:19 2025 GMT
        Subject: CN=F66FB4FC6713DA298A03273126E18DC23F1DE43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:a1:ec:b7:82:b2:6e:b3:f9:49:6d:59:c2:
                    11:c6:f1:f8:02:f0:9c:69:ce:f1:f3:be:ab:da:f6:
                    af:59:69:53:1b:25:8b:c4:dd:b0:20:6a:c4:90:98:
                    0b:f2:94:19:72:5f:0d:eb:27:3b:c2:96:25:4e:a1:
                    34:93:78:ae:48:06:42:33:32:40:e8:3d:d0:c8:ac:
                    77:ad:b7:16:1e:05:db:a5:4f:cb:a7:6e:a6:46:44:
                    62:fd:83:2e:87:5a:2d:1a:30:d6:56:3a:f7:1e:1b:
                    ea:6e:25:1a:50:96:0d:34:2a:3a:5f:dd:54:5f:cc:
                    f4:f8:fd:b8:55:c7:21:e4:08:dc:e7:49:5a:e5:ff:
                    82:ef:11:7d:86:c1:a3:ea:09:e2:30:77:40:60:09:
                    95:51:7a:01:45:fe:5f:f9:9b:86:4b:a3:48:e9:6e:
                    62:e2:86:89:21:a3:08:70:3f:ea:1f:19:d7:9a:e0:
                    8a:66:4d:69:e7:8c:16:17:c5:c4:dd:ff:12:b2:c7:
                    1b:4f:15:f6:40:09:7f:23:8e:ab:60:41:9e:9b:25:
                    49:fc:23:97:1b:a3:3a:5f:76:99:22:c4:25:f2:88:
                    ce:da:1d:54:8f:56:d6:07:ca:10:5d:b7:38:7e:27:
                    90:9f:6d:87:ae:32:ce:ad:ef:59:6e:de:a8:c3:fd:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:B4:FC:67:13:DA:29:8A:03:27:31:26:E1:8D:C2:3F:1D:E4:3F
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:07:ca:16:0b:80:2e:8a:60:48:e3:17:1b:1d:4a:1b:5b:
         b9:10:45:74:29:40:7e:ea:13:c1:b2:a2:38:d2:91:32:41:a8:
         30:e3:8f:14:32:cc:41:bd:fd:20:3e:b7:31:61:ce:48:6f:f9:
         20:b7:4f:6d:f6:bf:fe:6e:72:0b:4a:80:a9:ac:f9:4a:21:7d:
         67:03:fe:d2:8c:48:b4:b9:b6:0a:cf:9a:a3:6a:e8:ea:53:2f:
         81:b4:2e:da:0d:4d:9a:d3:18:e8:27:c1:fd:47:fe:35:ff:13:
         69:6e:22:5f:49:b1:cf:8a:be:83:56:16:62:27:15:55:05:46:
         83:52:1a:90:ce:fa:cf:91:1f:99:83:f0:50:20:98:34:88:10:
         c9:94:16:c2:09:3e:29:c2:b3:4c:fa:20:a9:90:4c:fa:7c:b3:
         37:b2:b7:8e:9b:00:e0:04:47:05:b3:a0:18:af:11:9c:13:2c:
         0f:ba:c0:84:7c:f3:53:ec:96:f7:2a:75:a5:85:22:e3:af:cd:
         a0:b8:0c:4f:f3:81:11:e5:ca:63:9c:b3:5e:38:c1:1d:94:fa:
         97:da:52:10:ac:4a:aa:7f:6a:a6:f5:2f:fe:c5:f3:72:3a:7d:
         3a:f9:01:34:49:f2:ce:73:2a:bc:7b:15:99:43:e9:53:a0:9a:
         6f:dc:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org