Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa
File:                     3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa (raw, json)
Hash identifier:          U3REx53QVIAjUw9ocHq+gt9Y6WZRMrn9KgwTwPqCsGE=
Subject key identifier:   14:51:75:85:F3:78:CA:BE:BD:43:2B:FB:09:F5:AE:74:66:F8:BD:4C
Certificate issuer:       /CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
Certificate serial:       31579AB65ECA741F44ACB78C6537300FEC83978A
Authority key identifier: 89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa
Signing time:             Tue 23 Jan 2024 18:31:56 +0000
ROA not before:           Tue 23 Jan 2024 18:26:56 +0000
ROA not after:            Tue 21 Jan 2025 18:31:56 +0000
asID:                     264511
IP address blocks:        132.255.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:57:9a:b6:5e:ca:74:1f:44:ac:b7:8c:65:37:30:0f:ec:83:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
        Validity
            Not Before: Jan 23 18:26:56 2024 GMT
            Not After : Jan 21 18:31:56 2025 GMT
        Subject: CN=14517585F378CABEBD432BFB09F5AE7466F8BD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:ce:b7:3a:12:a7:3f:33:30:e1:3c:b7:a6:
                    d5:4e:31:b8:f7:0f:82:77:80:31:6b:38:35:91:75:
                    81:66:80:96:c2:82:b6:a4:18:a5:1b:8a:ca:94:7e:
                    46:0c:94:47:ea:bd:5d:93:82:68:03:44:59:0a:00:
                    45:be:c7:38:33:d6:25:05:73:07:50:de:a1:88:24:
                    12:e8:c2:fd:4f:8b:8e:41:2e:40:2f:78:8c:2a:f7:
                    fd:8d:7e:6d:ac:cc:e5:1d:9e:7e:e5:59:22:64:78:
                    8b:d6:0a:40:57:56:36:01:4e:e4:8a:45:be:e3:68:
                    eb:c0:32:53:e8:09:07:06:5a:dd:de:c3:bc:dd:5d:
                    f3:79:50:55:e8:2b:dc:c7:59:13:49:34:aa:40:d0:
                    06:ef:48:e8:61:7b:cc:4f:2d:ad:eb:63:a3:e8:09:
                    24:e3:98:a0:df:0f:93:6f:36:d1:6c:b2:d1:1b:1d:
                    17:5e:a5:35:5f:9f:3a:9b:72:f4:b0:8b:cf:c1:0f:
                    8f:f6:56:8b:2a:54:0e:1c:36:61:73:69:26:49:d7:
                    d0:b9:8d:fb:e4:08:52:ed:cb:c2:f8:99:e4:a9:06:
                    36:ac:3f:03:5f:b1:b0:a1:f4:f4:36:5a:bd:10:f7:
                    66:5c:67:c4:03:f6:d8:69:59:2a:a4:b4:68:a4:31:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:75:85:F3:78:CA:BE:BD:43:2B:FB:09:F5:AE:74:66:F8:BD:4C
            X509v3 Authority Key Identifier:
                keyid:89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:b1:6e:4b:98:8f:af:05:49:9c:00:f7:fe:fa:05:74:9b:de:
         6e:35:48:9c:5c:44:bd:fb:ae:d5:76:65:44:e9:a5:fa:f7:5a:
         21:f1:73:ac:8c:19:23:08:f0:bd:d9:64:51:2d:b7:5d:c2:c3:
         cf:a0:36:3e:a1:ea:10:64:b3:cf:64:ab:3e:ef:28:0c:c1:f3:
         92:c8:79:53:15:da:fd:45:b1:89:51:ff:59:86:ea:18:a8:0e:
         c5:a3:18:70:73:05:0b:75:c8:1e:2a:77:1e:24:96:16:25:bf:
         e8:a0:dd:44:bc:1f:f6:e4:92:4d:70:8b:dc:6f:8d:bb:cc:0d:
         94:15:52:7d:66:f3:26:cc:38:a3:70:1f:50:80:c9:e0:69:98:
         8a:4d:dd:b0:8c:a1:2a:19:3e:d0:87:96:ac:e1:3b:71:a9:89:
         4f:6f:ce:b0:ec:16:84:91:dd:9e:b5:25:52:e0:55:2a:4a:d9:
         e9:5a:61:87:25:29:e8:6c:ec:e1:ed:77:ff:c4:65:03:f3:83:
         b2:35:93:50:4e:88:2e:09:59:41:88:4f:44:6b:eb:62:3b:95:
         a9:0a:5a:86:8d:65:c4:2f:a7:59:f1:b4:22:54:49:4e:27:da:
         5d:bc:8c:a3:a4:46:8a:10:0a:82:34:0c:c7:68:f1:6e:f4:c9:
         5b:47:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org