Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32322d3234203d3e20323632353332.roa
File:                     3132382e3230312e3132302e302f32322d3234203d3e20323632353332.roa (raw, json)
Hash identifier:          KVvB/sBWv/PM9LzsFjF+VTXdRPZVEcgfaUehvh/zvdQ=
Subject key identifier:   E8:30:D6:1D:4C:D9:3A:93:10:8B:CE:F7:37:46:AF:A8:C9:4C:96:AF
Certificate issuer:       /CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
Certificate serial:       7D45012F1F3D0A647DB75CF0DF74A61A7234015D
Authority key identifier: B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32322d3234203d3e20323632353332.roa
Signing time:             Thu 27 Jul 2023 15:56:02 +0000
ROA not before:           Thu 27 Jul 2023 15:51:02 +0000
ROA not after:            Thu 25 Jul 2024 15:56:02 +0000
asID:                     262532
IP address blocks:        128.201.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:01:2f:1f:3d:0a:64:7d:b7:5c:f0:df:74:a6:1a:72:34:01:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
        Validity
            Not Before: Jul 27 15:51:02 2023 GMT
            Not After : Jul 25 15:56:02 2024 GMT
        Subject: CN=E830D61D4CD93A93108BCEF73746AFA8C94C96AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:ce:e5:49:c7:e7:38:dd:fb:93:dc:7d:39:
                    77:fc:65:6c:4c:61:2a:ad:db:8b:ad:ae:5d:79:22:
                    26:14:a2:50:cd:9d:86:06:76:73:6c:7c:79:da:45:
                    54:05:42:c3:fe:d4:97:46:d2:c1:9d:bb:df:0c:9f:
                    96:07:f8:69:a0:6e:03:dc:dc:98:19:c6:af:48:5e:
                    9e:2a:b3:01:95:46:e9:52:b4:5a:e6:f3:6a:48:46:
                    7f:0b:b2:c2:e8:3f:c5:af:29:c9:79:22:d9:50:a4:
                    ba:48:eb:3e:ab:4a:0c:f6:0b:96:52:2f:3d:b5:de:
                    af:01:5f:86:f7:f9:a4:07:ff:4a:66:09:1b:e9:da:
                    4e:d6:91:b8:4a:c1:64:4b:a6:a1:db:a4:43:d4:5e:
                    60:73:0f:13:53:8b:42:92:95:8d:00:26:e4:9b:94:
                    50:42:48:8d:1d:c3:7f:c5:18:a6:cd:3b:14:0e:4c:
                    2e:37:8d:2b:b3:57:40:50:99:a9:f5:f7:42:0d:c9:
                    3d:20:40:e5:21:5a:0d:33:ef:49:bd:58:0c:a8:00:
                    7b:ff:48:1e:30:27:d1:e2:e7:f9:ba:92:b1:cd:8c:
                    92:7f:53:08:e2:34:95:03:c8:0a:f0:c5:f1:fe:ed:
                    59:c9:ed:a0:9d:0a:62:4c:8f:3b:30:e3:69:37:ea:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:D6:1D:4C:D9:3A:93:10:8B:CE:F7:37:46:AF:A8:C9:4C:96:AF
            X509v3 Authority Key Identifier:
                keyid:B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32322d3234203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:04:05:c5:bc:cc:cb:e7:9b:c6:09:ae:1f:fe:0f:80:38:f2:
         43:7e:16:54:cf:75:14:b1:41:52:71:08:9d:e0:05:42:9d:79:
         bd:cd:05:a8:23:05:90:d4:c3:4f:c5:d4:4f:39:d5:1d:d3:0f:
         0b:85:b1:1f:95:f8:cc:7b:8b:a6:53:1d:91:ce:08:23:97:a8:
         51:8a:96:d0:6b:20:a7:36:0f:fa:48:0a:11:4a:5c:97:f4:6b:
         ce:fd:46:b9:40:23:d2:45:f1:74:68:fa:81:b0:30:75:36:d6:
         a5:d5:17:cf:e0:79:9c:b4:73:89:65:70:7f:c3:d7:f4:2e:ec:
         17:d0:1a:37:6d:bf:23:d1:3c:6c:80:d9:e8:28:be:2f:2b:0f:
         60:05:69:10:d8:1e:9d:1d:8a:0a:7b:c4:7f:5b:28:7b:a5:7a:
         46:ed:c5:c6:c6:f5:ee:f1:e2:c8:b5:5d:6c:c7:cb:26:8e:72:
         cf:65:3b:f6:a0:6f:19:7b:20:5b:a6:68:91:78:87:4f:16:b1:
         d6:60:12:36:61:c9:0e:c3:d6:df:a2:88:a9:ab:25:3a:c1:f0:
         6c:7a:bf:0b:db:90:78:34:43:db:58:da:73:3b:dc:f9:9d:5c:
         e1:fe:c2:db:83:4b:d2:9a:fe:32:a2:5d:dd:a8:ed:5a:1f:e1:
         23:9c:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org