Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38322e302f32342d3234203d3e20323634343634.roa
File:                     3133322e3235352e38322e302f32342d3234203d3e20323634343634.roa (raw, json)
Hash identifier:          cTbjIjoLRpKR8LqKVu4MOh01XB3Fa9Jx6RxvQKN1JiI=
Subject key identifier:   47:68:B2:E0:DF:3D:01:FA:70:7F:E6:52:09:B8:6B:D7:31:E1:8B:07
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       0A207BE481DF341E483FCE95FAC4129375C011C5
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38322e302f32342d3234203d3e20323634343634.roa
Signing time:             Fri 15 Oct 2021 13:00:00 +0000
ROA not before:           Fri 15 Oct 2021 12:55:00 +0000
ROA not after:            Sat 15 Oct 2022 13:00:00 +0000
asID:                     264464
IP address blocks:        132.255.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:7b:e4:81:df:34:1e:48:3f:ce:95:fa:c4:12:93:75:c0:11:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Oct 15 12:55:00 2021 GMT
            Not After : Oct 15 13:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:50:41:f0:87:99:04:50:5a:c6:1f:e5:17:
                    b2:7a:06:c3:24:26:31:48:03:07:3d:cc:20:cf:2b:
                    9c:12:db:a8:7d:fe:be:55:94:a8:42:ef:41:49:51:
                    73:3d:24:a2:e0:81:65:4f:0e:69:e5:08:56:4a:40:
                    c6:c7:bb:cd:34:9a:2f:7b:53:5e:e5:91:06:80:6f:
                    2e:34:7c:c4:14:2e:31:87:98:6b:1e:8a:cb:b9:c1:
                    55:aa:a1:2c:53:e6:4e:5a:d1:8f:19:dc:9c:02:16:
                    81:b8:c6:9f:4e:c0:bf:13:b9:b2:3a:96:f3:66:06:
                    8c:6c:b0:53:42:95:fc:79:f0:91:0e:11:92:1f:19:
                    6b:a7:6b:35:b7:80:3d:bc:08:86:87:5f:ba:d3:7f:
                    d9:e8:2c:c8:54:2a:dc:27:75:f5:3e:bf:38:e3:ef:
                    8c:d5:ef:ba:38:ec:52:8a:a1:a0:dc:f9:cc:10:a2:
                    9d:d6:69:76:32:a8:d0:65:28:a8:4c:ca:4e:6e:d0:
                    9a:ca:6c:4e:0f:44:04:a7:ec:9c:fe:b7:ad:1f:af:
                    58:a8:87:91:2a:6c:a7:78:6f:a5:3e:e4:af:4a:1c:
                    fe:1f:4c:be:85:3d:00:98:8f:ba:15:63:e3:d3:f6:
                    b2:86:ed:04:c5:a2:6e:c6:8c:f3:6d:90:f0:7c:78:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:B2:E0:DF:3D:01:FA:70:7F:E6:52:09:B8:6B:D7:31:E1:8B:07
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38322e302f32342d3234203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:85:f7:6a:9b:72:df:8e:57:a8:66:c5:ce:aa:88:aa:82:31:
         25:fd:58:c1:e9:3f:76:48:dc:4f:ef:18:f7:70:84:72:3b:96:
         74:b3:7c:5c:b5:88:fe:34:33:95:76:58:e7:9d:c7:7d:1f:5e:
         fe:94:96:27:ff:9d:eb:1a:4b:a7:89:bc:c8:05:d9:18:9a:21:
         b9:ed:07:93:d7:42:53:40:32:73:bd:da:a4:b2:38:73:cc:26:
         dd:6b:32:4f:2b:b7:25:a2:24:30:91:d8:d0:71:30:83:48:14:
         bc:a6:d9:70:2b:80:be:bb:5f:0b:aa:54:72:ce:0d:d8:97:d4:
         fe:83:ae:c8:5e:61:f8:90:c2:82:2d:02:bf:a9:2f:ae:7a:bb:
         c5:6a:f3:d8:6a:2b:07:71:b8:94:12:47:b1:1c:1e:ff:16:58:
         26:f7:1d:b7:91:7a:b2:76:82:27:e9:52:84:08:31:e9:4f:9e:
         e9:b4:f4:61:fb:d7:c3:73:d8:0f:1c:42:ef:40:78:2a:38:ed:
         aa:81:49:89:62:28:52:c5:da:5d:af:56:6d:25:77:8b:9e:45:
         1f:52:41:4e:55:40:cb:1f:72:fb:5b:ad:d7:fe:5d:c5:62:a4:
         77:08:13:28:ee:9d:f9:6b:65:1a:63:00:d9:6e:76:db:28:60:
         d7:98:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org