Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35392e302f32342d3332203d3e20323636363336.roa
File:                     3132382e3230312e35392e302f32342d3332203d3e20323636363336.roa (raw, json)
Hash identifier:          WuQMgnzSD26pDoqVwefaGH3magmBKMwKUrwG5lm14dI=
Subject key identifier:   93:76:51:03:70:E8:72:12:1C:84:8B:AF:E8:31:26:06:CF:23:B9:6C
Certificate issuer:       /CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
Certificate serial:       6104265A0D4973D3CF26564BF1B963C5DE281540
Authority key identifier: 9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35392e302f32342d3332203d3e20323636363336.roa
Signing time:             Mon 06 Mar 2023 02:32:30 +0000
ROA not before:           Mon 06 Mar 2023 02:27:30 +0000
ROA not after:            Mon 04 Mar 2024 02:32:30 +0000
asID:                     266636
IP address blocks:        128.201.59.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:04:26:5a:0d:49:73:d3:cf:26:56:4b:f1:b9:63:c5:de:28:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Validity
            Not Before: Mar  6 02:27:30 2023 GMT
            Not After : Mar  4 02:32:30 2024 GMT
        Subject: CN=9376510370E872121C848BAFE8312606CF23B96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7b:22:69:92:cc:49:61:13:60:26:47:93:ec:
                    63:f9:fa:c3:9c:c9:f8:8a:be:91:52:6a:fb:fd:6f:
                    98:18:d1:62:d9:9f:ea:25:21:82:91:4d:15:17:ff:
                    59:85:71:fb:81:95:08:10:a5:97:70:26:73:9a:de:
                    de:d6:3f:56:2d:f1:74:f5:54:e8:53:b1:ae:53:8b:
                    5e:8f:f4:97:27:dd:77:6e:11:bc:20:24:8f:75:75:
                    94:bc:63:2f:41:b4:0c:8a:ef:79:85:dc:ba:92:55:
                    86:6b:8e:6c:89:97:cd:d5:b0:9d:26:34:78:dd:0c:
                    97:92:17:72:9a:eb:6d:7f:7b:42:85:dd:fb:d1:db:
                    49:5d:e7:18:1d:be:f8:48:8e:c1:0f:5b:5a:d3:ce:
                    0b:f7:3d:32:dd:5f:15:84:28:55:52:dd:4d:52:24:
                    5e:b6:21:53:10:fa:f0:5d:6c:35:79:23:93:01:a9:
                    5e:cc:4b:bd:4e:ec:8a:da:e2:5a:82:a9:ca:3c:48:
                    0b:91:db:f5:b7:50:6b:4a:6d:61:8b:d1:1e:62:95:
                    75:8b:97:45:72:e9:f3:e3:13:66:c6:c0:c8:1e:1a:
                    80:d3:af:8d:16:9b:d8:a8:f4:57:f9:59:f5:6e:d7:
                    34:39:cc:26:68:56:59:01:c2:b5:a1:27:4e:ec:3e:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:51:03:70:E8:72:12:1C:84:8B:AF:E8:31:26:06:CF:23:B9:6C
            X509v3 Authority Key Identifier:
                keyid:9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/3132382e3230312e35392e302f32342d3332203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:cf:eb:78:1f:46:0f:4f:46:ab:a1:15:7b:ae:9b:fe:de:
         ac:b0:f7:65:6a:d1:19:87:61:19:c8:e6:1b:4a:d1:43:d7:cd:
         52:88:cc:c6:db:95:83:ec:a9:14:1d:da:09:3c:17:fe:03:0a:
         83:61:db:cd:02:23:48:c9:32:3e:3d:8c:93:6a:cf:47:8b:ba:
         57:c9:1d:60:48:9d:8b:4a:c8:13:58:d0:05:75:cd:9c:57:43:
         2b:47:c5:dd:c5:ac:0b:bf:ec:95:dd:d9:e2:11:ef:70:cd:5c:
         73:d6:67:2e:68:dc:11:f6:01:23:09:6d:0d:fb:24:03:cc:c2:
         f7:13:fd:2f:70:e6:f3:0e:d5:65:ff:02:69:c0:6f:8b:b3:68:
         3c:98:c9:82:dc:1f:fe:39:92:ab:de:71:72:d6:33:a3:03:37:
         71:34:2f:8c:e7:b7:b7:42:0e:2c:4d:4a:93:52:cf:bb:51:06:
         e6:1a:90:51:49:20:ef:6f:b2:bb:bd:93:7f:a8:ae:ac:93:b3:
         1c:cb:d3:02:b4:4a:2f:48:bc:f3:eb:f2:02:73:ed:ad:50:71:
         f7:7b:e3:c0:4d:27:c3:36:7a:a2:92:a7:f3:f1:d9:df:a2:ef:
         aa:48:51:a2:0d:3a:d3:51:aa:58:57:58:96:ad:ca:20:36:85:
         b2:c4:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org