Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa
File:                     3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (raw, json)
Hash identifier:          vr4lk5cbNMMBuKa4I2ZsrgvPMwdrpwVDjesb0juy64I=
Subject key identifier:   AD:FB:93:1B:57:03:9C:E1:9A:77:C0:F4:4D:CA:57:47:EF:D7:11:CA
Certificate issuer:       /CN=A989F27243C24F6E4842DBC2B041DFAE8A4E9A92
Certificate serial:       09FA7EA7970304DEBADE66E216EE9578C95203D7
Authority key identifier: A9:89:F2:72:43:C2:4F:6E:48:42:DB:C2:B0:41:DF:AE:8A:4E:9A:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa
Signing time:             Fri 17 Nov 2023 20:15:07 +0000
ROA not before:           Fri 17 Nov 2023 20:10:07 +0000
ROA not after:            Fri 15 Nov 2024 20:15:07 +0000
asID:                     264512
IP address blocks:        132.255.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fa:7e:a7:97:03:04:de:ba:de:66:e2:16:ee:95:78:c9:52:03:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A989F27243C24F6E4842DBC2B041DFAE8A4E9A92
        Validity
            Not Before: Nov 17 20:10:07 2023 GMT
            Not After : Nov 15 20:15:07 2024 GMT
        Subject: CN=ADFB931B57039CE19A77C0F44DCA5747EFD711CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:33:2f:05:3f:5f:3c:aa:28:e8:18:75:db:
                    3b:65:42:b1:ad:9b:ee:16:dc:73:6a:b0:7a:1c:56:
                    7c:86:6d:1f:cb:25:b1:cd:b0:25:f4:10:04:66:35:
                    d0:f3:67:10:74:26:d8:13:f5:c3:c4:45:88:45:32:
                    6f:80:23:b1:4c:7d:e2:0d:31:a4:b8:ef:b4:10:0a:
                    58:7e:88:f6:53:5c:75:fa:ed:50:7a:a2:74:1e:3a:
                    7a:6b:b8:aa:81:d2:8b:50:ae:86:95:d1:f1:4c:2b:
                    c4:d3:1d:82:36:36:ba:18:77:88:ef:27:88:a1:7a:
                    41:b9:f9:3b:eb:77:85:38:45:fd:d3:f0:c5:39:ab:
                    8f:19:55:ec:9f:56:b1:75:4e:44:41:a5:2d:cb:9a:
                    ed:0d:e8:9b:93:be:f8:2d:40:bc:07:c5:f1:9b:96:
                    6e:1f:06:f1:af:bb:b4:75:b1:51:e9:4a:c9:31:8e:
                    06:c5:d2:0b:eb:c3:ab:0e:44:9f:02:f2:c8:65:34:
                    c1:5a:b8:0a:d1:61:fd:ed:4b:05:3f:77:f6:0b:68:
                    8c:31:78:54:3f:d4:39:a8:9c:81:f3:90:28:63:93:
                    6f:62:26:e7:ba:a4:f0:0e:de:ff:26:de:2d:91:4f:
                    f9:65:a4:b0:1e:8c:0b:a7:9c:cb:27:e0:3c:23:92:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FB:93:1B:57:03:9C:E1:9A:77:C0:F4:4D:CA:57:47:EF:D7:11:CA
            X509v3 Authority Key Identifier:
                keyid:A9:89:F2:72:43:C2:4F:6E:48:42:DB:C2:B0:41:DF:AE:8A:4E:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:a4:ad:e3:49:90:52:32:69:d8:0f:d6:e2:42:25:48:92:c1:
         c7:d2:32:95:4d:2e:dd:b1:57:b5:96:16:8e:7f:a2:eb:9c:9e:
         d4:e6:ca:d7:14:c6:30:0c:61:1f:30:50:d0:04:72:7f:a6:42:
         03:d7:bd:c8:e6:0a:54:84:7f:bb:12:e8:a3:85:97:1c:79:4e:
         69:a8:bf:38:0d:9c:40:6b:53:3f:3b:01:b8:fe:07:b2:ef:08:
         7f:44:ac:55:51:56:42:ec:db:07:a2:9f:fe:89:b4:ac:f4:0c:
         b2:b4:2d:35:0b:99:b3:eb:73:7b:b9:7d:11:07:ac:78:5b:eb:
         18:25:69:5c:af:c9:de:db:57:c3:a0:d5:e7:ab:0d:42:37:da:
         e8:bc:a0:b1:de:a8:bf:4b:97:a6:15:a3:75:8a:bc:b2:ad:f2:
         7a:86:f4:9e:3d:f4:47:ca:ab:86:d4:5d:73:c3:fb:89:5a:41:
         3e:67:44:a4:53:d0:42:25:84:50:37:0b:1d:02:c8:5d:ea:c2:
         90:12:de:c7:e9:1e:af:d8:d9:a0:35:57:a0:d3:14:39:85:0c:
         85:ac:74:29:34:a0:fb:3d:15:15:5c:da:81:d8:b7:fd:e1:95:
         aa:e7:07:2a:59:8f:c3:c0:62:dd:53:97:cf:52:4c:4c:81:3a:
         09:21:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org