Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35362e302f32342d3234203d3e20323636363336.roa
File:                     3132382e3230312e35362e302f32342d3234203d3e20323636363336.roa (raw, json)
Hash identifier:          5qFDtk9BUVWb5G0JB/534dAW5MSuprAHgz+7H+i8e9A=
Subject key identifier:   1A:76:26:3C:7F:C5:D7:55:5F:28:AC:EE:D6:87:05:71:84:A1:E5:40
Certificate issuer:       /CN=01BB812570793F27C1E5A61B45140B6550487AB2
Certificate serial:       418F012FF4BBA9152AAAC740113E2168EC691F3E
Authority key identifier: 01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35362e302f32342d3234203d3e20323636363336.roa
Signing time:             Tue 05 Dec 2023 03:38:40 +0000
ROA not before:           Tue 05 Dec 2023 03:33:40 +0000
ROA not after:            Tue 03 Dec 2024 03:38:40 +0000
asID:                     266636
IP address blocks:        128.201.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8f:01:2f:f4:bb:a9:15:2a:aa:c7:40:11:3e:21:68:ec:69:1f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BB812570793F27C1E5A61B45140B6550487AB2
        Validity
            Not Before: Dec  5 03:33:40 2023 GMT
            Not After : Dec  3 03:38:40 2024 GMT
        Subject: CN=1A76263C7FC5D7555F28ACEED687057184A1E540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:52:9d:08:31:e0:9f:a4:b2:05:21:2e:be:
                    02:ba:6a:64:b0:b8:2b:57:8e:a5:94:b6:30:61:67:
                    9c:31:4e:d3:92:89:eb:ac:18:e4:fe:f6:f7:5e:b1:
                    73:d2:bd:d7:2e:90:6e:d0:3a:43:77:d9:ca:0c:49:
                    58:e7:c6:e9:54:7e:e2:ab:63:4b:b5:60:89:97:22:
                    1d:37:97:02:9d:0b:f9:cb:af:d5:00:2f:e8:42:50:
                    b3:c6:77:0e:ef:6c:13:11:d3:9b:da:09:69:66:72:
                    ce:fd:65:3b:1d:1b:f4:90:d3:b8:f4:76:17:ee:35:
                    d0:fe:bf:62:f2:e8:60:6a:d2:30:b0:3c:63:33:1f:
                    14:4a:53:06:4f:a1:4d:66:ab:5c:48:7b:f6:9f:01:
                    5e:e8:e5:ba:81:cb:28:9f:bc:2b:94:ba:35:a3:64:
                    64:bd:bc:90:45:57:5a:ac:5c:73:06:23:5d:a8:7e:
                    be:75:eb:0a:e3:7b:70:f3:bf:02:0c:11:e7:51:c1:
                    54:c1:ae:20:2a:17:e0:76:8a:d8:2b:ed:d8:4c:b5:
                    84:94:31:9f:74:3f:e6:f4:4d:9c:24:2d:0d:10:7d:
                    7a:f3:20:88:bf:7d:73:36:ae:3f:3b:8a:1a:6c:bd:
                    84:58:3e:35:46:e5:3e:e5:eb:80:e9:72:cc:9f:c0:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:26:3C:7F:C5:D7:55:5F:28:AC:EE:D6:87:05:71:84:A1:E5:40
            X509v3 Authority Key Identifier:
                keyid:01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35362e302f32342d3234203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:ac:6d:86:b0:4b:22:ea:f1:75:1f:1d:5a:ac:30:44:ac:d2:
         5d:32:f5:8a:5a:d7:ae:44:c9:3a:81:ba:c4:8e:68:20:60:6f:
         84:64:60:51:e6:5e:05:5d:41:9a:cc:a3:f2:7e:e6:f1:ca:45:
         12:71:1b:ef:b2:a4:69:ba:d7:a3:4d:e4:68:d8:7a:56:b0:93:
         0f:ea:86:73:cf:a2:10:fe:94:1f:c0:e9:2b:fd:97:24:58:cc:
         75:02:05:ad:d3:c7:02:cd:13:8a:d5:f3:84:23:11:f8:78:2f:
         70:94:92:d8:74:a4:25:6b:55:a6:c0:d7:39:91:30:b4:89:14:
         4a:91:5c:18:2e:30:ee:5c:cb:dc:6e:63:df:85:3a:1e:76:ba:
         0d:60:a6:d7:ba:92:a4:64:ed:78:80:c7:93:e3:85:55:85:4f:
         0d:84:cb:cb:4c:fd:ac:b3:cd:6b:e1:4f:96:ed:8b:01:44:96:
         a1:dd:e6:5a:57:1d:6b:43:99:9d:4a:b9:26:e4:61:d0:91:a5:
         ef:05:97:9e:f0:e8:ea:5e:15:49:e0:2e:17:7c:d8:52:0e:35:
         d6:2c:d2:73:41:fc:fd:7e:b2:a0:79:c3:fb:bc:65:2a:87:0e:
         01:43:2a:5d:ba:47:ee:51:bf:09:ca:62:d8:46:65:f0:c8:5e:
         04:58:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:47 2025 by rpki-client