Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3133322e3235352e3135322e302f32322d3234203d3e20323634353038.roa
File:                     3133322e3235352e3135322e302f32322d3234203d3e20323634353038.roa (raw, json)
Hash identifier:          ELto9pY63rqFBOKJpV9JAoO8pXM+19F3a9c5LIKEtGk=
Subject key identifier:   EC:6C:C8:BD:82:31:44:94:FA:92:E5:F7:7C:A8:06:72:43:CF:51:A2
Certificate issuer:       /CN=862D64BA1F2E38D183BAB30E4E49393D5BE74D8F
Certificate serial:       188A0D4D1E4493EFC48DCE79D329182D88240311
Authority key identifier: 86:2D:64:BA:1F:2E:38:D1:83:BA:B3:0E:4E:49:39:3D:5B:E7:4D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3133322e3235352e3135322e302f32322d3234203d3e20323634353038.roa
Signing time:             Sat 24 Sep 2022 20:56:20 +0000
ROA not before:           Sat 24 Sep 2022 20:51:20 +0000
ROA not after:            Sat 23 Sep 2023 20:56:20 +0000
asID:                     264508
IP address blocks:        132.255.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8a:0d:4d:1e:44:93:ef:c4:8d:ce:79:d3:29:18:2d:88:24:03:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862D64BA1F2E38D183BAB30E4E49393D5BE74D8F
        Validity
            Not Before: Sep 24 20:51:20 2022 GMT
            Not After : Sep 23 20:56:20 2023 GMT
        Subject: CN=EC6CC8BD82314494FA92E5F77CA8067243CF51A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:51:5b:53:5a:5b:0d:66:2a:d8:28:9c:f2:
                    e5:30:60:34:1f:13:e4:e6:65:b1:5a:53:cb:58:6e:
                    97:68:18:09:82:54:dc:bc:cb:f5:c0:de:6f:98:98:
                    96:30:05:84:e7:ad:26:67:98:4c:15:13:40:ea:7e:
                    40:92:7c:88:d3:a0:d5:2e:0d:d9:7d:1e:2f:cc:14:
                    09:cf:ab:6d:71:82:bc:5c:44:db:31:0d:fb:b6:bb:
                    7c:6a:bb:99:ba:65:de:a0:f7:0d:eb:a9:48:6a:02:
                    7b:15:57:b0:99:f7:82:20:a4:86:04:df:d1:f5:54:
                    f7:7f:7a:81:4b:16:4e:a6:7a:5a:e0:ea:0c:83:ff:
                    47:40:7c:c4:61:1f:b7:b6:27:7a:76:13:28:53:a2:
                    8d:09:88:e3:94:f2:18:89:3e:3c:0d:5e:a7:c8:f6:
                    9b:a0:6e:08:e0:8d:61:66:22:8a:6d:e5:36:f8:0b:
                    d7:5c:ce:4d:9c:25:c5:9f:e5:41:37:c7:a4:10:a8:
                    04:35:30:b5:87:4c:4f:07:58:30:92:94:08:c3:f8:
                    38:2c:73:8b:5a:49:6e:29:7a:5e:f2:97:70:97:62:
                    58:a8:8d:b7:07:52:87:4b:ea:36:a7:71:3b:ea:80:
                    a5:b0:f4:51:fb:6b:23:62:1b:ce:b6:ab:ec:2d:b0:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:C8:BD:82:31:44:94:FA:92:E5:F7:7C:A8:06:72:43:CF:51:A2
            X509v3 Authority Key Identifier:
                keyid:86:2D:64:BA:1F:2E:38:D1:83:BA:B3:0E:4E:49:39:3D:5B:E7:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3133322e3235352e3135322e302f32322d3234203d3e20323634353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:da:e9:dc:01:41:2a:9a:87:c4:72:40:08:c6:70:f3:08:d6:
         f0:92:e0:2b:60:93:85:93:4c:12:5f:3a:17:b6:8b:7c:d8:df:
         24:8c:6b:e3:5c:90:4f:fa:11:4b:37:93:5d:91:c7:ab:5c:40:
         37:d9:c7:1d:3d:8d:e1:e5:4b:0a:7f:bb:54:06:18:73:1a:9a:
         3e:5b:a9:26:42:5f:54:d3:db:74:bf:44:16:0c:55:1b:84:c9:
         66:72:08:6d:72:01:e7:d7:ef:0f:83:fd:a1:c0:c2:78:ac:f3:
         60:19:ea:60:9b:44:8c:30:c6:ce:1a:6f:46:29:02:04:f0:c2:
         c1:3f:cc:03:11:40:55:ab:f3:c2:c5:4f:22:54:31:58:92:24:
         dd:52:b3:02:3e:26:d2:b7:b9:ca:f8:33:1e:a9:df:a8:27:74:
         d8:85:f3:a1:79:59:7e:8f:0b:9d:8a:d0:80:7c:1e:d5:b9:17:
         6a:36:d1:c5:c0:e8:20:59:1a:ed:00:80:91:8c:4b:0e:a6:17:
         57:eb:9a:fd:63:47:33:6b:01:95:f7:c0:bf:bd:e7:8b:90:19:
         36:cd:30:0a:7e:94:da:45:13:86:01:1b:3b:91:56:23:13:d0:
         e2:ed:9f:0a:fa:7f:c3:19:1a:b6:86:28:12:b5:c1:34:cb:99:
         9f:2f:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org