Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa
File:                     3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          em25F85LApvYm+Jr0DZX1nVS7IhS0UnaUzHuhvoTBD8=
Subject key identifier:   FA:6F:E8:CE:C2:B7:B4:B3:0D:47:19:6C:2D:40:D9:9D:A7:A8:15:04
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       40D4E53FF21CFE572A2E27CEAF354371F627EC97
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        132.255.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d4:e5:3f:f2:1c:fe:57:2a:2e:27:ce:af:35:43:71:f6:27:ec:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=FA6FE8CEC2B7B4B30D47196C2D40D99DA7A81504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:2e:31:15:16:db:f1:d0:1b:fa:d9:bb:f9:
                    25:c1:c0:21:2c:b4:46:03:75:e2:0c:e5:bd:aa:56:
                    4a:c7:13:6b:3a:64:de:40:43:1d:e5:40:ad:1e:50:
                    8c:44:77:57:89:ef:bc:81:f9:00:50:ef:43:cc:91:
                    0b:1d:cd:90:0e:85:61:de:b4:27:ad:50:46:aa:94:
                    84:d4:7f:86:86:26:95:ca:9d:30:58:28:32:21:95:
                    f2:e3:13:6c:53:44:70:a0:f4:4a:a9:cd:57:d7:50:
                    88:d0:ea:b0:d8:a0:ad:51:c0:06:1b:93:0d:b3:c3:
                    2c:4c:22:e2:a0:c0:da:5a:f6:59:c3:91:ce:90:18:
                    19:40:23:d9:58:c9:5a:c3:1c:be:aa:ce:b9:0f:55:
                    d1:bf:21:6e:b9:65:54:cf:9e:e4:c5:d0:29:92:4c:
                    6f:e5:66:4a:95:80:a5:e2:62:ca:88:15:4b:f7:01:
                    a0:b5:70:aa:95:75:65:11:8b:af:e0:41:c1:1b:f6:
                    75:3d:1f:6a:7f:de:7e:d1:c8:ae:ba:6f:21:14:af:
                    2a:73:6d:89:4c:11:13:f6:87:cd:7e:58:58:58:be:
                    c2:aa:79:85:11:be:2e:f2:c8:c1:13:eb:e1:fb:96:
                    ee:99:ff:1b:03:25:19:ae:c1:2b:5e:ec:f8:b6:ec:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6F:E8:CE:C2:B7:B4:B3:0D:47:19:6C:2D:40:D9:9D:A7:A8:15:04
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:c1:66:77:a9:12:02:e2:be:0e:eb:1d:2d:42:57:5e:54:
         63:9c:4f:d4:47:d3:64:49:6d:b5:63:9e:e7:3f:8c:2e:95:d4:
         23:51:62:e0:a7:68:43:6f:99:db:57:6c:76:5e:95:c4:ae:cb:
         b1:ad:e8:1e:13:c2:ed:d3:3a:7d:1a:8a:e3:90:84:81:af:36:
         bd:a5:7e:ab:22:a5:43:6a:f3:48:7a:f7:f8:30:bd:5b:32:0c:
         42:45:10:10:f2:de:33:42:ae:13:f9:ba:65:49:32:dd:30:94:
         df:ea:f3:27:72:25:b3:87:1b:14:4d:dd:8c:ae:ea:5f:8f:0f:
         81:07:8a:dc:6d:8d:a3:a0:6f:66:a0:3f:db:7c:74:3a:1b:f4:
         cb:f1:52:bc:4a:6a:da:fb:33:60:ff:b7:51:e6:6a:30:bc:fa:
         e5:c2:08:d2:1d:ac:22:bb:e7:6c:47:d0:b5:30:ea:e2:7e:ce:
         57:30:29:98:39:80:7d:e3:97:82:55:bf:62:b7:02:6e:1b:dc:
         be:12:df:c8:b7:fd:c6:4e:0a:ab:31:08:a9:df:f0:8c:f6:f8:
         18:4d:30:7a:2e:b4:0d:d3:86:f3:e5:47:62:ae:c4:cf:ea:81:
         be:2a:9c:55:ce:14:b4:31:2c:a9:01:31:61:f1:7a:09:6d:c2:
         39:c7:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org