Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
File:                     3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          R/rIDYYriTj7LAC+lQ1d9TjWb5Vjn/8mL6BckZk+3so=
Subject key identifier:   88:A7:8B:0E:48:94:54:A9:9E:C8:86:B1:FE:95:9C:89:1F:C8:29:9B
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       03FB8B081DA0F101FF084D0F4453094F06EE6C93
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:47 +0000
ROA not before:           Wed 28 Feb 2024 14:07:47 +0000
ROA not after:            Wed 26 Feb 2025 14:12:47 +0000
asID:                     262532
IP address blocks:        128.201.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fb:8b:08:1d:a0:f1:01:ff:08:4d:0f:44:53:09:4f:06:ee:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:47 2024 GMT
            Not After : Feb 26 14:12:47 2025 GMT
        Subject: CN=88A78B0E489454A99EC886B1FE959C891FC8299B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:15:78:39:cc:13:c3:2b:13:fc:3b:72:be:
                    7e:c3:5c:20:6d:a9:76:f2:4f:ce:d5:27:47:7a:1f:
                    44:21:23:77:64:24:53:bf:87:4a:e0:9e:c8:99:99:
                    b8:8d:d6:60:28:bf:b0:d3:d7:41:b8:e5:5a:58:ca:
                    e9:26:ec:1b:0d:1f:8c:d6:36:cd:39:c1:1b:85:3b:
                    5b:e6:e2:ea:40:92:71:b5:9b:84:30:9e:45:80:cb:
                    88:23:76:4c:81:06:89:12:85:78:42:a2:05:b4:8d:
                    7e:9f:e7:dc:40:b6:00:80:e0:48:42:eb:39:ec:34:
                    99:db:f1:fc:55:a5:3b:c8:59:e3:86:f6:3a:23:fb:
                    c7:40:e1:f1:74:c5:a5:e8:98:fd:27:ec:96:66:46:
                    c0:c3:2a:38:bc:9a:80:60:d9:62:dd:c1:da:19:c5:
                    ab:65:8d:ab:eb:7b:00:0f:8a:4b:f7:6f:0d:d0:0a:
                    99:8b:fb:9a:1f:36:5e:d4:28:a6:80:70:3a:5e:ca:
                    fb:19:f6:73:da:6c:a5:61:ff:01:48:b9:ed:4c:29:
                    47:fb:90:0d:4c:5b:49:65:75:16:c9:99:f5:ba:a1:
                    18:cf:94:89:60:dd:e9:9d:48:44:ce:a9:24:41:cb:
                    4c:bf:0d:0e:2c:b2:dc:f1:b4:50:0d:9a:e2:9a:36:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:8B:0E:48:94:54:A9:9E:C8:86:B1:FE:95:9C:89:1F:C8:29:9B
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:58:75:4b:ca:99:fc:b4:e3:e3:d4:7f:57:1a:0a:65:e2:aa:
         15:79:3e:07:f9:5d:c7:f4:ee:5e:30:92:e1:da:ed:7d:7b:7a:
         e9:5f:93:9c:3d:24:b5:2c:53:fe:7d:f6:8b:cc:23:4e:57:4c:
         de:e6:65:89:4d:8f:9d:dd:75:a7:5f:41:7f:30:ad:b2:a4:7a:
         03:10:99:3d:d0:35:bf:7a:c2:dd:96:a6:3e:98:5a:0c:2b:0c:
         a7:86:85:f6:ca:13:1b:07:fe:1d:57:56:54:fb:87:79:46:a9:
         70:dd:cf:10:31:aa:b2:fc:02:05:94:f8:4e:4c:f3:0a:eb:f0:
         e9:a9:fa:35:0a:38:d5:03:6d:46:6c:91:5e:f4:09:b8:f4:5e:
         f5:41:e2:ca:57:e7:1a:16:4e:a7:a8:ab:45:1c:3c:43:fa:f3:
         32:a4:3d:25:eb:f9:fa:fb:1e:7e:16:8a:3f:4f:a7:63:1a:10:
         62:59:c7:19:dc:4f:22:b3:8c:2b:1d:cc:9c:69:4e:6e:b2:33:
         1f:7b:18:ae:ce:f5:53:0c:82:1a:ab:6c:fd:ac:18:60:7a:3f:
         5e:51:62:2f:dd:f4:a1:fa:3d:44:93:a2:3a:1d:bf:a1:a1:41:
         90:be:71:c0:17:de:9b:1a:a3:d5:88:5e:98:d7:c7:f9:04:ca:
         3f:51:a9:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUA/uLCB2g8QH/CE0PRFMJTwbubJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA3NDdaFw0yNTAyMjYxNDEyNDdaMDMxMTAvBgNV
BAMTKDg4QTc4QjBFNDg5NDU0QTk5RUM4ODZCMUZFOTU5Qzg5MUZDODI5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IBV4OcwTwysT/Dtyvn7DXCBt
qXbyT87VJ0d6H0QhI3dkJFO/h0rgnsiZmbiN1mAov7DT10G45VpYyukm7BsNH4zW
Ns05wRuFO1vm4upAknG1m4QwnkWAy4gjdkyBBokShXhCogW0jX6f59xAtgCA4EhC
6znsNJnb8fxVpTvIWeOG9joj+8dA4fF0xaXomP0n7JZmRsDDKji8moBg2WLdwdoZ
xatljavrewAPikv3bw3QCpmL+5ofNl7UKKaAcDpeyvsZ9nPabKVh/wFIue1MKUf7
kA1MW0lldRbJmfW6oRjPlIlg3emdSETOqSRBy0y/DQ4sstzxtFANmuKaNrO3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiKeLDkiUVKmeyIax/pWciR/IKZswHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYDJejANBgkqhkiG9w0BAQsFAAOCAQEAFVh1
S8qZ/LTj49R/VxoKZeKqFXk+B/ldx/TuXjCS4drtfXt66V+TnD0ktSxT/n32i8wj
TldM3uZliU2Pnd11p19BfzCtsqR6AxCZPdA1v3rC3ZamPphaDCsMp4aF9soTGwf+
HVdWVPuHeUapcN3PEDGqsvwCBZT4TkzzCuvw6an6NQo41QNtRmyRXvQJuPRe9UHi
ylfnGhZOp6irRRw8Q/rzMqQ9Jev5+vsefhaKP0+nYxoQYlnHGdxPIrOMKx3MnGlO
brIzH3sYrs71UwyCGqts/awYYHo/XlFiL930ofo9RJOiOh2/oaFBkL5xwBfemxqj
1YhemNfH+QTKP1Gpqg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:39 2025 by rpki-client