Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e34382e302f32322d3234203d3e20323634343532.roa
File:                     3133322e3235352e34382e302f32322d3234203d3e20323634343532.roa (raw, json)
Hash identifier:          pjIzhgj5kWaXFQyFYOU2JpiOIdO74y7dJ0AkaRxraBs=
Subject key identifier:   5F:E8:0F:1E:F9:5C:15:BA:C6:CD:EC:C7:34:FE:6A:87:07:37:B7:E2
Certificate issuer:       /CN=5C955B38ED01E8D644F0AFE813D96DC3D299E919
Certificate serial:       17D72A91473A359F738FE7C558C8CCB04317F565
Authority key identifier: 5C:95:5B:38:ED:01:E8:D6:44:F0:AF:E8:13:D9:6D:C3:D2:99:E9:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C955B38ED01E8D644F0AFE813D96DC3D299E919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e34382e302f32322d3234203d3e20323634343532.roa
Signing time:             Tue 06 Jun 2023 14:02:11 +0000
ROA not before:           Tue 06 Jun 2023 13:57:11 +0000
ROA not after:            Tue 04 Jun 2024 14:02:11 +0000
asID:                     264452
IP address blocks:        132.255.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:2a:91:47:3a:35:9f:73:8f:e7:c5:58:c8:cc:b0:43:17:f5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C955B38ED01E8D644F0AFE813D96DC3D299E919
        Validity
            Not Before: Jun  6 13:57:11 2023 GMT
            Not After : Jun  4 14:02:11 2024 GMT
        Subject: CN=5FE80F1EF95C15BAC6CDECC734FE6A870737B7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:16:27:71:ec:33:b6:15:85:d3:81:22:03:
                    9f:65:03:a3:74:90:b1:4f:92:ea:ae:e8:5d:a3:75:
                    bd:0b:18:cb:92:57:32:5e:81:17:3e:77:37:ee:04:
                    75:54:ef:bf:9b:76:a0:7a:e2:5c:4e:50:c6:52:a3:
                    7a:99:12:f0:42:d1:2c:e0:ea:bf:7c:d8:1c:6a:0c:
                    ea:b2:e6:47:d2:ac:f7:ef:44:ab:54:4e:34:28:e3:
                    b5:e8:34:40:21:c6:91:97:d7:58:c8:c0:f6:8d:d8:
                    fb:0d:e7:c0:6d:49:90:90:68:19:03:14:7a:d2:53:
                    17:36:a1:ca:2d:1a:12:bf:69:0a:d3:7a:3c:dd:2e:
                    a8:56:ff:27:e0:aa:79:de:d6:eb:d5:58:26:cc:33:
                    4e:2a:5a:ab:de:b6:63:d4:d9:a9:49:ab:ff:e9:3f:
                    19:e8:05:ac:2a:96:4c:32:fe:7e:d0:15:04:9e:a4:
                    84:bf:f2:96:79:1d:9e:86:bb:a1:5e:a4:b7:f1:40:
                    bc:5a:2f:0d:77:df:4c:de:a4:b1:19:d8:9e:32:14:
                    db:bb:63:b1:dc:62:90:2f:86:b5:80:f8:23:48:4a:
                    98:29:02:9c:34:c3:d0:5f:35:7f:b6:28:51:69:38:
                    10:e4:4e:11:3d:2a:f0:d2:88:08:04:54:c7:9b:4f:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:0F:1E:F9:5C:15:BA:C6:CD:EC:C7:34:FE:6A:87:07:37:B7:E2
            X509v3 Authority Key Identifier:
                keyid:5C:95:5B:38:ED:01:E8:D6:44:F0:AF:E8:13:D9:6D:C3:D2:99:E9:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/5C955B38ED01E8D644F0AFE813D96DC3D299E919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C955B38ED01E8D644F0AFE813D96DC3D299E919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e34382e302f32322d3234203d3e20323634343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:ca:07:44:39:ef:88:38:2c:39:6d:1e:8e:6e:8f:3f:27:d3:
         e9:93:02:b2:30:fd:05:5e:f0:49:9c:39:0e:6e:3b:b4:1c:bf:
         ac:70:8c:a4:b0:6c:0c:ea:18:38:a1:5c:c9:73:2e:ac:e7:26:
         63:27:7d:22:5b:0b:e1:9d:26:95:83:fb:1d:4d:25:7f:14:ea:
         af:36:f6:81:e6:c4:bf:db:50:04:cb:91:3c:0d:8f:10:eb:5d:
         34:24:3a:a4:ee:1a:99:3c:e7:35:08:d8:75:1e:d8:09:66:b9:
         42:2f:d0:8d:c4:4c:64:cd:11:08:e5:67:c6:9c:1f:21:92:7b:
         73:64:fc:c4:c9:cc:8e:64:49:91:ba:27:2a:a3:9f:43:3e:e2:
         8a:2c:b0:12:f1:34:89:de:99:1f:cb:21:ec:23:3e:4e:ee:08:
         05:18:a4:4b:bf:40:af:fb:7e:d2:63:16:ee:6e:1d:08:bc:01:
         f6:d9:cd:1e:81:29:90:fd:84:7d:62:43:0b:56:cb:aa:a0:49:
         13:b9:13:6e:08:4f:e9:81:a6:5b:58:2d:a9:d2:6b:49:72:6d:
         67:af:73:5e:7c:27:c9:c3:ef:00:21:bf:ed:c6:1f:d3:44:32:
         63:60:6a:82:85:8e:cc:66:69:f9:d2:d6:d5:fc:da:3e:20:a6:
         6b:06:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:52 2025 by rpki-client