Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/3133322e3235352e3234302e302f32322d3332203d3e20323634353338.roa
File:                     3133322e3235352e3234302e302f32322d3332203d3e20323634353338.roa (raw, json)
Hash identifier:          kvF+C5/dvkxDYHQep8xqaUFpvp+zxoA6PTwdRUmBrzU=
Subject key identifier:   65:98:D8:8F:E6:F7:A6:8F:3B:E8:4A:82:9C:6B:36:5E:64:0C:93:7B
Certificate issuer:       /CN=A5517DDFA3CE9B3626553FD5F843D3B05D1626A7
Certificate serial:       711FCD3350DC2DD34EB642FBED37D5D98683950A
Authority key identifier: A5:51:7D:DF:A3:CE:9B:36:26:55:3F:D5:F8:43:D3:B0:5D:16:26:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/3133322e3235352e3234302e302f32322d3332203d3e20323634353338.roa
Signing time:             Tue 03 Oct 2023 18:10:33 +0000
ROA not before:           Tue 03 Oct 2023 18:05:33 +0000
ROA not after:            Tue 01 Oct 2024 18:10:33 +0000
asID:                     264538
IP address blocks:        132.255.240.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1f:cd:33:50:dc:2d:d3:4e:b6:42:fb:ed:37:d5:d9:86:83:95:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5517DDFA3CE9B3626553FD5F843D3B05D1626A7
        Validity
            Not Before: Oct  3 18:05:33 2023 GMT
            Not After : Oct  1 18:10:33 2024 GMT
        Subject: CN=6598D88FE6F7A68F3BE84A829C6B365E640C937B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:f2:ea:89:e6:e4:e5:a0:f0:e1:cd:0f:85:
                    64:9d:90:73:b3:6f:da:e8:99:2e:c2:22:6c:37:5f:
                    00:22:73:56:da:b7:91:8f:3d:b0:ef:79:2d:c9:b3:
                    e0:46:94:ff:40:9d:9e:c2:fd:3c:70:52:1e:5b:ad:
                    32:37:f6:0b:da:5e:51:f4:80:f7:4b:5a:9c:b8:57:
                    cd:a1:83:a9:a6:2d:11:0a:e0:13:4d:5b:f4:04:10:
                    4a:ba:fe:a8:ff:05:2d:a3:e5:67:73:83:ce:ad:13:
                    3e:79:2c:a5:6c:70:68:10:09:99:ab:a1:ec:96:af:
                    1d:a1:f5:2e:24:c5:22:ac:ad:89:17:19:45:4f:22:
                    fb:36:a3:44:64:33:1b:33:4a:95:08:fc:9d:ad:27:
                    68:d0:de:74:db:cd:1f:aa:ce:29:0c:be:4e:3c:32:
                    fe:98:a4:9c:b2:49:95:c0:3f:44:d1:4d:f1:20:53:
                    54:3e:74:8a:27:6a:c8:f0:2c:a4:33:01:96:d5:04:
                    f2:b1:b2:20:10:19:16:fc:27:5c:65:c7:3c:39:65:
                    d2:41:a0:ff:fd:a9:9f:d5:3a:c1:79:30:0e:79:4d:
                    2d:f0:ee:b6:e4:05:61:be:08:f7:85:99:2d:1c:46:
                    be:ed:c7:b9:7e:ff:5d:0d:39:f2:f3:fa:1f:4c:08:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:D8:8F:E6:F7:A6:8F:3B:E8:4A:82:9C:6B:36:5E:64:0C:93:7B
            X509v3 Authority Key Identifier:
                keyid:A5:51:7D:DF:A3:CE:9B:36:26:55:3F:D5:F8:43:D3:B0:5D:16:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/3133322e3235352e3234302e302f32322d3332203d3e20323634353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:91:13:cb:1a:a4:9b:42:71:3e:bd:fa:fe:c2:80:5a:9d:
         f9:cd:f0:77:27:24:b4:7b:b1:1c:c7:8e:ae:eb:f3:0e:15:da:
         a7:ae:36:00:c9:f1:7e:4e:17:aa:5f:d0:a7:df:ef:c6:4d:97:
         a6:b1:3f:ae:e9:f1:dd:92:b6:02:27:65:eb:57:5d:d7:f5:c1:
         1c:4e:bb:91:70:06:84:80:45:3e:7a:92:e9:6e:58:00:90:54:
         af:b2:7d:47:0e:e2:2c:2c:e1:6a:ca:d2:0b:17:9b:e0:84:9f:
         c6:8b:07:f5:bb:65:19:9a:86:5c:f8:46:74:20:4d:e9:fd:7d:
         5f:09:36:d6:10:1e:09:48:14:87:81:f0:87:22:da:db:88:27:
         ac:f9:34:ed:96:a3:1e:cb:42:45:bb:51:46:68:f0:bc:7f:2d:
         4e:51:25:f9:47:ba:1f:44:e1:56:2d:f9:2f:14:df:03:40:88:
         b9:37:33:a4:18:85:08:b3:57:63:15:91:57:0a:b9:63:ee:ac:
         12:48:e8:b8:42:38:1c:bd:b9:5e:28:3b:af:f3:f0:5f:34:cb:
         29:c0:8b:66:ea:c9:59:77:cf:2e:c1:06:ac:9b:e6:2e:7b:91:
         02:b1:e7:b9:7b:9e:04:f1:8d:11:d4:5c:93:89:92:c0:ce:d0:
         40:84:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org