Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa
File:                     3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa (raw, json)
Hash identifier:          sTR6SYsq8NiTxQrCitNZeQe/REA/pbYn9OuET2u7iLU=
Subject key identifier:   6C:5E:05:13:0B:D8:32:67:3F:EB:AE:7D:45:03:3C:55:C2:1B:82:09
Certificate issuer:       /CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
Certificate serial:       63706CCF037397A981C0CE25B2D4F781AADC62C2
Authority key identifier: A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa
Signing time:             Tue 17 Oct 2023 15:00:00 +0000
ROA not before:           Tue 17 Oct 2023 14:55:00 +0000
ROA not after:            Tue 15 Oct 2024 15:00:00 +0000
asID:                     264514
IP address blocks:        132.255.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:6c:cf:03:73:97:a9:81:c0:ce:25:b2:d4:f7:81:aa:dc:62:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
        Validity
            Not Before: Oct 17 14:55:00 2023 GMT
            Not After : Oct 15 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:6f:f3:fe:a4:89:f9:e9:9d:86:83:73:d9:
                    ab:35:45:5c:5a:c6:d8:11:4f:6c:70:1c:f2:e0:98:
                    2b:b3:99:e6:f8:c4:c3:f2:2d:88:d0:8b:a9:db:b9:
                    e6:27:44:7e:1a:26:42:d0:3f:4f:53:cd:e7:36:dc:
                    57:87:ef:3c:9a:44:e4:ff:eb:ff:4f:01:83:11:5d:
                    28:a4:ac:b2:da:bf:d8:22:7f:b6:b4:de:9f:6d:25:
                    bc:fb:13:c2:9d:ca:89:58:b0:38:2d:0b:be:38:88:
                    c5:f1:c6:70:9c:1a:a1:75:a7:d3:4d:1e:dc:4a:64:
                    a1:55:b5:16:a9:16:ce:ed:44:e7:d4:d5:8a:7e:31:
                    77:09:f9:ff:72:56:6d:64:70:45:a5:ab:92:f8:58:
                    e2:3e:dc:8c:0b:83:e2:4b:48:b3:27:6a:b6:bf:0e:
                    b7:f9:59:45:cb:04:ee:5c:fb:db:6c:f1:68:12:89:
                    60:9a:80:f7:06:01:80:94:c7:35:e2:31:69:7b:97:
                    f5:d2:eb:d6:13:a9:0e:aa:c1:f4:57:df:69:2b:10:
                    1c:f2:b7:2f:92:6b:9e:ac:2b:b5:4b:0c:b6:ad:dc:
                    62:95:8d:19:df:06:af:83:e6:66:9a:2b:a7:74:3f:
                    27:37:44:a1:da:95:bf:47:59:36:2c:7f:93:e6:e3:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:05:13:0B:D8:32:67:3F:EB:AE:7D:45:03:3C:55:C2:1B:82:09
            X509v3 Authority Key Identifier:
                keyid:A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:aa:78:fa:21:e7:87:98:dd:4f:71:8d:4c:9a:25:83:24:2e:
         46:f2:72:d2:20:17:9a:05:63:e5:2c:9f:b5:7c:eb:9b:c4:01:
         20:e5:c3:4e:b8:89:5e:ac:ec:86:52:1c:7f:ee:5b:73:a2:98:
         72:32:df:a7:b0:81:58:77:bb:6d:0e:cb:62:d6:5c:04:11:be:
         8a:de:15:b9:9b:53:e9:61:c8:9c:9b:b5:53:bc:7f:da:51:82:
         7f:c2:68:09:a1:11:9b:d5:d2:c8:e2:ce:92:1a:f4:3e:d2:bf:
         57:b3:3b:44:60:16:e5:ee:25:7d:5f:cc:31:0e:76:4e:b7:cb:
         87:76:ce:91:95:df:d6:0f:57:e8:a8:f2:ab:16:6e:12:c1:3b:
         d3:69:d5:82:56:f4:28:35:36:c7:e4:24:67:d4:db:4f:10:92:
         2c:a4:a2:17:7a:68:f6:31:85:37:9b:1e:c7:54:48:75:a2:c2:
         3f:e6:5d:84:5c:3e:10:73:fe:ff:30:88:35:d5:94:bd:69:6b:
         c5:6d:cb:4c:1d:54:c5:f2:f8:59:3e:57:80:89:56:aa:83:1a:
         de:3d:3b:01:ec:59:b0:42:4a:8a:ac:e3:94:af:d4:fe:fc:65:
         32:59:f8:22:0a:6c:55:b4:cd:86:94:30:09:a0:c7:00:3c:2f:
         be:f1:6b:ad
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUY3BszwNzl6mBwM4lstT3garcYsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIzMDMzM0Y3NjkwRjQ3NEUyODRBOTVCQUREM0QzOUY2
QzVDQjlGMzAeFw0yMzEwMTcxNDU1MDBaFw0yNDEwMTUxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0EyNzZGRjNGRUE0ODlGOUU5
OUQ4NjgzNzNEOUFCMzU0NTVDNUFDNkQ4MTE0RjZDNzAxQ0YyRTA5ODJCQjM5OUU2
RjhDNEMzRjIyRDg4RDA4QkE5REJCOUU2Mjc0NDdFMUEyNjQyRDAzRjRGNTNDREU3
MzZEQzU3ODdFRjNDOUE0NEU0RkZFQkZGNEYwMTgzMTE1RDI4QTRBQ0IyREFCRkQ4
MjI3RkI2QjRERTlGNkQyNUJDRkIxM0MyOURDQTg5NThCMDM4MkQwQkJFMzg4OEM1
RjFDNjcwOUMxQUExNzVBN0QzNEQxRURDNEE2NEExNTVCNTE2QTkxNkNFRUQ0NEU3
RDRENThBN0UzMTc3MDlGOUZGNzI1NjZENjQ3MDQ1QTVBQjkyRjg1OEUyM0VEQzhD
MEI4M0UyNEI0OEIzMjc2QUI2QkYwRUI3Rjk1OTQ1Q0IwNEVFNUNGQkRCNkNGMTY4
MTI4OTYwOUE4MEY3MDYwMTgwOTRDNzM1RTIzMTY5N0I5N0Y1RDJFQkQ2MTNBOTBF
QUFDMUY0NTdERjY5MkIxMDFDRjJCNzJGOTI2QjlFQUMyQkI1NEIwQ0I2QUREQzYy
OTU4RDE5REYwNkFGODNFNjY2OUEyQkE3NzQzRjI3Mzc0NEExREE5NUJGNDc1OTM2
MkM3RjkzRTZFMzdBNkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyidv8/6kifnpnYaDc9mrNUVcWsbYEU9scBzy4Jgrs5nm+MTD8i2I
0Iup27nmJ0R+GiZC0D9PU83nNtxXh+88mkTk/+v/TwGDEV0opKyy2r/YIn+2tN6f
bSW8+xPCncqJWLA4LQu+OIjF8cZwnBqhdafTTR7cSmShVbUWqRbO7UTn1NWKfjF3
Cfn/clZtZHBFpauS+FjiPtyMC4PiS0izJ2q2vw63+VlFywTuXPvbbPFoEolgmoD3
BgGAlMc14jFpe5f10uvWE6kOqsH0V99pKxAc8rcvkmuerCu1Swy2rdxilY0Z3wav
g+ZmmiundD8nN0Sh2pW/R1k2LH+T5uN6bwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FGxeBRML2DJnP+uufUUDPFXCG4IJMB8GA1UdIwQYMBaAFKIwMz92kPR04oSpW63T
059sXLnzMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFIzcnN4cXlqQnpMSmFL
Q2gxblJTOFp1aXN0enFvSjlaQVRBNVNwWmVnRS8wL0EyMzAzMzNGNzY5MEY0NzRF
Mjg0QTk1QkFERDNEMzlGNkM1Q0I5RjMuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvQTIzMDMzM0Y3NjkwRjQ3NEUyODRBOTVCQUREM0QzOUY2QzVDQjlG
My5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFIzcnN4cXlqQnpMSmFLQ2gxblJT
OFp1aXN0enFvSjlaQVRBNVNwWmVnRS8wLzMxMzMzMjJlMzIzNTM1MmUzMjMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKE
/9gwDQYJKoZIhvcNAQELBQADggEBAL6qePoh54eY3U9xjUyaJYMkLkbyctIgF5oF
Y+Usn7V865vEASDlw064iV6s7IZSHH/uW3OimHIy36ewgVh3u20Oy2LWXAQRvore
FbmbU+lhyJybtVO8f9pRgn/CaAmhEZvV0sjizpIa9D7Sv1ezO0RgFuXuJX1fzDEO
dk63y4d2zpGV39YPV+io8qsWbhLBO9Np1YJW9Cg1NsfkJGfU208Qkiykohd6aPYx
hTebHsdUSHWiwj/mXYRcPhBz/v8wiDXVlL1pa8Vty0wdVMXy+Fk+V4CJVqqDGt49
OwHsWbBCSoqs45Sv1P78ZTJZ+CIKbFW0zYaUMAmgxwA8L77xa60=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:58 2024 by rpki-client on console-ams.rpki-client.org