Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
File:                     3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (raw, json)
Hash identifier:          ry//t6ehOLCOYFQj+FRje7MDwAmH4YbrwPWFkul4Qv0=
Subject key identifier:   A1:8E:4A:50:E0:3F:4D:8A:D2:0A:19:2F:DE:8E:0C:21:56:58:85:23
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       3CB06BE7EB3801DA833C54BC54BF05C08AD3EB07
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
Signing time:             Tue 28 Mar 2023 15:11:09 +0000
ROA not before:           Tue 28 Mar 2023 15:06:09 +0000
ROA not after:            Tue 26 Mar 2024 15:11:09 +0000
asID:                     53048
IP address blocks:        132.255.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b0:6b:e7:eb:38:01:da:83:3c:54:bc:54:bf:05:c0:8a:d3:eb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Mar 28 15:06:09 2023 GMT
            Not After : Mar 26 15:11:09 2024 GMT
        Subject: CN=A18E4A50E03F4D8AD20A192FDE8E0C2156588523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:5a:d3:8f:2b:bb:ce:8d:1f:63:ee:3b:e1:
                    ae:a0:0b:c8:e9:47:68:08:34:a8:81:56:e2:ed:63:
                    5e:e4:55:c0:80:dd:40:32:39:4a:c6:69:29:0a:b2:
                    1d:10:b9:49:b5:46:9f:3e:fa:e2:6e:ce:45:64:5d:
                    f8:a9:4c:3c:03:f0:85:9d:48:dd:ad:2f:27:c4:fc:
                    28:e2:7e:bb:93:31:cd:68:f4:26:4c:19:dc:3e:b4:
                    b9:7b:6f:08:4c:0a:96:6e:10:e9:01:5a:f4:31:7d:
                    69:72:93:21:9f:1c:6e:b6:76:dd:8f:a5:39:30:a6:
                    3e:c1:2d:73:e3:15:a1:11:b7:e3:b6:50:fc:45:f6:
                    75:3b:17:32:ed:86:08:7b:00:ae:c0:10:cd:28:b8:
                    29:ac:ec:27:4e:bb:d3:85:61:8f:99:02:7f:bc:7a:
                    9f:11:3d:1a:8e:31:e6:5c:51:99:e8:44:e1:0c:40:
                    8d:b0:80:40:9f:8b:c7:c8:5f:b7:f4:33:fc:22:d0:
                    dd:a7:92:89:6a:0c:fd:aa:7e:20:12:79:6f:b1:05:
                    6d:ad:a0:b8:7f:85:1a:63:cf:db:48:03:0c:3a:2b:
                    b4:34:cb:30:da:58:82:fc:90:42:4e:cb:dc:27:76:
                    a9:39:48:cb:38:c1:48:33:a4:ad:88:e8:ad:0f:d2:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:4A:50:E0:3F:4D:8A:D2:0A:19:2F:DE:8E:0C:21:56:58:85:23
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:d0:15:9d:6b:7d:10:1f:b8:94:54:21:d6:d2:cf:75:48:
         30:33:90:aa:09:32:ad:13:42:8e:81:c9:6f:61:69:5d:58:95:
         97:6c:f0:94:e2:c9:6f:0d:c1:5d:06:e1:55:ba:03:ed:19:a5:
         f6:ec:dc:0b:7b:97:06:a2:24:fa:a9:0d:09:75:b0:a3:9b:9d:
         02:53:ad:21:45:08:6d:3c:b9:6e:36:f1:b6:02:ad:bd:e4:b2:
         27:20:13:2c:d4:f6:7a:b0:4a:64:7c:4a:14:34:4f:2c:af:64:
         89:5d:d7:e7:af:58:69:11:d2:cf:14:9c:9e:b1:12:e6:23:79:
         a6:05:81:28:21:d7:dc:ae:35:9a:b1:ce:b2:1b:6e:98:46:54:
         29:e4:b3:66:fb:0d:32:14:b6:bd:fe:84:24:e5:0e:88:a4:44:
         42:b2:f0:c7:ec:6c:84:b9:14:cb:ed:d6:b7:08:6e:56:d3:03:
         82:4b:ee:68:61:af:95:90:1c:f5:06:39:ff:43:09:14:ba:c5:
         3e:f2:10:5d:c2:4b:5d:68:17:00:4b:1f:c8:12:b7:82:8a:3b:
         43:0a:90:b3:87:3c:a1:a2:f5:d1:d8:78:fd:6c:62:bd:b1:4f:
         65:98:95:13:93:9d:6b:7e:55:bb:c5:91:0f:3f:4e:81:6f:cd:
         0e:9f:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org