Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/3133322e3235352e3233322e302f32322d3234203d3e20323634353333.roa
File:                     3133322e3235352e3233322e302f32322d3234203d3e20323634353333.roa (raw, json)
Hash identifier:          InOzyhG6X2anyfNkt01Prd1zJ8fvQ6ywzkzij6J0irM=
Subject key identifier:   09:E3:3F:A1:15:D6:D2:EA:E4:FE:80:2A:35:33:C7:EC:15:A4:FC:BE
Certificate issuer:       /CN=CCF96E400ADC8CB70637260575081932C55B87B2
Certificate serial:       4CD702C132F8F36AA9E75E42725337E14B4A3B5A
Authority key identifier: CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/3133322e3235352e3233322e302f32322d3234203d3e20323634353333.roa
Signing time:             Tue 09 Apr 2024 20:29:12 +0000
ROA not before:           Tue 09 Apr 2024 20:24:12 +0000
ROA not after:            Tue 08 Apr 2025 20:29:12 +0000
asID:                     264533
IP address blocks:        132.255.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:02:c1:32:f8:f3:6a:a9:e7:5e:42:72:53:37:e1:4b:4a:3b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF96E400ADC8CB70637260575081932C55B87B2
        Validity
            Not Before: Apr  9 20:24:12 2024 GMT
            Not After : Apr  8 20:29:12 2025 GMT
        Subject: CN=09E33FA115D6D2EAE4FE802A3533C7EC15A4FCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:29:5f:fd:16:00:2b:a2:f4:46:ce:ac:e2:
                    95:e8:9c:55:d3:a3:a9:ef:34:c5:cc:33:4b:ae:27:
                    65:04:d2:d5:2c:f1:00:df:4f:5f:60:0e:59:13:14:
                    e6:37:95:30:f5:4c:9e:8d:d5:8d:2c:1e:bb:1e:23:
                    91:43:78:83:9d:8b:fb:a6:f2:0e:94:fc:4b:f5:e6:
                    70:85:bd:70:f4:6d:5c:b3:c3:7c:62:9f:78:f8:c5:
                    51:52:7f:9e:ab:e3:3c:1f:4a:4a:3f:0b:e7:e2:16:
                    7c:8e:8b:f2:9a:7b:e9:4c:af:65:a1:c5:00:3d:a8:
                    a1:c3:c0:13:8e:b2:5b:1a:03:8f:44:b4:d1:93:61:
                    00:b7:99:ab:4f:5e:7a:40:cf:ce:ca:7d:f5:04:4f:
                    dc:e5:52:2c:6f:f9:ee:ec:a8:75:4e:92:e8:4e:01:
                    f4:46:db:2a:32:f5:68:31:60:41:73:d5:08:e2:b5:
                    cc:14:3e:d5:48:67:c1:3d:7f:5b:15:9e:eb:f3:9c:
                    2c:17:96:8f:c0:03:ee:0a:3a:f0:06:1a:6f:3f:59:
                    0f:01:34:dc:71:95:b6:27:fe:de:ff:63:1f:cf:12:
                    23:de:d1:83:ff:26:c2:86:7d:de:2c:68:b7:94:7f:
                    cc:d4:d3:96:c7:1d:5c:de:7d:6b:39:55:55:f6:8e:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:3F:A1:15:D6:D2:EA:E4:FE:80:2A:35:33:C7:EC:15:A4:FC:BE
            X509v3 Authority Key Identifier:
                keyid:CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/3133322e3235352e3233322e302f32322d3234203d3e20323634353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:28:4d:34:77:a6:f6:90:6d:44:49:da:01:53:76:25:34:06:
         6e:1b:89:0a:93:d6:d0:8b:7e:73:1e:79:37:72:b4:9c:8d:14:
         df:a8:04:55:17:8d:2b:d3:0d:02:74:cd:cf:ac:90:b5:c0:e8:
         51:43:a5:84:43:9a:3f:92:8b:8d:f1:56:46:db:9d:f7:d0:ad:
         a6:e4:3b:e7:28:5f:36:b2:bd:a2:70:74:4f:24:ce:5f:77:df:
         9f:7f:7a:b4:6a:8f:56:b6:5d:47:28:0f:66:53:7b:63:2b:eb:
         ed:2f:fc:d9:3c:c9:bb:12:d6:81:a8:a0:41:18:ad:c0:b8:77:
         0e:2a:67:d8:db:fa:3f:c7:02:83:67:a4:51:a8:27:e6:e4:0e:
         5a:9d:ff:89:76:b9:76:cb:07:bb:de:47:fe:a1:a3:18:de:86:
         cc:99:97:24:94:5d:72:11:59:31:3a:54:61:a6:f4:6f:82:a5:
         75:46:e0:24:fc:4e:39:76:49:ae:d6:a7:39:2f:c1:25:81:4b:
         5a:42:e6:b7:d5:d1:ca:cf:ff:01:bf:0f:49:8c:5e:49:74:2e:
         a2:d1:ca:50:3c:94:b1:3d:80:7e:3e:bb:20:41:27:a3:f0:47:
         2b:b3:0e:66:19:3d:0d:39:e5:5f:34:c4:4a:b7:e0:eb:bd:bb:
         26:c8:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org