Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa
File:                     3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          bBx7aDM/kp0g5AbfTVAecBRvrdtLegKOHnIph8Q4RPs=
Subject key identifier:   34:AD:F9:DD:8D:5D:AD:FE:38:FF:38:DC:C9:90:F5:12:0A:8F:AA:D0
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       5BA0007B22EAE6782D8AA7F390794B28FBB97ACB
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa
Signing time:             Tue 31 Oct 2023 10:13:13 +0000
ROA not before:           Tue 31 Oct 2023 10:08:13 +0000
ROA not after:            Tue 29 Oct 2024 10:13:13 +0000
asID:                     61588
IP address blocks:        132.255.240.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:00:7b:22:ea:e6:78:2d:8a:a7:f3:90:79:4b:28:fb:b9:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Oct 31 10:08:13 2023 GMT
            Not After : Oct 29 10:13:13 2024 GMT
        Subject: CN=34ADF9DD8D5DADFE38FF38DCC990F5120A8FAAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:7c:54:d5:7e:fa:1d:99:7e:25:8f:6e:ca:
                    10:e7:bf:26:31:96:d4:f4:26:96:bd:82:4c:ac:03:
                    8c:8c:a0:c1:a0:61:43:aa:9f:e3:86:06:10:23:e7:
                    5f:07:08:bb:52:27:4d:e1:f0:ec:5c:c2:74:2e:b8:
                    86:a4:c2:15:a6:3b:a2:e2:51:ee:ef:34:d5:5e:40:
                    8e:7b:94:16:0d:d8:9f:b9:c5:c9:09:7d:99:b8:ac:
                    3b:ca:e2:10:9b:2e:0f:50:4e:0a:14:88:5e:f2:5a:
                    be:e7:2d:2e:5c:6b:04:41:27:e9:15:9e:2d:6e:87:
                    1e:93:09:40:3e:e5:1c:3d:aa:c3:9d:63:84:29:68:
                    34:00:ed:20:7f:f6:40:e4:7a:cb:1a:23:11:7e:fa:
                    43:7f:9e:3e:b5:78:af:46:b2:44:04:9e:50:7e:6c:
                    6e:1e:d8:39:5f:19:a5:dc:0e:43:e6:01:df:19:72:
                    f2:3c:59:af:d4:be:3c:27:48:ef:3a:2b:c3:d6:ce:
                    bc:16:d7:1c:ed:de:81:92:a1:39:12:cd:78:14:72:
                    72:4c:ca:bc:35:00:d0:08:90:58:83:76:93:d4:2c:
                    3f:73:1f:e3:34:60:38:2e:b2:ce:e1:1e:52:a7:b6:
                    02:3d:c1:86:b0:fb:e3:8e:e8:8c:1c:74:2f:14:66:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AD:F9:DD:8D:5D:AD:FE:38:FF:38:DC:C9:90:F5:12:0A:8F:AA:D0
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:00:3e:49:cd:78:9c:5b:0f:ec:4f:88:38:e1:d0:66:ea:e2:
         f6:c1:c5:45:f6:99:c9:1b:1c:c6:75:02:04:8c:ab:ee:3e:fc:
         3e:55:f6:db:c7:80:55:f7:16:68:1d:49:a3:f0:1c:26:e5:07:
         75:5c:37:1a:02:b5:32:3b:8c:85:39:e6:83:b7:e8:3c:85:42:
         43:1f:fa:c2:4a:0e:9d:e0:47:97:e4:9a:d8:fa:5d:96:92:12:
         b7:64:cd:43:22:46:3d:1b:37:39:86:a7:ef:7e:30:f3:f3:4c:
         dc:c8:bd:08:92:74:de:79:0d:3c:b5:60:c1:57:60:04:ad:51:
         e8:2c:4b:5a:4c:ab:28:26:ed:aa:fc:79:13:3f:0c:13:41:4a:
         ae:c1:ab:17:db:74:9b:2d:77:4c:6d:26:4b:ec:04:e7:f2:95:
         00:48:93:d3:c5:55:b2:e9:80:62:1c:7e:88:b1:61:a4:9c:87:
         8e:ae:b3:6f:e9:fe:0e:c2:ad:93:fa:d0:41:9f:c7:af:f1:93:
         a1:6f:cb:71:0e:65:e6:df:40:66:b4:26:7c:92:94:6c:e1:52:
         12:02:fc:2a:9d:08:35:9f:3f:a3:de:23:ec:03:d0:bc:2f:1c:
         4e:26:a3:21:9b:e8:43:ce:90:92:b6:d1:7c:1a:55:c1:83:91:
         fb:e5:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org