Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          OuDmO3exTcZ92xP0DvmGzaxQyz4RxL0ePXQ9G+tKNIw=
Subject key identifier:   F6:77:58:B7:1C:13:D7:41:CF:0B:1A:E3:CC:C9:6A:80:FE:8A:ED:BE
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       3910F334EEF322D14F900F902C6EF98137F4F28E
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa
Signing time:             Tue 12 Sep 2023 18:00:00 +0000
ROA not before:           Tue 12 Sep 2023 17:55:00 +0000
ROA not after:            Tue 10 Sep 2024 18:00:00 +0000
asID:                     264509
IP address blocks:        132.255.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:f3:34:ee:f3:22:d1:4f:90:0f:90:2c:6e:f9:81:37:f4:f2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Sep 12 17:55:00 2023 GMT
            Not After : Sep 10 18:00:00 2024 GMT
        Subject: CN=3082010A0282010100C241B0211156B3CEB947DE9F8C3513E5F0BD4184203886324684472F120D861FC8C8414B3997EEBF12CE6E3A86FD63895BF64206DB044638A0126598B7EDE2AFA85C4E8C46A2BEE6E5F4057E95C7C2DFF6D66AB694E47C214C7127F09255EF8F3F90AEDBE4B282317CFF4CF9C19A454413D558A0B0AB0304DC4CA8CD709364D927950FC193A626380EC81402D3662B0878AB4AD070A710D060443273A3B3B849712CE58891B07EB725B46ADF96606D9E9B24DF33388A7AEECB944DDD64DB12811FA92BD5269F5CA75ED48ADF992A02D2E00DFE4061D7A3A76B4BCE881F75C42CF2BA4FC7DDDCA5CB381CC0113F7A392CE32CBC98467B217FFA7E274AEC57172B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:b0:21:11:56:b3:ce:b9:47:de:9f:8c:35:
                    13:e5:f0:bd:41:84:20:38:86:32:46:84:47:2f:12:
                    0d:86:1f:c8:c8:41:4b:39:97:ee:bf:12:ce:6e:3a:
                    86:fd:63:89:5b:f6:42:06:db:04:46:38:a0:12:65:
                    98:b7:ed:e2:af:a8:5c:4e:8c:46:a2:be:e6:e5:f4:
                    05:7e:95:c7:c2:df:f6:d6:6a:b6:94:e4:7c:21:4c:
                    71:27:f0:92:55:ef:8f:3f:90:ae:db:e4:b2:82:31:
                    7c:ff:4c:f9:c1:9a:45:44:13:d5:58:a0:b0:ab:03:
                    04:dc:4c:a8:cd:70:93:64:d9:27:95:0f:c1:93:a6:
                    26:38:0e:c8:14:02:d3:66:2b:08:78:ab:4a:d0:70:
                    a7:10:d0:60:44:32:73:a3:b3:b8:49:71:2c:e5:88:
                    91:b0:7e:b7:25:b4:6a:df:96:60:6d:9e:9b:24:df:
                    33:38:8a:7a:ee:cb:94:4d:dd:64:db:12:81:1f:a9:
                    2b:d5:26:9f:5c:a7:5e:d4:8a:df:99:2a:02:d2:e0:
                    0d:fe:40:61:d7:a3:a7:6b:4b:ce:88:1f:75:c4:2c:
                    f2:ba:4f:c7:dd:dc:a5:cb:38:1c:c0:11:3f:7a:39:
                    2c:e3:2c:bc:98:46:7b:21:7f:fa:7e:27:4a:ec:57:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:58:B7:1C:13:D7:41:CF:0B:1A:E3:CC:C9:6A:80:FE:8A:ED:BE
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:46:98:a4:e7:1f:48:cc:44:20:c4:c8:7d:f4:65:c4:54:
         1a:f6:d6:8d:e9:0b:57:93:ea:ae:49:6f:ff:cd:4c:16:f6:0b:
         73:26:8b:0a:e6:b1:13:80:09:3c:7a:ae:9f:9f:57:eb:66:f6:
         9b:09:94:0d:15:24:c3:c0:8a:c4:a5:69:e5:5f:c5:19:63:ec:
         ac:04:c5:e5:fa:c5:96:38:a2:2c:de:00:40:0a:99:1e:d5:a6:
         1b:57:c8:c9:19:f5:99:30:29:25:54:e6:47:8e:39:7c:2c:ef:
         30:9d:60:7b:d0:16:be:85:c8:0e:3e:93:7a:07:3d:5d:94:9b:
         96:7e:b0:5d:d9:1e:81:af:66:5d:9f:40:6b:41:06:07:77:3a:
         31:d6:1b:ee:dd:37:0c:b5:9d:c8:94:63:5e:3c:2e:db:9b:5a:
         f9:23:47:49:29:6e:6b:eb:08:2b:74:60:a1:55:66:6d:cb:39:
         b0:24:52:bd:66:5f:58:c5:6d:9c:0d:84:95:bf:80:8e:26:fd:
         27:90:9a:8a:51:ed:1b:0e:90:2a:65:6b:a9:ae:de:2f:15:fe:
         bf:a1:b4:c9:c4:c0:a0:b5:30:bb:2b:37:cd:10:25:db:a0:9f:
         23:9d:0a:c1:a6:a2:65:ca:4b:28:ad:1c:95:e8:4e:28:88:3a:
         38:e8:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org