Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa
File:                     3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (raw, json)
Hash identifier:          Hgjtv1Dq92OkL2Sec2ad8V/9kFRBJSjG5y5wsVU4OvU=
Subject key identifier:   CF:5B:88:37:A4:CF:67:13:E5:75:07:54:AD:47:3E:F6:DD:67:D7:0F
Certificate issuer:       /CN=7F686D97C07578DE89B36D9D965211C3C242B838
Certificate serial:       01EAA02442B76D582D1F65EF75FBA3D9D00D47BD
Authority key identifier: 7F:68:6D:97:C0:75:78:DE:89:B3:6D:9D:96:52:11:C3:C2:42:B8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F686D97C07578DE89B36D9D965211C3C242B838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa
Signing time:             Fri 22 Dec 2023 19:20:00 +0000
ROA not before:           Fri 22 Dec 2023 19:15:00 +0000
ROA not after:            Fri 20 Dec 2024 19:20:00 +0000
asID:                     264517
IP address blocks:        132.255.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ea:a0:24:42:b7:6d:58:2d:1f:65:ef:75:fb:a3:d9:d0:0d:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F686D97C07578DE89B36D9D965211C3C242B838
        Validity
            Not Before: Dec 22 19:15:00 2023 GMT
            Not After : Dec 20 19:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:ec:bb:c1:c9:f6:97:96:1b:79:e9:7e:9f:
                    3c:e4:d7:d7:6d:98:50:46:ad:f4:cf:85:f9:b5:01:
                    c4:df:4f:3d:bf:48:7b:7f:26:5b:fd:8a:17:b9:68:
                    3d:a0:05:d9:39:ff:4d:e0:d4:5a:ed:2a:3a:52:20:
                    74:d8:6a:d5:75:44:c4:52:59:2e:51:7c:e3:e5:ec:
                    b2:36:53:08:7d:a5:63:c6:3c:82:22:e5:68:a6:50:
                    15:cd:7b:14:ee:67:b7:70:4f:27:fd:0e:a7:e3:d9:
                    5b:45:62:0c:66:a5:4c:41:1a:08:af:2e:96:80:27:
                    bf:cc:3d:e8:1e:9a:51:69:ff:54:bd:13:f3:ee:3a:
                    2c:10:fb:04:f3:3d:c1:d1:a1:66:c7:d4:32:98:4e:
                    85:52:2a:27:d3:3f:39:b4:30:5d:68:c4:df:fc:a3:
                    3a:4a:80:00:2e:6c:68:e8:2f:49:5d:c5:87:e0:a9:
                    da:4b:c3:51:05:b4:1e:58:2f:de:2b:e2:d4:10:24:
                    87:ff:aa:d0:65:a9:39:40:ad:d4:f5:25:e8:af:5f:
                    67:ed:61:74:dd:1d:86:1c:a4:d7:4f:d9:5f:63:a4:
                    55:47:6d:11:ac:37:53:87:0e:ed:a8:2d:5e:59:eb:
                    f6:ab:bb:31:93:86:42:c6:3e:85:03:74:ac:f9:00:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5B:88:37:A4:CF:67:13:E5:75:07:54:AD:47:3E:F6:DD:67:D7:0F
            X509v3 Authority Key Identifier:
                keyid:7F:68:6D:97:C0:75:78:DE:89:B3:6D:9D:96:52:11:C3:C2:42:B8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/7F686D97C07578DE89B36D9D965211C3C242B838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F686D97C07578DE89B36D9D965211C3C242B838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:82:5e:c3:c0:3a:41:25:d7:0a:72:fb:e7:d3:e1:d2:fc:
         9c:a6:b4:1f:15:48:fa:f7:28:9c:e4:4d:90:c9:e5:73:ee:8f:
         38:02:c0:9b:ca:e6:d6:4a:a3:ad:13:bc:5a:33:ea:f5:13:ba:
         45:29:09:39:d2:35:76:87:35:82:4f:d4:83:c1:14:34:c9:4b:
         1b:7e:7c:17:90:58:db:f0:9f:eb:9b:53:73:bd:f9:97:59:7e:
         da:c7:46:36:f3:b5:c7:66:75:7f:78:52:e8:76:5f:0c:14:9a:
         28:6d:67:d4:bd:47:f0:84:c0:ce:1b:22:31:41:a5:93:2b:e9:
         fa:41:d3:1e:39:a9:78:2d:ef:7d:19:f3:01:b9:4b:ea:47:41:
         bb:07:58:eb:91:c0:b8:04:ba:da:9b:51:5e:ec:01:b8:e4:ee:
         46:e1:ba:46:70:56:20:27:f5:b4:ef:fd:07:41:44:b4:ff:f6:
         2e:ce:57:ed:60:4a:9d:c8:0d:d0:dd:07:ab:09:45:15:1a:7d:
         b5:5c:b7:18:08:b0:6e:96:2e:65:5d:33:35:5e:70:d7:31:dd:
         84:d1:ef:75:2b:01:d7:66:d0:51:3a:e4:32:97:f0:fd:ee:5b:
         b8:41:b9:46:a6:29:5c:2a:ea:91:be:00:31:a1:b0:da:1e:b7:
         7e:c3:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org