Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/3133322e3235352e33382e302f32332d3233203d3e20323634343535.roa
File:                     3133322e3235352e33382e302f32332d3233203d3e20323634343535.roa (raw, json)
Hash identifier:          tY0CPaPz+ccXuW13PPoXE393OELuJ/M9nb5rzENjvJo=
Subject key identifier:   C6:F5:19:BA:C8:22:FB:D2:0E:81:23:D0:AF:B2:7D:21:00:51:97:0F
Certificate issuer:       /CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
Certificate serial:       2E76DC5272926A0BA72A657F77435BD83A2A4ECD
Authority key identifier: DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/3133322e3235352e33382e302f32332d3233203d3e20323634343535.roa
Signing time:             Tue 02 Aug 2022 19:44:05 +0000
ROA not before:           Tue 02 Aug 2022 19:39:05 +0000
ROA not after:            Tue 01 Aug 2023 19:44:05 +0000
asID:                     264455
IP address blocks:        132.255.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:76:dc:52:72:92:6a:0b:a7:2a:65:7f:77:43:5b:d8:3a:2a:4e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
        Validity
            Not Before: Aug  2 19:39:05 2022 GMT
            Not After : Aug  1 19:44:05 2023 GMT
        Subject: CN=C6F519BAC822FBD20E8123D0AFB27D210051970F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:b0:78:f0:66:28:6a:10:bf:8b:17:71:cc:
                    dd:63:47:c9:24:98:0e:07:37:31:5d:9c:39:83:d5:
                    0f:d5:e4:35:cd:dd:40:d9:51:72:84:30:f3:00:26:
                    fe:69:a7:a2:94:cd:cd:4c:93:b8:33:b6:09:9e:1d:
                    3f:bd:b0:97:26:08:50:ae:3c:e9:54:7c:b6:9e:dd:
                    da:8e:64:3f:f3:1d:d1:fb:a9:6b:66:d8:da:65:d7:
                    71:07:6b:dc:50:08:28:d5:2d:bf:23:e3:c7:29:73:
                    bc:5f:c1:9b:73:db:bc:75:85:d7:8a:60:e7:ac:77:
                    3b:e3:a3:26:6c:4b:09:a0:b0:38:d8:19:d9:7d:cf:
                    b3:9f:e6:b8:64:4d:70:b8:24:31:a8:e8:0e:3c:f5:
                    2d:df:f1:20:b3:3c:37:c1:45:57:cb:d7:92:ef:89:
                    21:e6:07:29:76:30:20:bb:20:0c:56:17:bc:ba:ab:
                    dc:a9:a3:61:ff:ae:c4:66:0f:44:bb:20:ac:75:ce:
                    ca:1f:65:f0:b8:22:0a:02:02:b3:b0:13:dd:44:28:
                    07:3c:f2:f5:62:b8:dd:4f:e3:e5:46:81:1a:95:84:
                    cc:45:f4:f1:02:ef:c6:2f:c3:81:c2:65:ac:93:ed:
                    3d:31:03:50:16:b3:b1:d0:17:90:05:c5:08:b8:74:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F5:19:BA:C8:22:FB:D2:0E:81:23:D0:AF:B2:7D:21:00:51:97:0F
            X509v3 Authority Key Identifier:
                keyid:DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/3133322e3235352e33382e302f32332d3233203d3e20323634343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:a1:53:04:1c:71:8f:ac:f5:c4:71:97:dc:68:9a:48:06:
         fb:85:8a:ba:1b:78:f7:9d:10:4e:1d:a1:c3:0f:6d:8e:a6:cb:
         70:be:1a:14:a0:3d:9b:3f:0c:4f:9f:2c:e1:7f:b0:9f:a3:81:
         cc:f1:7c:7a:d8:e3:e8:4b:eb:56:ea:3e:da:40:20:b6:37:6c:
         1b:70:c9:a7:8f:fc:bf:77:5f:4c:b2:3c:ba:29:d2:43:cc:85:
         1f:eb:15:4d:e4:89:8c:60:12:43:57:85:aa:05:fc:4f:69:c6:
         e2:76:e4:86:4a:56:d6:da:f3:5d:2d:bf:1d:60:40:68:af:8b:
         e5:19:ae:60:45:e0:17:91:a4:c4:48:4a:b7:15:fd:2d:cc:c3:
         3a:25:04:c7:79:5e:f6:86:75:8a:16:73:ce:b4:04:3d:bb:a5:
         b8:90:ef:66:67:04:96:4a:78:59:42:f5:f9:37:60:c7:e4:28:
         02:b6:bd:c4:a2:4b:03:32:c8:f2:7d:6c:2a:37:bd:bd:e1:6e:
         84:a5:88:64:7f:6f:28:d3:64:de:10:fc:75:66:5f:52:43:a8:
         6a:c9:f3:2b:f3:78:eb:20:3f:9f:b7:7a:c5:de:34:ee:ee:a2:
         54:14:e3:c6:ea:b1:e4:97:b1:9e:1e:98:03:8d:65:ce:74:83:
         62:0c:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:19 2023 by rpki-client on console-fra.rpki-client.org