Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35382e302f32342d3234203d3e20323636363336.roa
File:                     3132382e3230312e35382e302f32342d3234203d3e20323636363336.roa (raw, json)
Hash identifier:          Kj1NzfIVE222rWXeL7WW0B4n6v3ak99NC/VofoRXThM=
Subject key identifier:   53:18:D9:EC:BA:99:44:CF:A5:4C:DE:E2:DB:1B:6E:11:CC:48:DA:07
Certificate issuer:       /CN=01BB812570793F27C1E5A61B45140B6550487AB2
Certificate serial:       17E4B6842D337B3945D0B2F1865703DAA56F49A3
Authority key identifier: 01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35382e302f32342d3234203d3e20323636363336.roa
Signing time:             Tue 05 Dec 2023 03:38:45 +0000
ROA not before:           Tue 05 Dec 2023 03:33:45 +0000
ROA not after:            Tue 03 Dec 2024 03:38:45 +0000
asID:                     266636
IP address blocks:        128.201.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e4:b6:84:2d:33:7b:39:45:d0:b2:f1:86:57:03:da:a5:6f:49:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BB812570793F27C1E5A61B45140B6550487AB2
        Validity
            Not Before: Dec  5 03:33:45 2023 GMT
            Not After : Dec  3 03:38:45 2024 GMT
        Subject: CN=5318D9ECBA9944CFA54CDEE2DB1B6E11CC48DA07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:7c:a4:c7:45:27:4c:67:3e:4c:4d:5f:4f:
                    75:94:28:b4:d5:9a:04:78:15:c7:e2:22:75:36:6e:
                    70:2c:05:2e:81:8e:61:41:be:95:e0:1c:f7:e5:7c:
                    f0:60:6a:bf:22:d3:74:b0:0a:a5:e6:c3:5b:68:c1:
                    fd:5a:a1:2e:a6:de:f3:1d:9c:0c:03:da:a6:0d:8c:
                    c9:66:5f:95:25:7f:38:a6:01:90:ef:06:3c:52:eb:
                    ca:ad:2b:33:d4:6d:15:b3:25:56:5d:a5:2b:14:2a:
                    ba:32:14:cb:69:ae:28:f4:34:17:af:14:01:3a:a1:
                    66:8c:78:fa:53:5d:bb:6c:36:68:54:fb:d1:52:c8:
                    41:55:e1:da:54:82:dc:22:50:ee:96:c7:c3:63:64:
                    5e:0d:4b:5c:06:fe:53:21:7c:14:a4:e1:43:33:d2:
                    9d:2d:67:69:df:f8:db:c6:28:17:c8:e1:f9:1d:c8:
                    c6:e9:58:d8:e7:eb:c5:1b:2b:56:4e:4f:f7:7b:6e:
                    04:ca:60:8d:b5:3f:80:f8:43:d3:89:4d:ab:ac:ce:
                    48:0e:1e:62:d1:cd:65:1e:dd:5d:a7:50:74:e0:89:
                    91:5e:3f:25:d8:a0:36:d0:ee:1e:2d:ac:d0:63:69:
                    9b:23:fd:2a:cb:c4:49:36:95:48:86:84:29:23:5a:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:D9:EC:BA:99:44:CF:A5:4C:DE:E2:DB:1B:6E:11:CC:48:DA:07
            X509v3 Authority Key Identifier:
                keyid:01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35382e302f32342d3234203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:14:52:ee:a6:d9:c6:fe:0d:b6:a8:c8:06:2f:7a:e6:e1:
         ac:6c:a1:73:a4:3d:11:d5:b7:1c:9c:76:e8:4d:22:0b:2f:35:
         b9:44:dc:0b:3e:40:8d:1e:78:c3:05:f8:12:76:ad:f7:79:9c:
         04:44:99:75:60:b1:90:94:41:f0:d6:3e:c7:89:dc:bf:56:96:
         13:ab:41:8f:93:12:de:cc:5d:bc:c0:d6:75:6b:83:a2:e3:d8:
         12:af:0f:34:9d:79:a9:ff:90:a3:2d:5b:7c:74:6a:99:be:94:
         89:bd:b5:c6:65:02:3e:09:b3:8c:8d:e4:26:c1:d4:0f:88:4f:
         06:64:c3:8b:a5:6c:89:95:05:6e:74:4d:f2:41:12:0a:3b:82:
         3d:ec:4a:5b:72:30:47:48:87:76:74:42:0c:fe:31:69:94:34:
         f5:b2:1f:eb:91:57:06:b8:e0:3c:83:de:37:0f:4b:a1:0b:05:
         1b:16:a4:a9:11:45:b0:f6:56:52:ea:e2:ce:ce:99:be:6b:63:
         10:7b:6e:da:8a:bf:63:8a:2b:e3:02:2d:06:ec:ed:d3:c7:76:
         b2:c2:ed:31:f8:c5:6a:c4:2b:71:77:bc:7d:17:b8:64:6d:43:
         ba:4d:4f:84:1d:9c:b5:54:4a:68:47:42:ce:f7:6f:99:be:eb:
         d6:c1:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org