Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa
File:                     3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa (raw, json)
Hash identifier:          zTqojiRukgyQOs2+RvLPQW+dE48VRIzO8cCK31OGKZo=
Subject key identifier:   48:D7:4E:21:41:10:89:17:61:15:FD:EE:07:BA:64:4B:B0:7F:79:83
Certificate issuer:       /CN=8BA2AF2D0D52ED0975B013A8619531175EA4B275
Certificate serial:       072CB707EF07EF0C6A281DD678B1FD7153E7C6E5
Authority key identifier: 8B:A2:AF:2D:0D:52:ED:09:75:B0:13:A8:61:95:31:17:5E:A4:B2:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa
Signing time:             Wed 03 Apr 2024 23:22:08 +0000
ROA not before:           Wed 03 Apr 2024 23:17:08 +0000
ROA not after:            Wed 02 Apr 2025 23:22:08 +0000
asID:                     264511
IP address blocks:        132.255.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:b7:07:ef:07:ef:0c:6a:28:1d:d6:78:b1:fd:71:53:e7:c6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA2AF2D0D52ED0975B013A8619531175EA4B275
        Validity
            Not Before: Apr  3 23:17:08 2024 GMT
            Not After : Apr  2 23:22:08 2025 GMT
        Subject: CN=48D74E21411089176115FDEE07BA644BB07F7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:98:23:f7:0f:c8:b2:55:0b:54:99:1c:a1:
                    ba:d7:36:7c:72:e7:f4:a2:85:c9:d8:59:94:78:3a:
                    89:b0:f7:9b:c0:d6:2c:c5:1c:d5:3b:66:9e:4f:d9:
                    0a:d4:dd:94:44:32:a6:10:74:e2:6f:e1:6d:d3:09:
                    ea:d6:1f:4b:ea:d8:5f:2b:52:12:83:17:da:e6:bf:
                    d2:0c:e3:6a:bd:70:04:9e:c3:9d:2c:68:42:76:73:
                    5e:c8:e0:15:ab:7f:fe:4f:fa:ea:41:45:01:37:60:
                    a8:e8:58:a4:fc:9b:96:6e:24:ab:07:00:cf:45:f1:
                    f8:68:c5:74:77:20:fc:18:ae:3c:12:d0:d1:cc:7e:
                    2c:c0:cb:2d:a1:f2:81:13:4c:26:d6:b3:c7:1a:62:
                    3c:65:29:c7:45:2a:34:f9:7c:6c:1d:d2:e5:8e:44:
                    7f:d2:f8:41:aa:d4:8a:a7:a4:ed:89:34:e4:f3:69:
                    af:41:30:ad:9d:ca:1d:fa:be:28:b0:42:62:80:ec:
                    54:ac:49:96:cf:ac:6a:ba:f9:bc:4f:4a:4c:f6:5d:
                    0b:50:78:05:dc:f5:9e:90:ea:2f:c0:58:5e:cd:00:
                    56:1b:4e:d3:20:31:48:62:a4:f5:80:00:4c:f5:a4:
                    33:92:85:29:60:ec:1c:e5:7b:17:3d:66:80:ad:0c:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D7:4E:21:41:10:89:17:61:15:FD:EE:07:BA:64:4B:B0:7F:79:83
            X509v3 Authority Key Identifier:
                keyid:8B:A2:AF:2D:0D:52:ED:09:75:B0:13:A8:61:95:31:17:5E:A4:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:a0:84:a3:81:ee:31:49:93:3e:4e:67:09:f6:26:f8:e7:
         56:67:42:79:27:fd:46:51:8c:85:2b:c4:c6:f6:d5:c9:16:7a:
         17:a3:64:23:a7:8e:b1:4f:61:39:1a:ed:b6:cc:7b:7f:34:a0:
         50:5c:ad:a1:f8:f8:04:64:33:71:b9:4d:2d:10:0a:4f:57:a0:
         fd:09:27:e6:d6:97:df:33:7f:dd:41:a0:ed:2a:71:f5:6e:0a:
         62:0d:a1:fc:59:e8:5c:47:57:cb:04:6b:21:1e:b6:91:94:e2:
         87:15:6d:e2:2a:d1:0f:7b:c7:a9:f2:ff:e8:0f:2d:d3:98:5f:
         69:ba:00:09:1a:30:dd:81:db:d9:be:e9:79:75:2b:63:fa:02:
         b2:ac:ea:aa:a5:3a:b5:e0:b7:c4:df:7e:12:50:3e:59:9a:3d:
         90:ad:df:8e:99:c5:14:46:a0:18:79:b7:f2:19:b4:75:83:68:
         aa:a7:3c:22:d0:47:56:22:b2:50:f1:cb:1d:9f:2e:23:8e:8e:
         20:14:99:9c:72:73:7a:40:c2:13:c4:7b:ea:1f:15:3a:f1:a3:
         f3:05:4f:55:2e:e0:96:6b:4d:73:87:18:cd:ef:e9:e6:a9:59:
         05:2a:d3:88:c1:a1:d4:ac:d1:73:72:8d:47:5c:34:93:3c:5f:
         31:a9:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org