Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          d+H4bpuYNENXOh4Go8q4L3bCcWiwPA76zOvFuEN3JIg=
Subject key identifier:   CA:DC:B4:FC:2D:CC:96:D2:9D:E7:EB:B8:D0:57:EB:DD:7E:3F:40:C4
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       213CBC8EA1E54F50860F05E4523D9222F96332
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa
Signing time:             Tue 12 Sep 2023 18:00:00 +0000
ROA not before:           Tue 12 Sep 2023 17:55:00 +0000
ROA not after:            Tue 10 Sep 2024 18:00:00 +0000
asID:                     264509
IP address blocks:        132.255.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3c:bc:8e:a1:e5:4f:50:86:0f:05:e4:52:3d:92:22:f9:63:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Sep 12 17:55:00 2023 GMT
            Not After : Sep 10 18:00:00 2024 GMT
        Subject: CN=3082010A0282010100D901A28914C88CDE76A9204DB5B09AF51952F37BFB62C170CA267F4D3B958FCB72382F3A349DAE26269E43FCCF5CAD67DE00F0B0AEF631C511965EABB19637654E8B91D5432B89EB648CD79AB4B1BD3177EDF879188BCB4972577367DA666567C54A01D18454C3F68B82B3865627E2BBA15671029F8F972CEF397C46124E8C7501E8299FE5EF012A7C2A3DD65A16CD11CA6CE86E7FCCC6C50D97E7CCF9C19F8F61098D132A89329E912DEDD7062114E4CE94540E1D1D82A5FB49957113DC80A2BA9D5462464D1D41F13BF32AF841DB9C57CF7E451D2ECF93DB9731F675D18D0771572AFE0AA452FCB45F58F165A9B1540BF8E4B2F53CFE4933F507EA3E38DCB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:a2:89:14:c8:8c:de:76:a9:20:4d:b5:b0:
                    9a:f5:19:52:f3:7b:fb:62:c1:70:ca:26:7f:4d:3b:
                    95:8f:cb:72:38:2f:3a:34:9d:ae:26:26:9e:43:fc:
                    cf:5c:ad:67:de:00:f0:b0:ae:f6:31:c5:11:96:5e:
                    ab:b1:96:37:65:4e:8b:91:d5:43:2b:89:eb:64:8c:
                    d7:9a:b4:b1:bd:31:77:ed:f8:79:18:8b:cb:49:72:
                    57:73:67:da:66:65:67:c5:4a:01:d1:84:54:c3:f6:
                    8b:82:b3:86:56:27:e2:bb:a1:56:71:02:9f:8f:97:
                    2c:ef:39:7c:46:12:4e:8c:75:01:e8:29:9f:e5:ef:
                    01:2a:7c:2a:3d:d6:5a:16:cd:11:ca:6c:e8:6e:7f:
                    cc:c6:c5:0d:97:e7:cc:f9:c1:9f:8f:61:09:8d:13:
                    2a:89:32:9e:91:2d:ed:d7:06:21:14:e4:ce:94:54:
                    0e:1d:1d:82:a5:fb:49:95:71:13:dc:80:a2:ba:9d:
                    54:62:46:4d:1d:41:f1:3b:f3:2a:f8:41:db:9c:57:
                    cf:7e:45:1d:2e:cf:93:db:97:31:f6:75:d1:8d:07:
                    71:57:2a:fe:0a:a4:52:fc:b4:5f:58:f1:65:a9:b1:
                    54:0b:f8:e4:b2:f5:3c:fe:49:33:f5:07:ea:3e:38:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:B4:FC:2D:CC:96:D2:9D:E7:EB:B8:D0:57:EB:DD:7E:3F:40:C4
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:6a:9a:54:c4:c2:3b:d2:d4:d6:2b:ff:d4:71:13:f0:4c:
         aa:ea:b0:5e:35:68:88:4f:cd:00:2e:5e:ce:ee:4c:41:ba:bf:
         04:4e:13:34:4e:4e:e4:37:6d:9e:d7:44:f4:0c:53:3e:1e:b8:
         7d:f8:c2:7e:7f:0c:cd:e2:e0:61:68:42:bd:bd:fe:74:8c:03:
         b5:95:7a:37:7a:11:4a:c5:83:12:f8:15:d6:4c:c0:40:07:57:
         56:a7:91:8e:b8:5e:62:60:86:f1:49:3e:71:7e:de:b3:b4:0a:
         2d:02:ab:9e:41:27:46:99:c0:17:98:8c:3a:08:e2:e2:f1:71:
         fd:b2:88:07:a0:bf:ca:9a:2c:1c:47:e6:4e:d5:54:30:b0:3a:
         95:66:0f:6e:97:7d:2d:a9:9a:9d:32:1c:3d:f0:f9:66:95:16:
         73:41:30:d3:c2:8e:21:f0:2c:cf:29:15:8c:54:aa:b9:17:32:
         bc:6f:7a:79:f9:32:6b:88:b1:28:ed:8e:84:6a:49:f8:45:fc:
         ca:05:7d:ee:5e:43:66:80:dc:5e:68:85:26:a1:77:12:7c:46:
         0d:9a:12:1e:f0:55:aa:e3:e2:11:ed:06:3e:e1:13:40:46:3d:
         5b:67:e1:04:9d:c0:1f:05:e7:31:11:d7:f7:1d:28:d9:cd:51:
         2b:73:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org