Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35382e302f32342d3332203d3e20323636363336.roa
File:                     3132382e3230312e35382e302f32342d3332203d3e20323636363336.roa (raw, json)
Hash identifier:          ibICMN4diIEqvEM49MKjQ+oAcgi9BvRCmyCyz4WLG4o=
Subject key identifier:   0E:22:45:6C:E4:4C:22:0B:E1:63:C2:F9:95:4E:1C:DF:1D:99:A3:10
Certificate issuer:       /CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
Certificate serial:       657054433B255B583998EBE5CE7B9628337287E0
Authority key identifier: 9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35382e302f32342d3332203d3e20323636363336.roa
Signing time:             Mon 06 Mar 2023 02:54:30 +0000
ROA not before:           Mon 06 Mar 2023 02:49:30 +0000
ROA not after:            Mon 04 Mar 2024 02:54:30 +0000
asID:                     266636
IP address blocks:        128.201.58.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:70:54:43:3b:25:5b:58:39:98:eb:e5:ce:7b:96:28:33:72:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Validity
            Not Before: Mar  6 02:49:30 2023 GMT
            Not After : Mar  4 02:54:30 2024 GMT
        Subject: CN=0E22456CE44C220BE163C2F9954E1CDF1D99A310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:83:82:c3:8c:fb:e7:98:24:23:b2:19:c4:
                    30:db:f9:ef:09:56:d4:e2:e3:8b:8f:e0:94:f5:51:
                    fb:00:99:f2:86:3d:38:01:8b:f5:6b:d2:1c:83:22:
                    a2:d6:d0:16:42:b3:60:8b:ed:b9:fa:a6:bc:6c:dd:
                    03:d7:cf:99:a4:41:4a:9e:d6:75:8c:bc:4b:4c:d4:
                    6d:71:80:74:ab:6e:a2:ee:be:53:ca:32:ca:17:eb:
                    59:02:3c:f5:66:7c:e0:77:00:dc:73:4b:e0:77:10:
                    05:27:1a:bb:9a:af:35:c2:da:ae:4b:e8:7b:bb:4d:
                    17:fe:ac:b0:97:bd:08:f0:b3:9d:7e:e8:42:1f:8d:
                    b0:dd:01:ae:2d:68:b7:9d:ba:ea:e6:4b:41:4f:67:
                    6f:76:44:b7:65:57:66:88:9b:26:db:51:56:41:b9:
                    fe:9d:11:bd:29:6d:73:2f:ad:60:8c:da:d2:dc:3b:
                    cb:7f:12:85:84:ba:2b:62:4b:ce:cf:b9:65:a6:29:
                    27:9e:7a:e2:f0:be:c0:14:cc:12:2b:57:45:b2:b8:
                    72:8b:7e:f3:0f:14:9a:cf:f5:19:02:6b:f2:dc:ae:
                    66:32:d3:bc:d3:8f:78:1d:5c:2b:d6:4b:22:6f:f8:
                    dc:98:f8:8d:ea:20:0b:0e:62:5f:03:b7:1f:d8:26:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:22:45:6C:E4:4C:22:0B:E1:63:C2:F9:95:4E:1C:DF:1D:99:A3:10
            X509v3 Authority Key Identifier:
                keyid:9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35382e302f32342d3332203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:62:68:2c:bb:60:20:b4:59:dc:1b:44:d1:4c:b5:e3:86:a4:
         ac:2d:f9:87:0f:85:5e:b9:a2:da:3e:22:7a:a3:8a:a4:a3:1e:
         23:57:27:5a:5b:93:42:cb:e6:bd:3f:1c:74:ca:98:54:4a:57:
         2a:97:0d:22:79:92:ca:0b:bd:9b:b5:c7:2e:91:a6:a8:ef:d8:
         18:ab:a6:a1:eb:f5:0b:5d:2e:27:96:24:bc:a5:d9:6c:d3:c7:
         d4:00:5c:c7:f9:3b:6d:56:4e:7d:46:e9:5c:4e:db:be:b3:ae:
         5d:91:5c:01:80:19:9a:d5:28:2a:a5:e1:d5:5e:8f:5a:10:98:
         cd:95:35:1a:8a:ff:34:bd:6c:d5:8c:5e:21:fd:84:f8:36:bc:
         8f:1f:a1:89:f2:fe:98:20:1e:ec:69:f6:13:dd:8b:3c:99:40:
         50:4c:78:f7:7b:4e:1e:c0:bc:42:e6:37:35:4f:b4:f2:b5:8c:
         01:e0:ee:47:b8:12:bd:b1:53:5f:50:f7:2b:9b:83:d7:64:2a:
         f4:72:07:f1:ec:4e:b7:9e:be:1f:f1:53:64:7f:30:9e:e1:15:
         3c:c8:32:d3:f5:48:33:23:12:57:26:31:04:9c:54:40:da:02:
         a1:a1:75:07:be:5d:af:23:e5:02:89:44:05:e4:e6:ae:a8:4a:
         0c:0a:89:88
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZXBUQzslW1g5mOvlznuWKDNyh+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURGMDMzRDE0RDgxMDI0RTZEOTlEQUY4NkU0NzkxMTI4
MDVBRTNFMjAeFw0yMzAzMDYwMjQ5MzBaFw0yNDAzMDQwMjU0MzBaMDMxMTAvBgNV
BAMTKDBFMjI0NTZDRTQ0QzIyMEJFMTYzQzJGOTk1NEUxQ0RGMUQ5OUEzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHoOCw4z755gkI7IZxDDb+e8J
VtTi44uP4JT1UfsAmfKGPTgBi/Vr0hyDIqLW0BZCs2CL7bn6prxs3QPXz5mkQUqe
1nWMvEtM1G1xgHSrbqLuvlPKMsoX61kCPPVmfOB3ANxzS+B3EAUnGruarzXC2q5L
6Hu7TRf+rLCXvQjws51+6EIfjbDdAa4taLeduurmS0FPZ292RLdlV2aImybbUVZB
uf6dEb0pbXMvrWCM2tLcO8t/EoWEuitiS87PuWWmKSeeeuLwvsAUzBIrV0WyuHKL
fvMPFJrP9RkCa/LcrmYy07zTj3gdXCvWSyJv+NyY+I3qIAsOYl8Dtx/YJrrlAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDiJFbORMIgvhY8L5lU4c3x2ZoxAwHwYDVR0j
BBgwFoAUnfAz0U2BAk5tmdr4bkeREoBa4+IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SNVV1eDM5d21xZDR1M3hhQkdoRGlrc3BrUkVXWWtUalFMQjVvYzM5ckt6
LzAvOURGMDMzRDE0RDgxMDI0RTZEOTlEQUY4NkU0NzkxMTI4MDVBRTNFMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC85REYwMzNEMTREODEwMjRFNkQ5
OURBRjg2RTQ3OTExMjgwNUFFM0UyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
NVV1eDM5d21xZDR1M3hhQkdoRGlrc3BrUkVXWWtUalFMQjVvYzM5ckt6LzAvMzEz
MjM4MmUzMjMwMzEyZTM1MzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2MzYz
NjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACAyTowDQYJKoZIhvcNAQELBQADggEBAChiaCy7YCC0
WdwbRNFMteOGpKwt+YcPhV65oto+InqjiqSjHiNXJ1pbk0LL5r0/HHTKmFRKVyqX
DSJ5ksoLvZu1xy6Rpqjv2BirpqHr9QtdLieWJLyl2WzTx9QAXMf5O21WTn1G6VxO
276zrl2RXAGAGZrVKCql4dVej1oQmM2VNRqK/zS9bNWMXiH9hPg2vI8foYny/pgg
Huxp9hPdizyZQFBMePd7Th7AvELmNzVPtPK1jAHg7ke4Er2xU19Q9yubg9dkKvRy
B/HsTreevh/xU2R/MJ7hFTzIMtP1SDMjElcmMQScVEDaAqGhdQe+Xa8j5QKJRAXk
5q6oSgwKiYg=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:45 2025 by rpki-client