Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3232203d3e203533303438.roa
File:                     3133322e3235352e3137362e302f32322d3232203d3e203533303438.roa (raw, json)
Hash identifier:          I7w6Bh1LU6EO2R2BEbTtCZKAcyQymcILpjz1SveFZko=
Subject key identifier:   34:37:F7:4B:77:51:91:5E:70:14:7F:CD:D2:78:0F:1E:41:7F:C9:42
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       3B33C667C6A488C0BFBCA5989A6E2BEF09154012
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3232203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:16 +0000
ROA not before:           Wed 23 Nov 2022 18:34:16 +0000
ROA not after:            Wed 22 Nov 2023 18:39:16 +0000
asID:                     53048
IP address blocks:        132.255.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:33:c6:67:c6:a4:88:c0:bf:bc:a5:98:9a:6e:2b:ef:09:15:40:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:16 2022 GMT
            Not After : Nov 22 18:39:16 2023 GMT
        Subject: CN=3437F74B7751915E70147FCDD2780F1E417FC942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:22:41:cf:cf:89:18:e8:90:c8:97:4d:95:
                    3c:84:91:ad:03:17:2b:c7:68:27:e9:77:73:f8:9a:
                    4d:75:a9:ed:aa:7e:dc:67:e0:98:ea:08:34:4c:aa:
                    20:96:57:d5:31:da:c0:ea:a3:3a:88:bc:cc:49:e7:
                    d7:de:33:b8:d9:6a:34:e7:29:77:2b:9a:0b:18:9a:
                    a7:ef:ac:06:05:b3:8a:5c:33:bd:94:bc:5a:c5:c0:
                    1d:c8:5a:9d:be:8d:a5:89:95:ec:0e:bc:df:a5:1a:
                    af:b9:d3:12:e0:bf:43:88:4f:5c:0d:b5:39:40:de:
                    3f:b3:e3:72:5d:c1:87:c7:82:a7:ed:35:61:61:90:
                    79:6a:71:da:fe:f2:19:58:98:51:be:2a:0f:6f:43:
                    d9:e9:a6:d2:70:b3:ed:e0:a0:13:43:b6:95:a0:a0:
                    75:20:a1:8b:49:ef:30:df:16:7c:d2:78:dd:8e:05:
                    2f:70:2b:8b:52:ff:8b:e1:9e:87:3c:e8:63:93:1b:
                    1c:04:43:91:cb:6f:fa:ae:64:a5:d1:a4:8d:6b:bb:
                    86:ea:d7:b3:3a:8c:97:0f:16:c5:a5:59:30:84:10:
                    8d:ef:56:47:7d:d9:25:f0:34:29:b7:71:06:f3:9f:
                    30:6c:dd:ae:bc:0d:87:07:8a:5f:9e:29:2f:a1:d1:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:F7:4B:77:51:91:5E:70:14:7F:CD:D2:78:0F:1E:41:7F:C9:42
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3232203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:7d:9f:ef:03:a2:68:23:da:71:34:86:9a:63:26:c5:c9:
         ae:62:47:35:b6:ef:82:0e:3e:cd:eb:ec:48:dc:57:51:2d:04:
         94:06:1a:fd:fb:5b:dd:cd:80:97:95:2d:c5:b3:75:e8:dc:59:
         e4:74:6b:2e:c2:e2:8e:fa:a1:c4:f3:dd:3c:b5:b1:ea:b5:0b:
         a4:0f:3e:f3:36:71:22:90:b3:e5:87:64:f9:86:a7:55:12:52:
         f0:fe:8b:c0:78:28:5f:e2:2c:c0:3b:4d:1f:7e:36:6a:25:fe:
         bf:6c:23:2c:18:75:a9:e2:a9:b5:b2:3c:7f:36:90:f4:2c:2d:
         2d:20:36:9e:0c:26:ac:7b:24:0c:c0:93:43:a2:38:fa:6d:0a:
         74:fb:00:af:d6:0f:57:1e:5f:ad:8a:39:aa:bc:5e:c2:69:0f:
         0f:f8:3a:a4:4f:7b:31:02:97:87:70:ad:da:d9:d6:5f:d0:5e:
         4d:27:1c:b7:db:be:17:21:06:64:9c:ab:e7:e3:29:ed:b2:89:
         89:98:d7:d3:a4:76:78:c5:d2:eb:8e:51:88:17:5e:e2:a9:54:
         3e:d7:37:9a:c8:6f:33:e5:0e:6c:78:60:bb:9f:51:55:96:6e:
         e5:53:9b:46:a8:61:c8:ca:00:e4:b2:9d:2a:3b:02:c9:00:71:
         ff:45:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org