Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa
File:                     3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa (raw, json)
Hash identifier:          WSt1Ixl4lXvTsxYDNYwanHsML5s6lWkDhuapVcbw4jI=
Subject key identifier:   3E:B3:04:2D:70:AD:A8:88:91:17:55:F5:E9:00:BF:C3:A5:BF:D1:78
Certificate issuer:       /CN=332E0DA86130575BFAD949B0B294C77899BFD68B
Certificate serial:       1B90DBD056C3697EA021D184B1AA09050C14B2EE
Authority key identifier: 33:2E:0D:A8:61:30:57:5B:FA:D9:49:B0:B2:94:C7:78:99:BF:D6:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332E0DA86130575BFAD949B0B294C77899BFD68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa
Signing time:             Thu 23 Nov 2023 16:25:21 +0000
ROA not before:           Thu 23 Nov 2023 16:20:21 +0000
ROA not after:            Thu 21 Nov 2024 16:25:21 +0000
asID:                     264470
IP address blocks:        131.255.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:90:db:d0:56:c3:69:7e:a0:21:d1:84:b1:aa:09:05:0c:14:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332E0DA86130575BFAD949B0B294C77899BFD68B
        Validity
            Not Before: Nov 23 16:20:21 2023 GMT
            Not After : Nov 21 16:25:21 2024 GMT
        Subject: CN=3EB3042D70ADA888911755F5E900BFC3A5BFD178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:a0:a6:2d:70:94:0b:13:3d:4a:31:ae:a2:
                    e3:15:08:09:4e:c4:29:2a:5c:4d:26:55:9d:e5:ef:
                    ca:0d:09:e4:1c:bf:b9:b1:6a:d3:6b:28:49:ac:aa:
                    10:12:61:19:45:6a:05:6f:cf:aa:6f:37:86:7b:0c:
                    ba:2d:77:12:75:79:a2:21:e3:7e:f8:b7:65:f3:88:
                    1b:25:55:5e:6b:32:86:5a:c3:a4:81:4f:3d:58:31:
                    4f:62:87:3a:75:2b:49:e3:f6:f6:d7:52:ef:af:ef:
                    de:0b:05:0c:39:ac:ec:d5:47:86:7b:e3:a9:55:02:
                    e8:b5:9d:78:b1:be:1c:ab:d3:32:61:31:eb:8b:33:
                    a7:a7:5f:fd:54:46:af:c8:f3:22:4d:4f:b4:9b:02:
                    ac:8a:b9:20:f5:15:6b:b4:6b:c8:6b:c7:1b:8d:51:
                    8b:a5:f4:0d:36:03:2b:a3:25:c3:9a:b8:7c:27:6f:
                    3d:f4:da:00:ec:76:b4:22:84:1d:c6:2a:73:99:63:
                    f5:3e:6d:71:97:46:bf:54:4a:b8:9d:25:de:f3:5d:
                    1e:b8:88:9a:14:85:b4:9e:48:88:e7:c6:98:5e:cd:
                    51:7c:25:d9:d9:cf:80:ae:a5:48:dc:fd:be:29:47:
                    ae:7c:b6:b8:ca:f7:8d:c4:01:63:49:46:77:6b:bb:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B3:04:2D:70:AD:A8:88:91:17:55:F5:E9:00:BF:C3:A5:BF:D1:78
            X509v3 Authority Key Identifier:
                keyid:33:2E:0D:A8:61:30:57:5B:FA:D9:49:B0:B2:94:C7:78:99:BF:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/332E0DA86130575BFAD949B0B294C77899BFD68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332E0DA86130575BFAD949B0B294C77899BFD68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:46:07:b8:e0:8f:7c:38:86:35:6b:3a:6a:86:92:f7:71:aa:
         33:f3:3e:de:c6:64:f3:3f:9a:6b:e7:33:3c:3f:4f:ef:f5:71:
         52:76:c6:84:8f:64:ea:dd:05:ab:21:ad:9d:83:0d:d2:16:88:
         f1:51:7b:bc:7c:fa:fb:db:dd:6f:da:ae:45:9c:fe:49:b5:f4:
         d2:e5:f1:2c:ee:f0:11:bf:fa:7a:64:04:b4:4a:2a:fe:41:f2:
         21:3e:49:43:6d:97:2b:89:52:c5:f5:f5:d9:e3:22:2b:f4:72:
         c9:4f:d6:a6:41:6f:6c:75:13:de:b1:7e:73:0c:73:a2:1c:11:
         fe:18:95:eb:30:33:ae:42:d7:aa:94:96:9d:55:ab:e0:63:b8:
         70:cf:46:65:03:88:82:47:b6:1e:21:1d:1d:fa:f8:9d:55:ec:
         1e:bf:3f:b6:be:0e:1a:58:d3:75:83:94:69:53:21:77:77:d5:
         30:13:ae:52:08:cc:c9:d2:7a:5a:4d:69:16:87:56:8d:f2:40:
         18:92:ce:8a:b3:12:78:ed:de:f7:84:f8:6b:77:54:7c:00:4f:
         cc:da:75:43:4c:4a:86:49:0c:8d:4a:bf:0e:c5:dd:f3:d9:89:
         8a:65:46:88:d4:5d:95:0b:b3:97:1e:b6:88:eb:f6:bd:be:d5:
         29:df:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org