Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          1mi2mFJdO5gr8nGZY+/zW6s0XevYMYahPZq3eXI9X4g=
Subject key identifier:   8F:0E:75:E4:14:F8:EF:0E:58:8E:D4:60:BF:12:A2:C6:28:8F:8E:CC
Certificate issuer:       /CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
Certificate serial:       0552E7E43201BA071B73A7733298FE8E232019A7
Authority key identifier: E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 22 Feb 2024 15:30:09 +0000
ROA not before:           Thu 22 Feb 2024 15:25:09 +0000
ROA not after:            Thu 20 Feb 2025 15:30:09 +0000
asID:                     53048
IP address blocks:        132.255.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:e7:e4:32:01:ba:07:1b:73:a7:73:32:98:fe:8e:23:20:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
        Validity
            Not Before: Feb 22 15:25:09 2024 GMT
            Not After : Feb 20 15:30:09 2025 GMT
        Subject: CN=8F0E75E414F8EF0E588ED460BF12A2C6288F8ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:0e:36:7e:e4:bd:be:e9:7b:52:06:ed:3e:
                    0f:4e:3b:a2:c2:7c:1d:d2:ff:ad:4a:07:a9:8d:1b:
                    e3:d3:40:c2:d7:2d:90:36:0c:4c:e7:fd:49:ac:e5:
                    12:44:ae:50:48:b7:93:41:5c:7c:d1:74:bd:9d:54:
                    ac:cd:23:1d:04:f9:55:f9:1f:29:40:80:cd:5c:b1:
                    2d:21:bb:f5:8a:a2:19:fe:ec:e3:28:25:90:c9:61:
                    da:62:83:84:14:eb:c6:a2:c4:5c:c1:88:7f:81:df:
                    17:fb:93:a2:7b:93:c8:d5:00:1a:22:a5:c1:1f:52:
                    b8:8e:56:21:fd:f5:06:46:17:0e:66:0a:62:10:5f:
                    d5:2f:d5:3b:7a:4e:3b:9c:35:34:e9:82:11:59:e7:
                    bf:ec:f3:8d:14:5a:2e:e8:42:51:14:ab:4c:fd:2b:
                    c6:4e:df:87:a4:dd:87:22:b2:89:42:7c:7a:07:30:
                    db:e8:b2:ce:7a:89:a9:0f:a5:ef:7a:40:90:0b:bf:
                    16:e0:02:04:8e:b0:66:26:3b:80:95:dc:3f:09:66:
                    4f:6d:74:d9:ee:bd:b6:a3:7f:09:c5:30:15:5e:fa:
                    26:e5:6d:be:1d:ab:43:42:34:8c:3b:ec:8d:67:d6:
                    d6:72:55:95:3f:f9:3d:16:3a:a7:86:4e:25:cb:05:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0E:75:E4:14:F8:EF:0E:58:8E:D4:60:BF:12:A2:C6:28:8F:8E:CC
            X509v3 Authority Key Identifier:
                keyid:E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:a1:b0:0f:e9:2d:b7:ad:11:b3:80:22:8c:2a:4c:af:3d:0c:
         4f:b8:6c:58:d9:7c:c4:14:6c:31:db:ec:14:77:32:19:ad:5f:
         05:1d:69:f5:ae:82:46:6f:9f:9d:70:ab:a1:df:04:03:1d:af:
         63:91:b9:a3:67:b1:34:7d:2a:49:04:a4:36:e5:e2:42:92:b1:
         52:d7:e4:1b:ae:83:8b:3a:6a:30:77:c8:90:ea:4d:41:15:cf:
         f5:3c:65:2f:88:52:73:f2:bb:60:3e:9a:e1:b2:3a:18:45:b1:
         3c:ef:67:41:e0:2f:64:dc:52:ef:9a:59:54:b4:57:d3:a5:f0:
         ca:5c:c7:25:06:01:c9:6e:52:53:65:e8:02:c4:cd:b1:59:cd:
         50:e3:da:66:b2:aa:ad:4a:2e:5f:95:4b:4c:68:ea:65:01:55:
         97:da:b4:97:45:ae:fb:ed:15:23:7e:09:b3:02:f1:3a:6c:7b:
         ec:91:bd:95:52:34:02:6e:5c:3a:29:70:86:5b:68:72:84:5f:
         92:ba:b8:b7:41:d0:9e:f3:e1:a7:8c:a6:15:27:28:54:a1:88:
         c8:1f:11:f4:1c:4b:49:1f:a0:4f:f8:8a:8a:0b:3e:95:e1:cc:
         e8:f7:59:97:29:45:61:aa:92:9f:47:05:6a:23:b2:e9:fb:cb:
         47:7a:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org