Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e35302e302f32342d3234203d3e20323634343532.roa
File:                     3133322e3235352e35302e302f32342d3234203d3e20323634343532.roa (raw, json)
Hash identifier:          Bb9+rkgmtTCrJH3Csqg+GclQHy8h7W2VdbsnDWtgkkk=
Subject key identifier:   89:18:44:63:1D:2D:C1:47:83:06:70:1C:37:D8:92:B2:9E:D0:9F:05
Certificate issuer:       /CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
Certificate serial:       2D56DED268CADDD29A8F07FC54CF826965CF347A
Authority key identifier: 4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e35302e302f32342d3234203d3e20323634343532.roa
Signing time:             Wed 04 Jan 2023 14:37:44 +0000
ROA not before:           Wed 04 Jan 2023 14:32:44 +0000
ROA not after:            Wed 03 Jan 2024 14:37:44 +0000
asID:                     264452
IP address blocks:        132.255.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:56:de:d2:68:ca:dd:d2:9a:8f:07:fc:54:cf:82:69:65:cf:34:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
        Validity
            Not Before: Jan  4 14:32:44 2023 GMT
            Not After : Jan  3 14:37:44 2024 GMT
        Subject: CN=891844631D2DC1478306701C37D892B29ED09F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:ed:fd:1e:9f:bf:3c:84:67:ca:e3:3f:5d:
                    d4:3a:90:ab:ae:a8:77:6e:27:9d:ac:7d:66:c2:08:
                    de:1c:0d:04:7d:5b:86:ef:e2:d8:5c:83:a0:40:d8:
                    68:ed:b3:73:6d:7b:10:0e:e0:db:a8:02:37:57:fb:
                    a9:c0:10:ea:40:fd:ac:0b:47:18:ca:08:4a:51:97:
                    76:a9:b1:eb:41:72:d2:ea:32:7d:11:06:ff:22:65:
                    3b:81:f3:ea:42:ed:b2:7b:d9:d8:a2:d2:ca:11:7a:
                    f2:e2:22:7f:1a:0a:75:08:68:21:2d:0a:e9:f6:57:
                    9f:04:d7:60:07:ae:3f:b1:3b:d4:c3:08:aa:eb:03:
                    4f:d1:03:ff:f2:74:3c:73:93:80:f6:b7:34:f4:93:
                    9e:78:69:10:02:9c:39:0e:d2:6c:28:d4:55:9f:6b:
                    f2:4e:79:31:c1:39:68:10:ba:26:25:c0:53:64:4f:
                    db:cc:04:5b:14:8b:0b:fb:97:e1:59:0c:5d:98:cd:
                    a7:ba:8b:09:0d:0f:25:17:d3:f7:b8:8b:0d:c4:11:
                    ea:ee:a2:74:fb:e8:f3:ad:64:a4:63:b7:f2:20:79:
                    38:ab:ff:20:59:35:db:58:e5:c9:94:2b:ed:73:4f:
                    53:fa:ca:06:54:03:77:27:33:10:09:0d:e4:11:0c:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:18:44:63:1D:2D:C1:47:83:06:70:1C:37:D8:92:B2:9E:D0:9F:05
            X509v3 Authority Key Identifier:
                keyid:4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e35302e302f32342d3234203d3e20323634343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:24:9e:64:11:f9:77:5b:62:f7:ad:e3:d9:6f:3b:a3:3c:
         08:e7:0a:48:13:f7:84:56:7a:f7:72:9e:f9:3f:07:d6:5b:db:
         97:42:2e:7e:64:ae:1a:cb:1f:d1:06:cd:b6:96:4f:8d:0e:31:
         65:d7:1b:68:35:42:46:09:e9:90:d4:7a:6e:29:5c:40:8c:2f:
         cb:6a:0d:35:25:00:4d:6e:6d:4e:25:70:d0:cb:fe:2e:50:4a:
         bf:71:70:3b:8c:ff:22:b0:7e:fa:b2:2d:11:3c:5b:79:24:8b:
         46:86:ca:9e:ae:59:b3:ca:87:30:c5:e1:00:93:22:45:79:fc:
         08:db:fd:fa:5a:6c:04:2f:c5:82:56:dd:87:24:17:10:62:f4:
         79:ff:8f:a9:a7:de:8e:53:99:bd:75:0b:6b:62:71:63:4e:57:
         21:1e:11:75:c2:89:93:01:d9:43:5e:f1:4b:9f:cb:85:08:27:
         de:62:5b:11:2b:5d:b5:43:5a:6d:58:b1:a5:e4:f0:52:31:04:
         7e:cb:da:62:66:53:5f:63:4a:b7:d3:d6:9b:ae:fb:c7:25:54:
         17:26:a9:c3:6f:8e:ee:a4:08:44:2c:aa:97:06:0e:39:e0:bc:
         e0:6c:c0:1f:9f:92:fd:da:a4:e0:e3:72:26:eb:e6:6c:08:38:
         94:3a:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org