Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138342e302f32322d3232203d3e20323634353130.roa
File:                     3133322e3235352e3138342e302f32322d3232203d3e20323634353130.roa (raw, json)
Hash identifier:          v9v+BAEiuF6yQ1MVBS+EcKXl7y/Ckn+IcuAWZFcibeo=
Subject key identifier:   CF:B9:09:B4:9A:4F:32:74:17:C8:F9:63:8B:6E:BD:1A:EC:D6:6F:1C
Certificate issuer:       /CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
Certificate serial:       34F5F9236FFC81D8AE6B1C3FC50CB81D5477B6D3
Authority key identifier: 67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138342e302f32322d3232203d3e20323634353130.roa
Signing time:             Sun 29 Oct 2023 04:56:33 +0000
ROA not before:           Sun 29 Oct 2023 04:51:33 +0000
ROA not after:            Sun 27 Oct 2024 04:56:33 +0000
asID:                     264510
IP address blocks:        132.255.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f5:f9:23:6f:fc:81:d8:ae:6b:1c:3f:c5:0c:b8:1d:54:77:b6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
        Validity
            Not Before: Oct 29 04:51:33 2023 GMT
            Not After : Oct 27 04:56:33 2024 GMT
        Subject: CN=CFB909B49A4F327417C8F9638B6EBD1AECD66F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:0c:e8:7f:dc:cc:f8:72:56:b5:ab:5d:29:
                    db:64:6f:63:96:d0:8a:e3:fc:ed:9f:9f:09:fd:29:
                    ec:fb:d6:3a:09:f3:ac:96:3a:b7:28:79:aa:e6:65:
                    11:6a:32:1c:f5:cb:b7:8c:5a:0f:7d:ba:66:3b:a9:
                    27:a4:32:57:b9:55:73:47:cf:23:90:46:4b:aa:23:
                    14:26:7a:f0:18:25:46:0d:7d:54:82:63:47:12:dd:
                    ad:93:1d:f7:da:2a:5a:5e:ba:26:73:0b:d6:a3:2b:
                    13:67:40:4a:80:0f:e7:95:18:c6:09:ff:59:3a:73:
                    29:b9:ce:fc:b4:7e:e4:b2:2a:36:85:28:d7:72:46:
                    4d:30:6c:a2:24:b3:f0:31:fd:95:51:44:70:ee:b0:
                    9b:4c:55:63:6a:f8:e5:5b:48:e8:74:99:23:b4:96:
                    3b:f5:27:e0:15:36:79:26:3e:81:ab:e4:fe:ae:ef:
                    9c:19:30:4a:84:ad:f7:ce:3a:c5:81:b5:41:2b:0a:
                    42:af:32:fc:e5:33:10:c5:15:a4:99:79:7b:1b:73:
                    f8:e7:c5:f2:e5:bc:d8:ad:e2:6f:c4:92:90:11:2e:
                    b4:bd:d3:61:e6:23:92:81:4e:30:bc:cd:ec:e0:bf:
                    97:37:a1:cb:42:e5:89:2b:e4:9e:6c:21:77:ec:ae:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B9:09:B4:9A:4F:32:74:17:C8:F9:63:8B:6E:BD:1A:EC:D6:6F:1C
            X509v3 Authority Key Identifier:
                keyid:67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/67E19ECE95F8080219ADF0EBA93A317A18815FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138342e302f32322d3232203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:bf:28:dd:6f:0c:0b:36:c3:56:f2:33:bc:e9:1e:ad:11:
         bd:6a:ad:70:b1:ac:d2:17:32:34:5e:03:a9:4b:2f:09:de:c5:
         0d:dc:ef:20:ae:df:e7:b3:f7:3d:8e:73:3c:af:a1:66:17:20:
         ab:0e:f1:f6:19:ce:c9:2f:54:0f:f8:33:58:7a:9d:ab:45:69:
         7b:10:15:11:27:62:7d:e6:16:e7:4b:ad:99:12:3c:00:6f:15:
         fc:fe:56:30:25:46:3f:f0:41:6b:90:44:5e:ff:77:65:9b:f8:
         23:af:cb:09:16:b4:9d:72:5d:b4:0d:31:64:9f:a1:3d:c8:82:
         3c:77:81:74:b3:26:bd:d2:c3:8f:2c:53:34:f7:69:66:e2:d9:
         ad:e8:64:7c:16:11:9a:19:f1:1a:c2:ea:bf:cf:9e:70:94:35:
         c9:a7:0a:2a:37:94:7c:34:18:30:b8:5f:1e:57:a4:75:54:cd:
         15:9e:02:a1:a7:f7:e0:25:35:e9:72:ca:4c:53:d5:22:5e:af:
         70:a5:6f:8a:a3:2f:7c:ed:2f:ab:c0:6c:f5:da:91:49:2b:9f:
         eb:82:23:b1:1f:82:c1:f2:97:cd:5e:f0:45:9e:b5:f8:4f:47:
         71:9c:4d:f2:c9:1c:49:35:44:f6:c6:25:1c:81:ac:d8:41:da:
         d6:fa:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org