Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e35312e302f32342d3234203d3e20323634343532.roa
File:                     3133322e3235352e35312e302f32342d3234203d3e20323634343532.roa (raw, json)
Hash identifier:          j5Sdx45pMmAdse680aTX3/r9eOUcdzIE4RA2aSMHnrE=
Subject key identifier:   C9:DD:5D:5D:AF:93:A9:BC:02:14:64:AE:D9:8D:F7:82:0F:91:90:CE
Certificate issuer:       /CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
Certificate serial:       6CB9DAB56E1CA3C0663997069EA50E942D6796D3
Authority key identifier: 4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e35312e302f32342d3234203d3e20323634343532.roa
Signing time:             Wed 04 Jan 2023 14:37:50 +0000
ROA not before:           Wed 04 Jan 2023 14:32:50 +0000
ROA not after:            Wed 03 Jan 2024 14:37:50 +0000
asID:                     264452
IP address blocks:        132.255.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b9:da:b5:6e:1c:a3:c0:66:39:97:06:9e:a5:0e:94:2d:67:96:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FBE0A9679C453935C9ACF270D3D77053A87C0E6
        Validity
            Not Before: Jan  4 14:32:50 2023 GMT
            Not After : Jan  3 14:37:50 2024 GMT
        Subject: CN=C9DD5D5DAF93A9BC021464AED98DF7820F9190CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:57:40:88:f1:c5:db:7d:98:8a:c4:35:ea:
                    e9:e1:e6:da:34:5c:f6:da:93:69:29:07:fa:be:07:
                    0d:d8:f3:97:57:e4:46:3d:80:c7:f1:88:11:60:ce:
                    c9:83:7a:23:8e:c0:d0:18:1a:ec:b4:7a:65:63:de:
                    93:4d:86:4b:5f:85:af:65:36:65:b8:76:65:66:1f:
                    b4:36:dd:52:52:e9:51:6d:0c:4d:a9:2e:09:25:c0:
                    6d:77:28:02:3d:58:e1:24:bb:9d:d2:9b:4b:63:65:
                    15:a8:6f:e0:5d:2b:7c:85:ad:9b:a0:e9:e0:80:c5:
                    0d:cd:e4:f5:c2:5d:4c:e5:9a:fe:e8:91:a2:74:2e:
                    11:36:72:fe:87:5e:3c:de:0d:af:5f:dd:ec:4b:bb:
                    2a:c1:ce:b9:95:be:d4:bb:1c:f6:4c:c1:7c:54:25:
                    93:ee:b0:1e:d3:38:f1:4d:93:98:a4:61:d0:ba:2c:
                    a3:fb:7d:08:f0:3c:3c:6f:a1:05:45:3a:87:02:00:
                    68:43:e1:4a:3f:82:9e:45:d2:f4:41:d8:72:6e:8c:
                    4b:c8:e3:9f:c2:64:75:4c:d8:d2:30:08:49:b5:57:
                    8c:17:ef:6a:8d:93:3b:93:dc:6c:d1:64:ad:00:76:
                    98:0a:ee:d1:3a:1f:43:60:09:95:c4:d3:d7:f2:1b:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DD:5D:5D:AF:93:A9:BC:02:14:64:AE:D9:8D:F7:82:0F:91:90:CE
            X509v3 Authority Key Identifier:
                keyid:4F:BE:0A:96:79:C4:53:93:5C:9A:CF:27:0D:3D:77:05:3A:87:C0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBE0A9679C453935C9ACF270D3D77053A87C0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/3133322e3235352e35312e302f32342d3234203d3e20323634343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:81:69:ae:b5:ba:f8:84:b2:10:ad:0a:7a:ce:76:5a:02:
         3f:f2:46:40:7d:ec:bb:49:8b:e4:f5:d1:80:4a:cf:79:ed:cf:
         c8:be:0d:9d:3c:9d:25:dd:97:e7:9e:aa:52:e1:52:02:c9:6e:
         a9:33:77:e3:57:6b:b3:4d:ff:0d:ee:48:0d:32:2f:bb:e2:64:
         13:3c:8e:ce:1a:26:78:38:5d:b0:d0:38:e3:2e:3b:b3:94:4f:
         72:93:ae:f3:fa:ba:53:fd:e2:09:1e:db:f4:02:06:e0:30:14:
         4c:0f:63:60:cf:61:fa:82:41:e4:fe:b7:1b:6b:0f:cc:bc:fb:
         50:0c:2d:aa:16:40:04:56:59:52:7b:5f:e1:d9:b3:05:13:89:
         01:7d:87:15:cd:67:20:07:84:88:40:09:e3:47:1a:18:4b:9c:
         0a:ea:fc:aa:b2:83:b0:dd:a7:98:23:24:8f:3e:5d:b0:13:ab:
         c8:8c:e1:0a:76:6f:f1:22:d7:dc:7f:17:19:f1:51:ed:07:b3:
         44:6a:08:b4:cc:46:ac:8b:66:86:3b:e6:c1:3d:23:3f:a8:d7:
         91:59:02:77:b1:b8:f0:d1:09:c5:78:1a:67:92:d4:35:ea:a0:
         8a:2e:0f:f4:d4:e3:c2:29:66:86:c9:8e:b8:68:67:ee:c9:0b:
         4b:8f:bb:5a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbLnatW4co8BmOZcGnqUOlC1nltMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZCRTBBOTY3OUM0NTM5MzVDOUFDRjI3MEQzRDc3MDUz
QTg3QzBFNjAeFw0yMzAxMDQxNDMyNTBaFw0yNDAxMDMxNDM3NTBaMDMxMTAvBgNV
BAMTKEM5REQ1RDVEQUY5M0E5QkMwMjE0NjRBRUQ5OERGNzgyMEY5MTkwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1VdAiPHF232YisQ16unh5to0
XPbak2kpB/q+Bw3Y85dX5EY9gMfxiBFgzsmDeiOOwNAYGuy0emVj3pNNhktfha9l
NmW4dmVmH7Q23VJS6VFtDE2pLgklwG13KAI9WOEku53Sm0tjZRWob+BdK3yFrZug
6eCAxQ3N5PXCXUzlmv7okaJ0LhE2cv6HXjzeDa9f3exLuyrBzrmVvtS7HPZMwXxU
JZPusB7TOPFNk5ikYdC6LKP7fQjwPDxvoQVFOocCAGhD4Uo/gp5F0vRB2HJujEvI
45/CZHVM2NIwCEm1V4wX72qNkzuT3GzRZK0AdpgK7tE6H0NgCZXE09fyG3PHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyd1dXa+TqbwCFGSu2Y33gg+RkM4wHwYDVR0j
BBgwFoAUT74KlnnEU5Ncms8nDT13BTqHwOYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EMkNCblRVbnR1R1NGVDludXE4eUtRQ1VTdzY4NmlyNGdVZkdjY0xUNmZv
LzAvNEZCRTBBOTY3OUM0NTM5MzVDOUFDRjI3MEQzRDc3MDUzQTg3QzBFNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80RkJFMEE5Njc5QzQ1MzkzNUM5
QUNGMjcwRDNENzcwNTNBODdDMEU2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
MkNCblRVbnR1R1NGVDludXE4eUtRQ1VTdzY4NmlyNGdVZkdjY0xUNmZvLzAvMzEz
MzMyMmUzMjM1MzUyZTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQz
NDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACE/zMwDQYJKoZIhvcNAQELBQADggEBACQ7gWmutbr4
hLIQrQp6znZaAj/yRkB97LtJi+T10YBKz3ntz8i+DZ08nSXdl+eeqlLhUgLJbqkz
d+NXa7NN/w3uSA0yL7viZBM8js4aJng4XbDQOOMuO7OUT3KTrvP6ulP94gke2/QC
BuAwFEwPY2DPYfqCQeT+txtrD8y8+1AMLaoWQARWWVJ7X+HZswUTiQF9hxXNZyAH
hIhACeNHGhhLnArq/Kqyg7Ddp5gjJI8+XbATq8iM4Qp2b/Ei19x/FxnxUe0Hs0Rq
CLTMRqyLZoY75sE9Iz+o15FZAnexuPDRCcV4GmeS1DXqoIouD/TU48IpZobJjrho
Z+7JC0uPu1o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org