Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35372e302f32342d3234203d3e20323636363336.roa
File:                     3132382e3230312e35372e302f32342d3234203d3e20323636363336.roa (raw, json)
Hash identifier:          X9ACodNyvX0a6iubE/b3XntJ3Ni9af5B9e4wwkOacJQ=
Subject key identifier:   A3:0A:CA:F2:B8:1E:C3:BA:B9:28:86:2E:1F:AB:06:C3:84:9E:7A:C0
Certificate issuer:       /CN=01BB812570793F27C1E5A61B45140B6550487AB2
Certificate serial:       17CBA7F12F31ED1BCDE1F372CE91F4CF31E96711
Authority key identifier: 01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35372e302f32342d3234203d3e20323636363336.roa
Signing time:             Tue 05 Dec 2023 03:38:37 +0000
ROA not before:           Tue 05 Dec 2023 03:33:37 +0000
ROA not after:            Tue 03 Dec 2024 03:38:37 +0000
asID:                     266636
IP address blocks:        128.201.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cb:a7:f1:2f:31:ed:1b:cd:e1:f3:72:ce:91:f4:cf:31:e9:67:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BB812570793F27C1E5A61B45140B6550487AB2
        Validity
            Not Before: Dec  5 03:33:37 2023 GMT
            Not After : Dec  3 03:38:37 2024 GMT
        Subject: CN=A30ACAF2B81EC3BAB928862E1FAB06C3849E7AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:30:7e:87:24:7a:5b:ba:42:aa:7f:88:96:
                    db:83:f2:5b:a2:24:59:b2:09:12:dd:99:30:26:68:
                    5e:dc:c1:5f:cb:f8:ed:91:81:f7:f7:67:e8:b5:0e:
                    28:f4:e9:1e:4e:6f:53:6d:df:eb:f4:72:65:b0:5f:
                    45:79:ef:50:ad:81:a7:5f:96:29:6d:69:95:48:fe:
                    15:1c:79:d0:37:5e:51:40:b5:4f:74:24:b2:6e:ea:
                    02:d1:c4:c3:8d:91:1b:de:23:28:bf:67:72:fd:9e:
                    5e:d0:80:6d:63:3f:c6:02:00:c9:b8:44:c8:3f:b8:
                    1e:2d:6d:e0:a9:52:8a:91:50:2f:9c:dd:ff:c2:e3:
                    2c:cb:83:5f:39:49:d1:dc:f2:92:56:50:c3:57:e0:
                    93:11:ab:ff:37:d9:a1:68:10:dd:d4:21:db:a3:cb:
                    fe:0b:1e:af:96:e9:14:f3:94:fc:25:c5:15:74:92:
                    50:ed:bb:ac:b5:fe:d9:3f:56:01:3e:a9:6b:4d:e4:
                    fe:0a:0e:6b:81:6a:5f:96:ff:57:0c:e7:55:58:2b:
                    cb:05:58:c8:bc:2d:7d:29:db:55:9d:ba:42:89:db:
                    d7:64:51:76:d4:71:2f:38:14:86:3f:06:32:51:41:
                    0d:a4:8b:18:c2:23:b7:de:e3:2b:35:93:4c:65:c0:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0A:CA:F2:B8:1E:C3:BA:B9:28:86:2E:1F:AB:06:C3:84:9E:7A:C0
            X509v3 Authority Key Identifier:
                keyid:01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35372e302f32342d3234203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:d8:8c:0d:59:e1:4e:e2:20:b0:be:a0:6b:1a:94:fa:b8:
         a3:d1:8b:b5:b6:e8:37:2d:e5:0b:de:ce:d4:77:7b:da:85:5f:
         a8:34:92:83:b7:1c:f4:c4:52:ac:70:64:42:3f:cd:82:8b:2a:
         7a:a0:d0:db:66:d4:ec:f6:ec:eb:30:d6:f0:07:e4:83:f1:d1:
         7c:6f:cc:a5:58:0d:81:3c:b1:c1:f5:13:39:f3:28:82:28:7c:
         ec:58:2b:7c:79:1e:13:c7:f8:70:b4:2a:ab:b7:5c:c1:10:bc:
         0e:d4:d6:a0:03:56:9c:a2:a5:91:00:c4:c6:29:83:dc:f2:6d:
         a6:ce:2a:13:5a:85:48:e1:af:1f:ee:50:d2:6b:81:14:96:52:
         72:f9:fa:2a:c6:77:d1:ad:89:31:8f:41:61:8c:08:51:b7:1e:
         e3:2c:5c:fb:d0:97:c2:36:da:08:f3:e7:0d:ff:fa:97:82:81:
         84:0b:1d:31:2d:e8:91:34:9f:25:e0:f4:5b:d4:c9:f5:00:c8:
         de:11:cd:79:a3:79:64:3f:37:e2:13:a7:2f:36:d8:ab:da:dc:
         7e:25:e6:b8:de:49:48:20:00:69:be:e7:97:e6:a2:ef:c8:2a:
         4d:c4:c1:d0:6a:9f:c6:ae:3d:f1:c8:1d:38:59:16:a5:2e:58:
         9a:21:cf:41
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUF8un8S8x7RvN4fNyzpH0zzHpZxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFCQjgxMjU3MDc5M0YyN0MxRTVBNjFCNDUxNDBCNjU1
MDQ4N0FCMjAeFw0yMzEyMDUwMzMzMzdaFw0yNDEyMDMwMzM4MzdaMDMxMTAvBgNV
BAMTKEEzMEFDQUYyQjgxRUMzQkFCOTI4ODYyRTFGQUIwNkMzODQ5RTdBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLTB+hyR6W7pCqn+IltuD8lui
JFmyCRLdmTAmaF7cwV/L+O2Rgff3Z+i1Dij06R5Ob1Nt3+v0cmWwX0V571Ctgadf
liltaZVI/hUcedA3XlFAtU90JLJu6gLRxMONkRveIyi/Z3L9nl7QgG1jP8YCAMm4
RMg/uB4tbeCpUoqRUC+c3f/C4yzLg185SdHc8pJWUMNX4JMRq/832aFoEN3UIduj
y/4LHq+W6RTzlPwlxRV0klDtu6y1/tk/VgE+qWtN5P4KDmuBal+W/1cM51VYK8sF
WMi8LX0p21WdukKJ29dkUXbUcS84FIY/BjJRQQ2kixjCI7fe4ys1k0xlwAdZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUowrK8rgew7q5KIYuH6sGw4SeesAwHwYDVR0j
BBgwFoAUAbuBJXB5PyfB5aYbRRQLZVBIerIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SNVV1eDM5d21xZDR1M3hhQkdoRGlrc3BrUkVXWWtUalFMQjVvYzM5ckt6
LzAvMDFCQjgxMjU3MDc5M0YyN0MxRTVBNjFCNDUxNDBCNjU1MDQ4N0FCMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wMUJCODEyNTcwNzkzRjI3QzFF
NUE2MUI0NTE0MEI2NTUwNDg3QUIyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
NVV1eDM5d21xZDR1M3hhQkdoRGlrc3BrUkVXWWtUalFMQjVvYzM5ckt6LzAvMzEz
MjM4MmUzMjMwMzEyZTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYz
NjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACAyTkwDQYJKoZIhvcNAQELBQADggEBACtG2IwNWeFO
4iCwvqBrGpT6uKPRi7W26Dct5QveztR3e9qFX6g0koO3HPTEUqxwZEI/zYKLKnqg
0Ntm1Oz27Osw1vAH5IPx0XxvzKVYDYE8scH1EznzKIIofOxYK3x5HhPH+HC0Kqu3
XMEQvA7U1qADVpyipZEAxMYpg9zybabOKhNahUjhrx/uUNJrgRSWUnL5+irGd9Gt
iTGPQWGMCFG3HuMsXPvQl8I22gjz5w3/+peCgYQLHTEt6JE0nyXg9FvUyfUAyN4R
zXmjeWQ/N+ITpy822Kva3H4l5rjeSUggAGm+55fmou/IKk3EwdBqn8auPfHIHThZ
FqUuWJohz0E=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:49 2025 by rpki-client