Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa
File:                     3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa (raw, json)
Hash identifier:          RyMuPfp2kJU/uuucmY3vaseqOPlO6PWF2IqsbJvTZW0=
Subject key identifier:   7F:A6:46:2D:63:6F:C5:06:18:1A:8F:C8:89:82:76:90:E8:62:20:30
Certificate issuer:       /CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
Certificate serial:       1F57D8ABF21E89BFD0351BB9E17DABF47953B43E
Authority key identifier: A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa
Signing time:             Fri 16 Feb 2024 20:48:12 +0000
ROA not before:           Fri 16 Feb 2024 20:43:12 +0000
ROA not after:            Fri 14 Feb 2025 20:48:12 +0000
asID:                     264513
IP address blocks:        132.255.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:57:d8:ab:f2:1e:89:bf:d0:35:1b:b9:e1:7d:ab:f4:79:53:b4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
        Validity
            Not Before: Feb 16 20:43:12 2024 GMT
            Not After : Feb 14 20:48:12 2025 GMT
        Subject: CN=7FA6462D636FC506181A8FC889827690E8622030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:90:38:f3:9b:4c:60:2b:f1:8f:c0:e7:21:
                    57:fc:b1:db:31:48:20:95:6a:11:6f:0c:98:b8:ee:
                    bb:01:7b:b3:c5:fa:bf:42:9d:b2:31:14:e4:09:fc:
                    41:75:60:c6:42:63:11:77:09:10:ac:38:a2:9d:ef:
                    e5:c2:0a:66:8c:f0:0d:7b:b8:71:ca:94:94:76:1b:
                    95:59:12:fd:a8:50:7f:2a:4f:3e:2a:bd:02:ad:01:
                    61:6a:6f:b8:2c:35:88:a8:2d:ec:27:aa:1b:0a:17:
                    ed:ba:8f:da:6f:18:8f:ac:9e:27:18:58:2e:85:14:
                    95:94:a4:02:bf:f5:bb:bb:c1:68:99:5c:99:1b:dc:
                    ab:f0:ae:ca:b4:51:94:a8:e5:1e:fd:7c:65:69:01:
                    57:b5:96:a7:14:b0:6e:e1:0c:a1:c6:f7:71:24:d8:
                    bc:cd:d2:5f:dc:f8:ac:ed:8e:78:0e:9b:fc:a3:63:
                    b4:e9:bc:2d:c3:78:51:de:47:42:04:a7:2d:f1:dc:
                    54:aa:2b:f5:ee:0c:b8:1c:82:b1:f2:61:96:29:bd:
                    13:4f:f0:cd:f7:91:9e:f0:39:2c:79:57:34:6b:e8:
                    40:f4:59:f6:07:b3:59:1f:71:39:a9:7a:9d:04:35:
                    3f:62:37:d8:44:e0:52:e5:12:f5:13:0c:1d:75:ea:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:46:2D:63:6F:C5:06:18:1A:8F:C8:89:82:76:90:E8:62:20:30
            X509v3 Authority Key Identifier:
                keyid:A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:ac:20:d1:73:81:b2:f8:d4:b9:23:ac:82:78:d3:f5:ff:
         8f:cb:b6:c1:98:43:dd:26:41:f8:6a:92:8a:89:44:a1:18:d9:
         3a:6c:67:fa:25:1c:2c:7c:77:4d:5b:bc:d3:5d:e8:13:9d:38:
         6c:15:43:f3:6b:9f:9c:30:28:df:92:86:a4:11:4a:7f:2d:19:
         a4:57:95:c1:85:68:35:54:38:7a:05:3e:10:74:43:9b:ba:17:
         cb:23:e4:6f:d2:71:09:c3:2c:8e:99:1f:1b:f3:8c:21:98:87:
         41:67:bf:3d:6b:a5:fa:8f:01:7a:88:db:b6:dd:d5:58:d9:f7:
         da:6a:b1:ad:76:82:bb:24:bb:6d:c4:55:ff:2f:a6:80:ae:86:
         cc:41:2a:ae:0a:94:bc:f7:64:de:89:9d:5c:d3:55:a9:61:f5:
         48:66:a7:52:ed:e1:d9:b8:98:d0:65:bf:42:1c:90:38:c5:0d:
         14:1f:7c:6f:bb:2c:7f:e6:4b:9d:75:7c:7c:f5:ad:fa:7d:43:
         f6:66:92:bf:96:a3:7a:49:b7:bf:6f:3f:2a:5e:9f:eb:16:76:
         4c:d2:c0:67:36:cf:8d:ed:b1:2f:9b:68:61:3d:d7:e0:a3:2c:
         67:26:97:f4:4a:0c:0c:2b:c3:56:e9:93:d0:13:49:9d:c3:c3:
         90:d5:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org