Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35362e302f32322d3332203d3e20323636363336.roa
File:                     3132382e3230312e35362e302f32322d3332203d3e20323636363336.roa (raw, json)
Hash identifier:          Dhi5vI5KemWsEEuSXASdJ4ybbdWhMiFo/s+AFwoBYbI=
Subject key identifier:   2D:BB:2E:32:0C:B9:6C:20:E4:C9:44:4F:8F:D4:F2:CB:65:DB:58:50
Certificate issuer:       /CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
Certificate serial:       6640F31EB3533BA61245A44104401A3F2AA2941B
Authority key identifier: 9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35362e302f32322d3332203d3e20323636363336.roa
Signing time:             Mon 06 Mar 2023 03:04:52 +0000
ROA not before:           Mon 06 Mar 2023 02:59:52 +0000
ROA not after:            Mon 04 Mar 2024 03:04:52 +0000
asID:                     266636
IP address blocks:        128.201.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:40:f3:1e:b3:53:3b:a6:12:45:a4:41:04:40:1a:3f:2a:a2:94:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Validity
            Not Before: Mar  6 02:59:52 2023 GMT
            Not After : Mar  4 03:04:52 2024 GMT
        Subject: CN=2DBB2E320CB96C20E4C9444F8FD4F2CB65DB5850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:75:82:bd:9f:bd:38:c9:37:9c:58:c0:70:
                    c1:3c:72:5d:d3:0e:ba:e4:e7:30:69:e2:34:b9:35:
                    84:13:c1:71:f8:67:98:32:bf:45:2e:c2:a7:c8:63:
                    29:50:53:de:72:d1:6e:56:5b:d9:6f:0f:cf:8f:a2:
                    1b:d6:b7:09:73:bd:11:5b:76:b9:9e:f9:ef:7c:51:
                    41:d5:49:4f:a6:11:41:c4:02:e2:56:d9:a1:11:75:
                    14:f0:65:e9:c0:d7:a3:8d:02:6e:69:68:94:f1:1e:
                    ca:99:d4:b6:b4:1e:fd:34:57:36:2c:c3:cb:e3:cb:
                    79:2c:91:ff:f7:5f:de:e2:ef:51:be:b7:9a:94:44:
                    14:b7:22:df:2a:95:3e:99:38:fc:a3:29:10:da:c6:
                    b4:d1:25:10:8c:53:21:c7:0e:20:70:ef:25:3c:3a:
                    ce:01:9e:e2:60:60:90:44:7e:d3:f4:f9:38:32:45:
                    3f:7d:b6:0a:fc:3f:aa:c6:ba:a5:b4:ba:c2:c4:90:
                    f1:20:b3:f4:e6:76:17:3c:5a:4b:a0:f2:99:a6:fd:
                    7f:7d:de:e5:07:15:1b:88:33:90:f9:8d:78:2c:76:
                    f0:73:73:9b:af:8f:f2:b4:b2:0d:0f:4a:4b:98:dc:
                    be:05:01:40:1e:e2:b6:c8:44:62:c3:52:6f:97:a5:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BB:2E:32:0C:B9:6C:20:E4:C9:44:4F:8F:D4:F2:CB:65:DB:58:50
            X509v3 Authority Key Identifier:
                keyid:9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35362e302f32322d3332203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:be:d3:d9:aa:55:a0:45:22:43:0a:a0:bd:c9:ca:0d:19:45:
         e4:9c:a1:86:1b:0f:84:48:ba:09:94:cc:ad:ea:5a:47:15:1d:
         12:f7:20:e4:c7:00:87:93:d2:a3:4c:10:9f:ee:70:97:a3:85:
         75:a9:75:e4:29:a9:2b:96:be:48:25:f9:7f:26:32:36:4e:e5:
         2b:fd:36:d5:36:18:02:f0:63:cf:ef:3b:42:ee:2c:fa:15:a2:
         55:75:37:d7:6d:c4:02:c9:5d:2d:30:64:91:df:66:f0:54:e7:
         c3:73:3a:43:e6:9f:ca:d7:68:93:4d:b7:be:7e:c2:9a:4b:33:
         af:02:da:0a:33:56:2c:5b:1a:25:b0:bf:0d:14:a1:c3:e6:ea:
         82:fb:b9:73:d0:a8:d1:06:2e:d0:63:91:b3:bd:81:12:ac:43:
         26:64:a8:15:36:21:38:33:ca:6c:88:2e:b0:2d:9e:c5:cf:3b:
         eb:69:fa:c4:af:e3:f7:ab:0f:28:69:cf:21:ae:61:6e:10:af:
         18:7c:1e:d2:6a:2d:c3:97:49:9d:f1:bb:28:96:63:79:33:97:
         03:b4:64:b2:3e:5a:4e:25:11:0d:41:f6:69:7c:3f:fb:d4:ea:
         c8:c0:aa:80:a6:d5:83:4f:3a:f2:de:59:f4:f0:02:70:20:5b:
         e2:eb:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org