Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e34382e302f32342d3234203d3e20323634343532.roa
File:                     3133322e3235352e34382e302f32342d3234203d3e20323634343532.roa (raw, json)
Hash identifier:          OFeEENIVDfhAZVFdBFtvkOVNBrd936x+U/vihmlkbX8=
Subject key identifier:   65:15:58:8B:4C:7A:93:C1:4C:4F:97:B5:1B:04:B9:27:41:F5:E1:FF
Certificate issuer:       /CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
Certificate serial:       4C42EF23E87CF5BFB18E7E873C102F1CF2947ADA
Authority key identifier: 4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e34382e302f32342d3234203d3e20323634343532.roa
Signing time:             Thu 05 Jan 2023 13:04:43 +0000
ROA not before:           Thu 05 Jan 2023 12:59:43 +0000
ROA not after:            Thu 04 Jan 2024 13:04:43 +0000
asID:                     264452
IP address blocks:        132.255.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:42:ef:23:e8:7c:f5:bf:b1:8e:7e:87:3c:10:2f:1c:f2:94:7a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
        Validity
            Not Before: Jan  5 12:59:43 2023 GMT
            Not After : Jan  4 13:04:43 2024 GMT
        Subject: CN=6515588B4C7A93C14C4F97B51B04B92741F5E1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:6a:0f:7e:d2:64:be:3e:6b:5f:f2:75:92:
                    ab:c5:90:fb:2b:ab:3d:1f:77:44:bf:91:74:7f:0d:
                    6c:e7:65:32:ae:f0:c1:28:08:87:c0:73:6e:da:c1:
                    c5:9e:d8:58:f4:93:71:89:0b:15:7c:65:fe:a4:f9:
                    04:06:b5:b4:7e:28:e5:e5:81:53:a4:cd:c7:b9:d6:
                    69:d5:4a:24:50:ec:11:8c:90:ed:15:49:d0:e7:09:
                    34:27:65:38:83:2f:73:fe:6e:c3:ce:a7:f6:e8:d5:
                    ef:3b:2e:eb:fc:93:50:a3:c1:42:67:eb:42:64:dd:
                    b4:75:1c:71:2f:f2:03:8c:4f:81:e6:98:73:28:8c:
                    7a:45:1b:76:f5:21:b0:46:b8:a2:0f:0c:4c:22:b8:
                    ae:c8:a8:ba:07:a9:51:35:b1:90:86:17:c6:8d:33:
                    c9:6b:3f:ac:7c:a5:ce:c3:0b:a0:ea:7a:49:dc:f3:
                    53:eb:b4:e7:0b:7e:bf:fc:e0:9c:20:1c:f9:1f:88:
                    22:f6:c5:f3:31:42:fc:16:9f:a5:a8:bc:c2:05:e4:
                    38:91:d6:db:ea:30:fe:52:20:7b:f9:45:e1:6a:5f:
                    bc:47:9e:b5:fb:5a:c9:3b:34:31:dc:35:64:0f:44:
                    19:ee:a4:cc:f8:fe:ea:83:f6:4f:b8:c8:c7:30:6e:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:58:8B:4C:7A:93:C1:4C:4F:97:B5:1B:04:B9:27:41:F5:E1:FF
            X509v3 Authority Key Identifier:
                keyid:4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e34382e302f32342d3234203d3e20323634343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:a1:48:51:bb:c6:27:d4:ab:d7:8a:f1:dc:d9:06:1b:16:
         dc:74:01:a7:d5:57:b2:55:3a:c1:bd:26:2c:89:97:38:2d:e2:
         2a:05:7b:19:99:c7:b8:c9:6e:d5:81:2c:3e:b8:69:89:21:7b:
         12:35:59:df:59:29:b0:4b:a8:79:5d:d2:60:1b:8c:39:ed:3e:
         c0:48:45:02:31:c9:d3:2c:47:9f:6c:f3:76:9f:60:99:0f:8d:
         24:8d:4d:cd:3f:c0:0e:db:4f:b1:01:44:78:00:d2:ce:17:f3:
         8d:df:1d:22:c0:84:cb:1c:bc:db:60:e8:30:c5:33:9d:0a:04:
         62:81:52:93:60:22:1f:b2:bb:f9:d3:ad:c3:df:ec:e8:f8:1b:
         ab:b1:29:ea:e5:c5:c4:ae:83:4b:c5:34:f6:9f:f2:3b:9d:4b:
         9d:e3:20:aa:1f:18:ac:db:42:19:1e:7d:a6:29:f2:a4:78:7a:
         c1:99:3f:0e:57:e3:81:86:ec:10:64:4c:ee:19:bf:26:4a:0f:
         f9:6a:41:73:dc:d7:46:55:00:81:92:b2:57:a2:06:ef:b5:24:
         37:1e:42:e1:4e:67:e2:a5:d2:ef:ec:e0:05:50:80:c2:d4:03:
         29:96:34:d7:04:38:3e:47:dd:c6:08:f8:e1:be:ab:80:28:75:
         d7:76:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org