Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138362e302f32342d3234203d3e20323634353130.roa
File:                     3133322e3235352e3138362e302f32342d3234203d3e20323634353130.roa (raw, json)
Hash identifier:          hx4Ezh/0rXu6swfewXrQ14kulg/Z+ns8o0Mctog/0yA=
Subject key identifier:   11:9B:A6:CA:4D:9D:0E:7A:38:DC:86:C7:BC:E4:9C:19:4F:30:E0:ED
Certificate issuer:       /CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
Certificate serial:       36864900DC3DA3D1320B6BC5C4B6E7489D18C49F
Authority key identifier: 67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138362e302f32342d3234203d3e20323634353130.roa
Signing time:             Sun 29 Oct 2023 04:56:34 +0000
ROA not before:           Sun 29 Oct 2023 04:51:34 +0000
ROA not after:            Sun 27 Oct 2024 04:56:34 +0000
asID:                     264510
IP address blocks:        132.255.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:49:00:dc:3d:a3:d1:32:0b:6b:c5:c4:b6:e7:48:9d:18:c4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
        Validity
            Not Before: Oct 29 04:51:34 2023 GMT
            Not After : Oct 27 04:56:34 2024 GMT
        Subject: CN=119BA6CA4D9D0E7A38DC86C7BCE49C194F30E0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:f9:21:dd:be:2b:e6:4f:59:7b:a5:2b:6e:
                    6f:ff:8c:ef:cd:3e:e9:4e:bc:d0:03:53:d4:75:c2:
                    fb:41:3c:d2:a5:93:b4:e4:39:3c:8d:8a:6e:39:82:
                    fd:16:00:b5:21:f2:90:49:ca:d2:1f:c0:da:da:74:
                    96:34:50:c3:a4:a8:51:30:7b:00:50:94:1a:fe:04:
                    36:08:3b:63:96:2a:e2:7c:bb:57:d6:a5:f0:67:51:
                    77:5d:d6:49:e1:89:6f:e8:e7:04:a3:5f:fd:c1:48:
                    86:07:7d:48:81:8b:00:fb:4d:25:80:8c:9c:a3:b9:
                    e3:f5:ed:ff:a6:0b:0e:e0:dd:d0:2b:4c:ab:25:5b:
                    9b:1a:11:cf:95:19:54:de:9d:45:de:f5:19:d3:f4:
                    70:39:ee:b6:df:65:f6:f0:5c:d1:27:16:c2:46:43:
                    fc:36:7d:85:03:53:c3:30:19:3b:6a:9a:dd:d3:20:
                    17:3e:c1:a7:9b:63:d4:91:d5:bd:df:3c:81:8b:af:
                    37:cd:9d:df:5f:09:c6:68:0b:1b:7d:d7:5c:fa:f9:
                    f4:d6:df:4d:70:0e:9e:b5:d7:7a:8a:0f:0c:92:76:
                    44:df:07:53:23:5f:4b:76:19:18:e6:5d:82:94:ea:
                    45:89:04:ba:eb:92:72:2c:f2:28:13:97:89:40:62:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:A6:CA:4D:9D:0E:7A:38:DC:86:C7:BC:E4:9C:19:4F:30:E0:ED
            X509v3 Authority Key Identifier:
                keyid:67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/67E19ECE95F8080219ADF0EBA93A317A18815FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138362e302f32342d3234203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:c4:3e:6d:8f:c2:27:4f:bb:9e:7e:73:9f:f0:07:c9:41:
         1f:4f:66:54:8a:a3:44:b7:e3:ca:26:7d:46:e8:ec:f7:2e:ea:
         54:5b:a7:10:d4:a9:3e:b5:fd:92:ef:9d:00:e0:02:6f:9c:25:
         6b:6a:04:f8:05:d4:f1:8d:0c:14:47:c2:5a:bc:44:2a:2f:89:
         f8:c9:59:5f:b8:29:01:6c:09:4d:c6:e8:53:bb:44:fc:43:7f:
         ba:ce:f8:ba:0f:06:1a:65:79:89:0b:ed:46:aa:3a:54:fe:b5:
         6c:44:ed:6c:24:22:40:80:e9:a2:80:05:51:15:47:1c:d3:1b:
         a8:8b:09:71:a6:44:5d:dd:61:33:0e:45:24:8d:8e:72:f4:a3:
         fb:8b:8c:59:be:dc:65:aa:62:88:58:af:c4:72:16:91:f3:46:
         98:0c:15:50:a1:23:96:f1:6b:0d:2c:52:f2:5c:ad:79:11:cf:
         a6:ae:eb:a9:31:b5:92:80:fe:7b:de:34:fd:9d:20:d1:f3:4b:
         9d:e9:0d:79:85:63:de:b8:e7:88:1a:ec:f9:19:58:b1:7a:69:
         f6:95:bb:60:aa:a1:37:aa:40:36:03:91:06:ff:1e:b1:47:c2:
         43:e3:93:88:db:10:35:ef:70:39:e9:ba:42:d4:60:d5:0c:c8:
         a5:00:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org