Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35392e302f32342d3234203d3e20323636363336.roa
File:                     3132382e3230312e35392e302f32342d3234203d3e20323636363336.roa (raw, json)
Hash identifier:          sFxJRz9LtKCRtzF5vsm8VWR35r11eWCBsRxQ3TkKTh4=
Subject key identifier:   33:6B:17:01:60:48:C6:92:EA:80:34:5E:4B:2D:57:6F:4F:78:34:D1
Certificate issuer:       /CN=01BB812570793F27C1E5A61B45140B6550487AB2
Certificate serial:       6D2FDCE1AF20E32AB306E9B55D77F671B6F142CA
Authority key identifier: 01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35392e302f32342d3234203d3e20323636363336.roa
Signing time:             Tue 05 Dec 2023 03:38:49 +0000
ROA not before:           Tue 05 Dec 2023 03:33:49 +0000
ROA not after:            Tue 03 Dec 2024 03:38:49 +0000
asID:                     266636
IP address blocks:        128.201.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2f:dc:e1:af:20:e3:2a:b3:06:e9:b5:5d:77:f6:71:b6:f1:42:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BB812570793F27C1E5A61B45140B6550487AB2
        Validity
            Not Before: Dec  5 03:33:49 2023 GMT
            Not After : Dec  3 03:38:49 2024 GMT
        Subject: CN=336B17016048C692EA80345E4B2D576F4F7834D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:f5:03:77:7c:e7:5e:36:6b:88:01:c4:5b:
                    6a:c2:18:a9:61:85:b7:a5:be:0b:26:cc:7b:4b:84:
                    f4:3b:71:b5:cf:86:43:84:1f:cb:a4:99:d2:03:24:
                    eb:72:6b:42:60:83:3c:3c:b6:8b:8b:ab:f9:e8:91:
                    c3:13:41:a8:94:ef:e3:ed:58:e3:fe:8d:f6:d3:f3:
                    68:96:1b:94:3a:5a:39:33:0c:04:61:3b:a3:f2:15:
                    f0:d1:91:1a:3a:70:af:47:ae:b1:cc:17:43:3e:68:
                    d9:f9:2d:41:4d:c7:dd:be:fc:72:1d:90:c0:21:ee:
                    f4:5c:87:71:c9:70:36:30:b2:40:bf:9e:11:83:61:
                    5a:3b:d4:41:dd:81:9e:c1:55:60:8a:32:c3:dd:32:
                    2c:03:3e:fc:89:70:eb:c4:da:0d:4d:5a:68:82:7c:
                    f7:33:12:4b:1c:53:27:ec:51:a0:ca:74:3e:98:0b:
                    de:8c:ee:56:89:fa:0f:7c:a8:6f:66:ed:35:85:ce:
                    22:c2:7b:5a:41:8b:a1:ce:15:9a:a6:8a:8f:ed:b6:
                    8e:da:c4:79:e2:51:09:ff:da:49:a8:40:2c:03:dd:
                    fd:4d:88:c9:a7:db:5f:3e:24:ff:65:11:8b:98:d2:
                    94:6c:b5:9a:7e:b7:b1:b6:5d:2b:c0:83:78:72:4e:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6B:17:01:60:48:C6:92:EA:80:34:5E:4B:2D:57:6F:4F:78:34:D1
            X509v3 Authority Key Identifier:
                keyid:01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35392e302f32342d3234203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:08:38:93:48:36:e2:48:86:a9:91:64:89:c6:3d:5b:1a:26:
         f5:5f:66:58:5e:ad:49:01:86:7c:d1:e3:c7:21:bc:98:7a:67:
         33:d3:78:05:0f:3e:57:7a:75:31:7a:a9:38:56:cd:a7:45:13:
         72:94:56:fd:85:f6:44:5f:ab:d3:2d:63:75:a4:11:98:8f:65:
         ac:7c:70:ff:93:a1:0f:e8:fd:a9:24:6d:11:79:25:86:2a:45:
         07:4c:00:16:4e:2d:23:82:94:16:fd:67:af:9c:7a:f6:cc:8e:
         d9:d2:df:2b:a8:b9:68:f3:71:6c:1f:2d:ef:23:50:4e:ca:ae:
         c8:0d:dc:b2:36:b4:64:6d:a1:57:72:c6:5f:cc:8d:11:95:08:
         33:72:8d:e2:99:16:26:6c:d5:56:2c:ed:d5:ad:7a:c7:17:91:
         fd:0a:04:09:40:63:2d:37:16:fc:2c:b3:c6:b2:93:80:82:f7:
         be:cf:85:e2:94:b6:4b:bd:e2:fd:e3:a3:31:b9:09:17:20:be:
         54:2f:96:93:51:a1:51:8b:ec:32:13:b4:eb:0b:84:85:e0:4e:
         cb:61:74:e8:26:f3:fb:88:6b:c5:30:43:e8:3c:27:2c:02:d5:
         19:80:e5:c7:3e:89:a5:84:f0:2d:6c:34:df:13:35:d9:fe:f6:
         d1:01:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org