Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/3133322e3235352e35322e302f32322d3234203d3e20323634343632.roa
File:                     3133322e3235352e35322e302f32322d3234203d3e20323634343632.roa (raw, json)
Hash identifier:          Q+0HVXYvaEXvj+YfokDvsoFXa3nTzOHHLOnjElPwfik=
Subject key identifier:   F7:85:F3:3A:A1:BB:B0:53:75:6F:D9:86:C8:27:1C:A7:12:38:22:03
Certificate issuer:       /CN=DFDF417F1FA3347AD7D01DCA6C1918478A3297B0
Certificate serial:       7AFB0FE581E5BB1927FD900F7E5FEBA11D36DCD6
Authority key identifier: DF:DF:41:7F:1F:A3:34:7A:D7:D0:1D:CA:6C:19:18:47:8A:32:97:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/3133322e3235352e35322e302f32322d3234203d3e20323634343632.roa
Signing time:             Wed 10 Apr 2024 19:41:40 +0000
ROA not before:           Wed 10 Apr 2024 19:36:40 +0000
ROA not after:            Wed 09 Apr 2025 19:41:40 +0000
asID:                     264462
IP address blocks:        132.255.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fb:0f:e5:81:e5:bb:19:27:fd:90:0f:7e:5f:eb:a1:1d:36:dc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFDF417F1FA3347AD7D01DCA6C1918478A3297B0
        Validity
            Not Before: Apr 10 19:36:40 2024 GMT
            Not After : Apr  9 19:41:40 2025 GMT
        Subject: CN=F785F33AA1BBB053756FD986C8271CA712382203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:be:f3:82:df:b5:53:8c:42:07:44:ab:b7:
                    8e:a0:f7:6c:71:af:7e:d4:50:43:8b:a5:76:65:75:
                    88:98:27:ae:61:62:30:91:36:2c:fb:1a:99:50:b8:
                    66:4b:5c:36:3c:02:7e:42:cf:53:38:ff:e5:9d:b4:
                    77:85:17:93:7c:22:bc:15:4e:36:0b:01:e7:5f:cc:
                    1d:ea:c1:02:38:5d:c0:f0:70:9c:44:be:50:05:a5:
                    a0:c0:65:42:f4:6d:ca:70:4b:86:3d:c9:e2:b9:96:
                    70:ee:fd:c0:dd:8c:50:6d:44:a6:96:0f:54:1d:fc:
                    bc:29:44:c9:21:48:e9:a4:cd:75:94:a3:fc:a5:dd:
                    ac:5a:bf:3b:1e:1f:ca:19:2b:27:2e:d0:8d:d7:40:
                    28:42:a7:52:de:af:b6:6b:ea:1c:33:e0:7a:2f:aa:
                    2b:3f:83:ee:d5:d6:07:bd:6c:8f:47:82:6a:33:03:
                    0e:f4:2c:11:c5:37:24:78:e4:79:04:05:57:38:c8:
                    34:a6:f8:3a:2c:bb:64:a9:2f:85:44:dc:4d:09:07:
                    e7:b7:b7:1c:3a:79:23:c6:5b:ee:be:21:05:f7:2c:
                    15:95:bc:57:13:93:f7:4f:a7:e5:d8:a8:c3:ba:8a:
                    4d:ba:10:27:30:3d:72:10:ee:14:ff:27:f0:fa:4a:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:85:F3:3A:A1:BB:B0:53:75:6F:D9:86:C8:27:1C:A7:12:38:22:03
            X509v3 Authority Key Identifier:
                keyid:DF:DF:41:7F:1F:A3:34:7A:D7:D0:1D:CA:6C:19:18:47:8A:32:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/3133322e3235352e35322e302f32322d3234203d3e20323634343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:cd:06:95:b2:28:ef:7c:cf:c7:1d:f1:a3:fc:6d:80:af:
         9a:7a:cd:5e:38:48:88:29:54:3d:0e:0b:ee:b8:64:1d:87:71:
         21:64:86:7d:26:f5:b2:26:98:ca:de:4d:03:bb:53:1b:c6:30:
         ec:93:eb:f0:64:c6:ee:ed:0a:2a:20:bf:82:a6:01:9b:14:ac:
         0e:c8:4e:b1:41:47:61:8a:52:2b:69:2d:2b:87:e8:97:f0:3d:
         df:b8:6b:88:be:e6:e5:c9:b1:94:68:7d:0f:3a:e4:23:1a:be:
         06:66:33:34:6f:a8:bd:d7:1b:4e:15:9e:05:1e:4d:65:fc:55:
         79:b6:71:90:06:df:c4:7d:44:54:32:45:5c:27:53:38:dd:d1:
         3f:33:0c:ff:54:ae:1c:67:e8:05:a8:d1:c9:14:72:b9:73:e0:
         10:eb:a5:ea:d4:35:ba:b2:91:b4:7d:bc:58:bc:fd:4d:50:4b:
         87:b8:f3:ef:99:28:1d:f7:7f:66:10:d8:7a:17:6f:c7:e0:66:
         38:90:03:7d:1c:99:d2:1b:df:bc:a7:b0:74:e5:59:95:27:51:
         7f:a9:0e:21:d3:96:96:33:0f:77:b1:d3:ac:d1:95:e0:e0:73:
         a4:e8:49:70:d1:37:a2:e5:36:c5:b7:4c:31:1c:f0:ec:aa:96:
         2d:b1:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org