Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/3133322e3235352e33382e302f32342d3234203d3e20323634343535.roa
File:                     3133322e3235352e33382e302f32342d3234203d3e20323634343535.roa (raw, json)
Hash identifier:          d5nt5qzNZn85lykbsmBhkbgZ4Om1s9w26CFdp0NVmRk=
Subject key identifier:   F2:4D:0E:35:91:EA:BC:BB:4A:04:AA:09:20:54:F3:14:97:71:5E:56
Certificate issuer:       /CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
Certificate serial:       2D845731A9B75807625A0E21B6249FF17584D9FF
Authority key identifier: DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/3133322e3235352e33382e302f32342d3234203d3e20323634343535.roa
Signing time:             Tue 02 Aug 2022 19:44:09 +0000
ROA not before:           Tue 02 Aug 2022 19:39:09 +0000
ROA not after:            Tue 01 Aug 2023 19:44:09 +0000
asID:                     264455
IP address blocks:        132.255.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:57:31:a9:b7:58:07:62:5a:0e:21:b6:24:9f:f1:75:84:d9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
        Validity
            Not Before: Aug  2 19:39:09 2022 GMT
            Not After : Aug  1 19:44:09 2023 GMT
        Subject: CN=F24D0E3591EABCBB4A04AA092054F31497715E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:e1:73:0a:c7:ec:08:83:f6:e0:8a:2d:7a:
                    15:80:73:32:b2:76:49:ff:b4:bf:a1:16:52:c4:e8:
                    2c:1b:2b:95:d9:c8:97:5f:ab:f1:57:f8:3f:14:c6:
                    90:1e:f4:c7:f8:50:87:3b:90:fa:ca:0d:a5:d0:30:
                    1f:95:de:2b:51:b2:dd:27:85:9f:b4:3f:d9:20:29:
                    9d:1c:91:ba:08:64:00:1f:3a:be:9a:02:97:7a:04:
                    7c:7c:e7:31:1c:5d:8e:70:47:b2:40:24:f3:b1:3a:
                    22:46:ae:98:5d:d6:80:d9:01:1e:aa:a9:8d:10:b7:
                    49:13:d6:16:a5:8d:04:d8:2b:bf:aa:6c:ef:34:d2:
                    12:65:14:1d:a9:be:04:c4:04:95:ac:02:85:a1:9e:
                    d3:74:5e:de:bf:55:b9:26:5d:92:ff:6f:38:2d:fa:
                    27:bd:08:22:58:e0:40:66:01:7d:b1:a8:c7:85:88:
                    5d:f8:db:13:a0:04:30:63:9d:56:48:39:8f:f4:e1:
                    36:39:1d:78:1e:eb:21:67:55:fa:66:c4:2a:e1:0f:
                    f3:80:10:75:c5:5e:ea:03:49:28:cd:c4:e7:e5:7a:
                    74:23:89:1e:8d:6b:82:05:ad:ae:d7:88:9d:0e:f5:
                    b1:0e:d0:8e:96:42:a4:31:22:f9:95:e6:fa:80:02:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4D:0E:35:91:EA:BC:BB:4A:04:AA:09:20:54:F3:14:97:71:5E:56
            X509v3 Authority Key Identifier:
                keyid:DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/3133322e3235352e33382e302f32342d3234203d3e20323634343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:f1:05:5e:61:6b:2f:dd:6b:1d:3a:12:99:47:8a:3c:83:5c:
         89:7b:ff:43:ef:fe:db:04:53:31:a5:44:99:58:a0:c6:15:95:
         0c:f8:82:f0:40:fa:b8:95:91:6f:74:8f:1f:88:ad:fb:c7:22:
         25:2d:06:1b:0d:cc:bc:7b:3c:39:ba:77:13:fd:be:0f:17:43:
         cc:a7:eb:45:3a:19:51:9e:47:0e:a2:c0:ff:ec:5f:27:d1:fe:
         95:88:23:f7:da:08:fc:b1:e5:ad:0a:a3:c9:f4:b5:eb:af:34:
         e7:7e:1b:f8:7c:40:02:86:dd:d5:13:9b:24:3f:52:82:37:9a:
         ed:45:7b:62:41:c0:5d:b8:3b:b6:63:8a:90:b4:c9:56:1c:db:
         f1:f0:74:b2:46:56:d6:4f:d6:b2:7e:22:e2:a0:70:9a:c1:11:
         1c:69:6a:73:78:67:0a:8e:fb:87:2f:57:11:7d:59:63:3f:61:
         bb:d1:5c:54:dd:3f:a3:71:d9:f7:8a:56:d8:98:e1:94:dc:c6:
         72:3d:dd:a1:a2:5b:28:1b:1d:2c:ea:ed:e7:05:8e:7e:c0:28:
         39:ab:3e:49:5c:26:7c:07:c2:19:e8:e4:db:aa:b5:2a:70:ff:
         00:84:81:b7:15:80:10:e8:61:5a:fa:f2:65:90:4c:74:22:f3:
         ae:00:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:31 2023 by rpki-client on console-ams.rpki-client.org