Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          C/K/DaxEi12RW5TWH4RscrKABoqcF/4QPx7Y51kycMw=
Subject key identifier:   81:99:F4:EF:59:AD:2E:68:69:A0:A1:C5:9A:4D:2E:97:2B:2B:3B:35
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       24D0AB52A580DE6EE2344A6F6956FC8FDAF54DB7
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
Signing time:             Mon 04 Dec 2023 18:00:00 +0000
ROA not before:           Mon 04 Dec 2023 17:55:00 +0000
ROA not after:            Mon 02 Dec 2024 18:00:00 +0000
asID:                     264509
IP address blocks:        132.255.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d0:ab:52:a5:80:de:6e:e2:34:4a:6f:69:56:fc:8f:da:f5:4d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Dec  4 17:55:00 2023 GMT
            Not After : Dec  2 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:94:c5:bc:b7:7b:68:3c:c7:c0:af:a2:e4:22:
                    24:68:6b:71:8c:18:cd:cc:58:69:1a:ff:6d:c9:af:
                    e1:a3:92:36:e4:2d:7a:97:14:7c:08:b2:3d:f5:9c:
                    29:ce:54:9c:de:08:c2:03:ba:32:00:c8:a8:e2:04:
                    69:ff:43:58:b9:69:19:77:48:96:5b:0d:63:06:2f:
                    76:a1:ff:e5:0a:a4:f6:ce:48:b2:b2:c8:5f:d1:28:
                    b9:55:07:ab:a1:bb:1d:5b:e5:c0:93:48:c7:4b:5b:
                    7e:50:b2:41:f7:1d:7b:29:c6:37:32:12:b3:b2:12:
                    ad:bf:94:b3:4b:2c:11:86:b5:d6:2d:c2:dd:7c:b7:
                    a9:e1:d0:f1:37:f9:17:d3:05:55:97:56:cd:c6:f1:
                    20:cb:87:ad:fd:f8:6f:1c:4f:8a:e8:97:7b:48:4e:
                    9e:82:db:16:dd:2d:ad:c1:95:4b:b0:7b:60:be:d9:
                    83:6d:7f:a0:d7:2e:bf:b8:b2:06:08:d1:8c:fc:ff:
                    6b:dd:73:af:09:62:aa:a2:61:7b:23:fa:c0:02:81:
                    9d:7c:79:53:39:3b:94:c1:1e:46:bc:c0:10:62:db:
                    5a:8c:c3:da:84:f2:b8:0e:59:4f:39:76:fb:9a:36:
                    5b:16:45:0f:38:6c:dc:54:83:e3:94:2d:7a:d4:83:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:99:F4:EF:59:AD:2E:68:69:A0:A1:C5:9A:4D:2E:97:2B:2B:3B:35
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:53:8e:e6:64:db:a4:f5:cf:a9:60:8a:b7:ad:fb:ab:a4:
         b5:68:c0:f0:e5:09:9c:57:e6:ae:bb:2f:a6:9b:22:e9:a9:c2:
         97:cd:04:e5:05:4c:77:20:38:8f:96:77:de:b1:e5:9d:3d:d0:
         3a:d1:47:ce:e0:a4:68:4a:8b:f2:4f:c8:42:9e:5b:db:94:cf:
         d3:e1:fa:f4:92:d6:ef:cd:8b:df:48:d2:3f:53:3d:9f:fe:1f:
         fe:38:06:e7:3c:1e:5c:a0:b3:0c:01:81:87:7d:61:f6:11:a2:
         53:45:6b:4e:df:d2:5a:5b:1a:98:9b:18:38:26:e6:b2:77:7e:
         33:2f:07:c0:02:fb:f8:63:13:73:e0:4f:94:e1:87:83:7d:38:
         3b:b2:19:c9:df:fa:52:c2:11:7a:3c:09:44:b4:b0:12:c7:7a:
         0a:e0:09:7d:af:44:c7:15:d5:93:3a:0c:dc:14:09:af:ef:24:
         80:81:04:80:21:d5:f8:80:6c:d2:a8:9b:12:7d:f5:f3:a7:e7:
         da:d4:7f:d4:38:c8:60:91:66:67:b5:1d:f4:de:cd:15:5e:38:
         e0:93:5f:13:06:30:21:d6:80:4c:02:32:fe:1a:23:a7:73:88:
         c2:f5:5a:35:b4:84:aa:1a:2d:84:95:8e:1d:37:c6:54:bd:c0:
         9a:1f:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org