Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137382e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137382e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          ecSNIzZE4CoMK0hITtPOQtuRfhFmFMa4jSLBt/M1Ck8=
Subject key identifier:   FF:58:C7:84:BA:ED:59:76:70:80:E0:91:6B:31:6B:C2:F8:77:C3:91
Certificate issuer:       /CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
Certificate serial:       03375CAD94CA611FCCCCCF915A260CD7A4FEC36C
Authority key identifier: E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137382e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 22 Feb 2024 15:30:08 +0000
ROA not before:           Thu 22 Feb 2024 15:25:08 +0000
ROA not after:            Thu 20 Feb 2025 15:30:08 +0000
asID:                     53048
IP address blocks:        132.255.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:37:5c:ad:94:ca:61:1f:cc:cc:cf:91:5a:26:0c:d7:a4:fe:c3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
        Validity
            Not Before: Feb 22 15:25:08 2024 GMT
            Not After : Feb 20 15:30:08 2025 GMT
        Subject: CN=FF58C784BAED59767080E0916B316BC2F877C391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:30:7d:8c:d0:bd:d4:26:31:e2:82:6a:ba:
                    4b:88:cd:de:48:fd:a3:7b:72:03:66:fc:5e:6b:12:
                    fc:f9:4e:6e:91:a8:27:ab:89:b1:62:79:46:7a:25:
                    63:94:d6:3a:95:ba:96:6c:b9:0a:39:3b:90:59:e2:
                    0f:85:54:c6:a6:84:88:1b:1d:e4:96:76:5c:1c:cc:
                    85:99:40:2f:04:10:ef:b4:b3:8b:85:35:31:07:49:
                    56:65:36:82:e1:88:29:b0:14:50:79:85:44:df:2b:
                    0f:59:c8:3b:21:e0:c7:39:91:f9:0f:bb:8a:c7:7c:
                    5a:2a:92:cd:ff:ab:43:36:cb:ad:44:3d:20:3c:81:
                    8a:7f:ac:94:05:26:2a:f8:50:e0:59:28:14:53:4c:
                    12:54:91:42:96:23:37:6f:69:9d:a1:17:be:61:ca:
                    55:47:98:fc:f0:3a:2c:1a:b1:b8:5d:c4:56:82:ed:
                    4a:be:e9:ad:83:21:7d:c2:27:88:9b:31:96:c6:85:
                    f9:4d:81:73:a4:2d:89:c0:34:5a:ee:fd:f6:0e:a4:
                    2c:2d:8c:49:98:e6:0f:2a:69:6f:da:56:de:82:ee:
                    4f:cd:1c:5f:70:a2:29:d5:ba:93:29:8b:30:c9:68:
                    8e:2f:8d:77:40:71:88:7d:6f:28:75:25:44:2e:7b:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:58:C7:84:BA:ED:59:76:70:80:E0:91:6B:31:6B:C2:F8:77:C3:91
            X509v3 Authority Key Identifier:
                keyid:E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137382e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:cc:f3:ee:cf:7d:4e:3f:5c:0b:5f:38:82:09:21:b7:a2:
         71:b7:ba:57:54:3c:99:3d:5f:2d:1c:ce:18:f0:81:08:34:01:
         89:e1:4a:59:00:18:f2:ae:4c:54:a3:5b:72:12:da:d7:2b:0f:
         33:c1:be:fd:7f:f9:38:74:00:df:ac:e9:98:25:a1:af:8a:7c:
         6a:48:4e:6b:14:bb:5a:9d:b3:54:17:80:d4:b0:1e:0e:91:ea:
         11:e6:53:ed:9f:a6:c6:60:78:4c:46:15:f6:2a:d1:50:fd:74:
         ab:b1:d5:cc:73:79:8b:35:82:da:2d:16:b4:3e:df:30:b0:7a:
         88:4d:a2:40:15:ec:65:c2:ab:3e:e0:08:1a:16:25:8a:97:04:
         f5:61:f4:b3:58:d8:95:2a:31:f2:ee:bd:70:9d:de:87:60:eb:
         18:c4:fd:fa:e7:01:4a:49:25:17:ea:c6:76:cc:4e:4a:53:dc:
         c8:7f:0a:f0:3d:3f:56:77:a3:ef:40:e7:37:e5:ae:ad:d5:fa:
         93:84:7e:52:75:13:c5:f6:5b:e0:f3:6a:40:4d:75:f9:a4:9f:
         7c:ff:3d:70:f0:f8:eb:d2:75:71:ee:fc:54:25:c7:11:48:9c:
         02:97:4d:58:ff:ea:e7:d2:e7:3f:39:04:f9:ca:11:bb:30:bd:
         8d:f0:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org