Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133322e3235352e3235322e302f32322d3234203d3e20323632363035.roa
File:                     3133322e3235352e3235322e302f32322d3234203d3e20323632363035.roa (raw, json)
Hash identifier:          cuJKQt/D6BtRlnDNlf95A9RDg2CiNdKNkH0GBuWwGkU=
Subject key identifier:   60:65:4A:ED:33:E3:33:26:C2:B7:D0:31:CD:26:73:F2:37:28:67:2D
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       5AFF9233E57DEC0D0464DCE6F445A9EDDC97ED42
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133322e3235352e3235322e302f32322d3234203d3e20323632363035.roa
Signing time:             Sat 03 Feb 2024 12:53:24 +0000
ROA not before:           Sat 03 Feb 2024 12:48:24 +0000
ROA not after:            Sat 01 Feb 2025 12:53:24 +0000
asID:                     262605
IP address blocks:        132.255.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ff:92:33:e5:7d:ec:0d:04:64:dc:e6:f4:45:a9:ed:dc:97:ed:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:24 2024 GMT
            Not After : Feb  1 12:53:24 2025 GMT
        Subject: CN=60654AED33E33326C2B7D031CD2673F23728672D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:f7:1d:42:b3:c6:93:97:98:14:32:8f:45:
                    8f:a1:f7:30:55:d4:bc:1f:1c:2a:6e:e5:01:0c:96:
                    60:81:da:5c:00:13:ea:5a:e9:0f:ae:10:0a:d8:d0:
                    35:ef:a5:05:ff:ed:b5:da:00:ce:55:fd:76:cb:69:
                    f6:6c:2a:b9:db:f8:58:77:0d:3a:72:60:d4:46:ec:
                    6c:69:e0:8e:ee:30:d1:50:22:e5:95:8d:36:bb:83:
                    47:75:f9:0c:5a:97:75:a7:96:fd:80:8b:37:66:b9:
                    f2:3c:6f:31:5a:45:f8:97:bb:48:2a:15:88:70:f3:
                    1b:c0:aa:31:e3:ae:e3:45:71:1f:07:87:b1:59:03:
                    b2:1b:d2:a0:93:05:8e:84:28:81:1e:8f:41:0c:7c:
                    42:31:02:92:13:01:81:99:5a:1b:cb:06:5a:c9:10:
                    cc:77:96:35:14:6d:78:65:bf:6d:44:d2:72:36:c1:
                    70:c2:6a:c7:51:11:51:b1:6f:e3:15:20:54:98:bd:
                    8e:27:96:82:63:c7:0c:e8:8b:7e:3c:40:f2:05:2b:
                    36:01:27:63:9c:98:8c:e9:1f:c6:7f:7a:7c:2a:31:
                    00:05:16:f6:bb:ba:0d:ac:5e:d4:58:0f:1c:36:b7:
                    d7:95:00:ae:5f:92:9b:91:be:73:e6:be:6b:1b:4d:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:65:4A:ED:33:E3:33:26:C2:B7:D0:31:CD:26:73:F2:37:28:67:2D
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133322e3235352e3235322e302f32322d3234203d3e20323632363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:6a:c9:c2:4c:90:bf:1f:e9:61:97:09:3e:07:58:b1:80:
         6d:b0:86:b3:4c:9b:11:f7:7a:36:70:3c:24:10:0d:de:02:71:
         be:0f:f2:de:79:df:c4:78:98:a4:3a:96:7d:38:9c:8b:3f:d1:
         37:40:3d:23:38:5a:1f:e0:81:b5:f3:a9:55:c2:b9:c8:04:99:
         cc:ba:c3:ec:9e:53:16:85:25:95:62:f1:ed:a8:2f:b9:0c:36:
         59:e5:43:43:48:60:3e:f5:61:07:46:05:8e:3e:e0:21:33:f0:
         59:ec:e3:cb:12:31:ab:12:93:1e:c9:16:b8:0e:ba:9f:40:72:
         ba:7e:e2:42:66:80:ae:6d:06:2e:71:be:37:b6:6f:12:96:14:
         f9:ae:79:80:b8:73:a9:f3:64:a6:53:c2:f4:1b:b4:ad:16:a1:
         96:b9:2b:e4:82:45:78:7b:d1:7e:27:40:02:68:00:fe:6d:aa:
         dc:5b:e2:ab:cb:02:9d:d4:cd:c7:45:5c:81:c4:e6:74:70:3a:
         fa:86:71:51:b3:f7:0c:ba:a9:4e:f8:34:0c:4c:8c:cc:a0:13:
         1b:66:c5:e3:69:41:d2:6d:27:ca:19:09:cb:cb:32:4d:9f:d4:
         af:8c:f7:a8:a3:b8:c9:80:8e:1a:88:f5:0d:77:49:9b:28:00:
         98:ac:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org