Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          0bVuyMp6Ue2uvA4B41vSkc8tyB6oGWasOzDzV7b3zfM=
Subject key identifier:   A1:B2:71:2C:BF:FF:D2:C4:69:91:D7:A7:EF:2D:19:AC:B2:64:99:D3
Certificate issuer:       /CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
Certificate serial:       3DAD3CB6AFE9AA76340148F8A4AC1FE49CF85BF4
Authority key identifier: E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 22 Feb 2024 15:30:06 +0000
ROA not before:           Thu 22 Feb 2024 15:25:06 +0000
ROA not after:            Thu 20 Feb 2025 15:30:06 +0000
asID:                     53048
IP address blocks:        132.255.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ad:3c:b6:af:e9:aa:76:34:01:48:f8:a4:ac:1f:e4:9c:f8:5b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
        Validity
            Not Before: Feb 22 15:25:06 2024 GMT
            Not After : Feb 20 15:30:06 2025 GMT
        Subject: CN=A1B2712CBFFFD2C46991D7A7EF2D19ACB26499D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:3d:1d:91:64:23:1c:17:b1:b8:5d:c6:e6:
                    65:68:31:c6:c9:12:a6:17:f5:64:cf:0a:57:40:a9:
                    d1:10:3f:c8:c9:44:22:53:4a:2d:59:dd:8e:b1:2d:
                    5f:a0:3b:63:62:44:96:bc:4d:af:5e:6a:3f:47:07:
                    2c:96:e7:3d:dc:07:9b:4e:95:d5:75:83:8b:af:9c:
                    f2:13:45:e2:b9:5e:fa:1b:f7:ac:52:8d:b3:02:70:
                    a8:31:20:68:88:9e:07:47:8d:67:c4:37:40:d2:72:
                    9b:a1:42:54:f8:e2:12:00:a2:2c:90:d4:3e:7d:f9:
                    fd:45:06:04:f5:4c:c5:46:32:ea:2f:e3:07:00:1f:
                    2f:bb:e6:c3:80:51:91:91:21:b1:bb:f2:e9:16:28:
                    95:53:04:fb:5f:7c:fc:02:ac:53:5f:2f:3b:6c:0a:
                    24:00:7a:30:65:fe:1c:65:ce:48:f5:7f:3d:9a:16:
                    80:3a:0b:27:20:b9:7c:f4:cb:69:57:70:d4:72:3b:
                    66:e4:b6:8e:63:7e:88:dc:0e:91:62:0b:1c:81:d2:
                    fd:5c:04:df:be:4b:f4:e4:09:76:7e:eb:4e:16:2e:
                    de:b7:eb:50:61:7c:f7:cf:7d:17:ed:64:ca:d3:b0:
                    4e:b1:9f:b6:40:4d:77:03:7e:d8:3d:19:db:fa:1c:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:71:2C:BF:FF:D2:C4:69:91:D7:A7:EF:2D:19:AC:B2:64:99:D3
            X509v3 Authority Key Identifier:
                keyid:E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:69:46:ba:76:3d:3a:8b:02:cd:cf:24:f2:47:63:80:bc:
         78:e8:2c:78:c2:dc:e8:33:f4:15:0f:8a:5b:25:c4:65:9d:63:
         69:b5:6f:b0:41:eb:0b:70:da:4f:72:ff:69:06:57:4d:5d:34:
         ac:1e:96:a0:75:5c:56:6e:71:0e:04:2a:5d:85:1e:29:55:f9:
         55:6f:d0:5f:20:68:24:4d:f5:5b:c4:28:47:11:58:d3:8a:42:
         be:f0:67:9c:05:14:8c:36:4b:1d:31:eb:dd:46:8b:65:07:c2:
         90:5a:f6:31:a9:27:6d:3b:5f:58:1c:21:83:10:18:a2:8e:a6:
         d1:ed:b2:0e:a2:2b:b5:09:11:87:8f:90:10:20:77:4b:53:39:
         7d:af:83:0f:91:a5:39:64:e6:2f:4f:6a:9b:e3:b2:fa:b8:64:
         26:57:a7:f0:17:70:18:73:50:7a:7f:4f:d3:a0:73:8d:9f:1a:
         ad:cb:95:7a:d1:ac:4e:87:2f:67:6b:c8:a7:36:d1:27:36:41:
         63:92:db:8a:22:e3:de:b8:b8:63:9d:57:b0:61:3f:f6:48:70:
         6b:6a:34:c6:83:d8:29:67:14:27:a0:b8:28:87:ee:66:73:c7:
         9a:8e:64:1f:0c:f7:5d:55:ff:52:f9:11:12:16:87:60:8b:92:
         f4:8f:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org