Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          /nwIU48tBTXLt1MylzfSMVq9amHlOSD4rZg3s4HUaEY=
Subject key identifier:   AB:39:00:C6:D5:CC:F9:F6:BD:AF:3E:88:31:9A:9E:32:51:3F:04:3A
Certificate issuer:       /CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
Certificate serial:       311F605FF137322F3E4D49EE8B5F5943225979A9
Authority key identifier: E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 22 Feb 2024 15:30:04 +0000
ROA not before:           Thu 22 Feb 2024 15:25:04 +0000
ROA not after:            Thu 20 Feb 2025 15:30:04 +0000
asID:                     53048
IP address blocks:        132.255.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1f:60:5f:f1:37:32:2f:3e:4d:49:ee:8b:5f:59:43:22:59:79:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
        Validity
            Not Before: Feb 22 15:25:04 2024 GMT
            Not After : Feb 20 15:30:04 2025 GMT
        Subject: CN=AB3900C6D5CCF9F6BDAF3E88319A9E32513F043A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:43:d3:c0:1c:a0:20:25:1a:9d:bf:93:7f:
                    49:03:68:1a:97:e4:5e:7e:50:61:94:6c:05:07:ae:
                    a2:ae:61:8b:1f:3b:34:ce:62:bc:39:3d:a4:99:9d:
                    1c:bb:16:6c:23:ad:97:2d:10:37:27:d1:f0:11:59:
                    a9:d8:32:30:88:e8:79:05:4f:4e:4d:55:f8:14:d2:
                    fb:bd:a0:80:51:24:c4:be:2d:2f:60:a8:93:16:c2:
                    72:c4:e4:a3:87:8c:d9:23:7b:11:96:f3:86:44:68:
                    1a:54:07:4c:fb:57:cb:1a:92:76:8c:f0:ec:21:14:
                    73:6e:ad:b4:b9:7c:68:fd:ff:d0:71:a4:46:ea:97:
                    35:65:42:98:10:0e:f7:71:7e:d5:97:62:72:81:f5:
                    d3:14:d4:f6:3a:d3:83:a1:ba:46:8c:ee:f8:0e:a7:
                    ce:b0:57:18:e0:e1:af:67:f9:b2:c3:78:8c:07:0b:
                    9e:d7:e4:16:1e:24:bf:bf:7b:41:0c:a4:91:ff:c6:
                    5c:77:b5:85:3a:13:b6:71:6a:6b:1b:f8:cb:36:75:
                    db:47:38:5e:e7:5e:90:54:4a:ec:0d:0d:62:d1:0e:
                    64:63:0c:2e:63:ec:93:66:76:e8:37:ee:8d:3e:d0:
                    f7:db:28:3b:6d:d6:93:88:5d:40:f7:7f:09:49:c8:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:39:00:C6:D5:CC:F9:F6:BD:AF:3E:88:31:9A:9E:32:51:3F:04:3A
            X509v3 Authority Key Identifier:
                keyid:E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f1:22:35:35:1b:8e:7b:52:04:24:df:0b:ca:f9:db:72:8a:7b:
         6a:8a:1b:00:dd:e4:da:72:e6:a4:e7:33:9d:0a:45:9b:09:33:
         9b:7c:e9:44:75:6f:68:bc:61:bd:99:04:30:df:9d:f6:9c:3f:
         e5:2e:4b:71:6c:72:32:b0:71:c6:a1:5e:2d:1d:17:05:7f:20:
         94:7d:a6:2f:2e:40:97:64:d5:e1:4d:7f:4d:72:02:e4:55:47:
         a6:f3:17:21:03:47:b1:8d:7d:91:92:b2:ca:53:da:b3:b0:5b:
         c4:a7:d7:28:5c:71:f8:78:e4:2a:06:8f:40:ec:1e:fb:80:bb:
         32:43:46:fd:2a:88:e0:20:9a:de:e2:8b:d5:4d:ff:87:96:91:
         e9:f5:62:9e:8d:78:1e:9d:a5:bc:e7:d6:cb:b9:b1:9f:3f:fc:
         10:40:fc:ee:7a:52:95:16:8a:34:7b:5c:04:9e:b0:5c:12:8a:
         22:0d:d1:27:60:03:92:bf:15:b2:70:16:69:86:4a:e8:f9:14:
         1f:04:5e:9a:eb:1a:c8:11:8e:85:66:a6:36:c3:d2:b7:7e:7f:
         c1:0a:e8:a6:64:cd:96:8b:93:79:67:93:1c:b5:e6:e8:f2:22:
         3c:89:ea:8f:9f:db:67:bb:92:f0:ed:57:bf:1b:be:09:a0:0e:
         cf:74:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org