Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/0/3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa
File:                     3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa (raw, json)
Hash identifier:          yqBIPRr3/a/fFwEJGa+kh18e4GrimqgqKWZROdhvbYc=
Subject key identifier:   56:D9:88:D0:8A:D3:44:42:A8:D4:1C:E2:8B:DE:92:6B:0E:9D:24:F5
Certificate issuer:       /CN=54E774C4C913B783AC258D7991B52EF06191920C
Certificate serial:       78FFAB9AB1B6151005A52BCE56C147F553D8B7C4
Authority key identifier: 54:E7:74:C4:C9:13:B7:83:AC:25:8D:79:91:B5:2E:F0:61:91:92:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54E774C4C913B783AC258D7991B52EF06191920C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/0/3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa
Signing time:             Thu 14 Sep 2023 05:49:19 +0000
ROA not before:           Thu 14 Sep 2023 05:44:19 +0000
ROA not after:            Thu 12 Sep 2024 05:49:19 +0000
asID:                     263472
IP address blocks:        132.255.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ff:ab:9a:b1:b6:15:10:05:a5:2b:ce:56:c1:47:f5:53:d8:b7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E774C4C913B783AC258D7991B52EF06191920C
        Validity
            Not Before: Sep 14 05:44:19 2023 GMT
            Not After : Sep 12 05:49:19 2024 GMT
        Subject: CN=56D988D08AD34442A8D41CE28BDE926B0E9D24F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:30:c8:af:0c:7d:54:d9:6e:47:2a:ba:41:
                    c9:00:25:6f:b8:62:0d:67:59:97:38:4b:00:75:30:
                    d5:28:e7:78:d1:9e:e3:e3:0b:be:60:42:2e:f3:d6:
                    55:fd:7b:ec:f2:a4:c9:3f:8a:18:d9:1f:9e:5d:e5:
                    63:5e:a5:ee:09:a7:48:4a:62:66:ed:a1:10:80:a4:
                    02:21:06:67:b9:ec:b3:7d:b6:32:54:4c:73:5c:1c:
                    5f:c8:5f:8f:3b:37:b0:ca:f8:ec:7a:e0:a1:33:59:
                    db:ce:ed:c2:8f:30:bb:3e:8f:ea:37:94:f5:cd:2e:
                    41:8e:c0:ad:49:f2:56:82:39:be:12:71:a9:df:33:
                    66:06:c0:af:f9:cd:86:61:66:22:7d:0b:7a:64:6b:
                    29:fc:f5:72:32:06:69:da:a7:6c:9d:e6:94:f7:e3:
                    2a:8d:d9:bf:47:57:5b:cf:1e:b4:52:44:e5:7e:99:
                    b3:a5:c9:6b:a7:e3:fe:2f:df:a4:64:4b:8c:68:7d:
                    17:8c:fd:3f:ab:8d:0e:7b:ab:ae:97:cf:82:7d:e8:
                    36:15:3c:41:2b:e0:3a:90:9a:40:95:18:60:b6:6e:
                    10:e4:7a:64:74:a1:a1:5b:8a:c6:18:2d:0d:43:23:
                    e6:5d:2d:71:af:bd:dc:05:ac:b4:59:59:75:63:23:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D9:88:D0:8A:D3:44:42:A8:D4:1C:E2:8B:DE:92:6B:0E:9D:24:F5
            X509v3 Authority Key Identifier:
                keyid:54:E7:74:C4:C9:13:B7:83:AC:25:8D:79:91:B5:2E:F0:61:91:92:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/0/54E774C4C913B783AC258D7991B52EF06191920C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54E774C4C913B783AC258D7991B52EF06191920C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/0/3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:de:53:a1:4a:b1:f7:20:dd:c7:2e:15:6e:3d:ff:ce:80:a6:
         9e:22:c1:85:65:7e:05:13:1f:88:d0:91:eb:33:30:f7:5b:3f:
         1f:d9:48:9d:ff:f0:81:5e:99:89:23:ae:93:f7:f3:f7:1e:50:
         47:8c:03:57:b2:17:81:7c:e0:35:08:49:a1:ef:46:11:65:87:
         18:ca:29:f6:36:d9:d0:38:d7:bd:e1:3d:13:88:4e:2d:e6:43:
         ff:90:3e:d6:a4:d2:10:51:87:67:1d:df:1e:d7:62:60:c8:d2:
         55:83:66:6b:6f:c8:34:e3:3d:2a:43:3f:e8:7b:c1:78:74:6a:
         85:4d:06:ce:26:bc:79:ac:34:f6:6f:e9:13:13:af:bd:b4:87:
         27:45:85:25:67:5d:8f:d8:28:c0:ab:71:ff:d9:ff:69:83:18:
         44:a3:05:43:a5:d7:04:c7:8c:60:1f:91:ca:d0:a5:55:18:ce:
         df:45:6f:48:8b:05:95:e4:70:53:e1:cd:73:1f:84:81:ed:3c:
         4e:fc:09:94:a7:5f:18:7b:16:41:b9:c3:ba:7f:39:4b:33:47:
         9d:ec:46:74:8c:20:bc:03:f9:0c:7d:f3:93:9f:7d:ab:09:98:
         92:69:10:65:f8:5a:78:ad:2a:43:1a:02:6c:14:71:0f:ef:1a:
         27:41:5e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org