Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa
File:                     3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (raw, json)
Hash identifier:          sMY02WPZtq/XGF68PofTjN49dvHjGSIhr0wNnMgDmDI=
Subject key identifier:   FF:7A:C3:C9:61:39:19:89:29:7B:4A:4A:48:3E:9A:67:70:F8:06:29
Certificate issuer:       /CN=FEDE3D4062536781E5EF8F9E8CD862890EB9A688
Certificate serial:       7E7D7B622BAA048884C27C571AEFC10979FB800B
Authority key identifier: FE:DE:3D:40:62:53:67:81:E5:EF:8F:9E:8C:D8:62:89:0E:B9:A6:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa
Signing time:             Tue 12 Mar 2024 12:13:53 +0000
ROA not before:           Tue 12 Mar 2024 12:08:53 +0000
ROA not after:            Tue 11 Mar 2025 12:13:53 +0000
asID:                     266154
IP address blocks:        192.140.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7d:7b:62:2b:aa:04:88:84:c2:7c:57:1a:ef:c1:09:79:fb:80:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDE3D4062536781E5EF8F9E8CD862890EB9A688
        Validity
            Not Before: Mar 12 12:08:53 2024 GMT
            Not After : Mar 11 12:13:53 2025 GMT
        Subject: CN=FF7AC3C961391989297B4A4A483E9A6770F80629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:da:22:04:21:19:6c:16:79:d8:d9:5a:24:
                    8c:36:77:22:1d:11:bf:df:c8:42:e6:88:fd:91:dd:
                    2a:4d:45:96:55:9d:51:c3:26:dd:c5:30:17:4c:3d:
                    e6:f4:bf:47:1f:9b:6e:f6:dd:e4:d4:15:26:c8:c3:
                    a8:0f:3a:87:ff:2b:ac:cf:40:d5:ca:ea:bf:d7:ee:
                    17:aa:30:3a:9b:07:c4:a3:ee:79:c0:20:b3:4f:8b:
                    14:76:71:2b:2d:25:12:a3:f1:b8:51:08:9e:be:5f:
                    bc:a5:67:2d:d5:f2:74:8d:08:0c:62:9c:b4:c4:a2:
                    d6:2d:c7:ec:78:70:b3:3e:9a:c7:2f:d9:22:0d:5c:
                    81:05:9f:65:f7:3b:2f:46:a1:6d:79:aa:90:27:51:
                    37:cb:7d:9c:72:4d:9c:2c:d6:b1:36:4c:36:88:36:
                    1c:1f:9e:ea:64:85:67:1f:54:81:7d:ad:dd:60:ef:
                    49:e3:e3:1f:63:87:c6:55:39:a2:29:73:6b:b5:86:
                    15:9c:e0:cf:4e:61:34:26:65:43:73:76:a4:a8:50:
                    95:81:ce:50:d4:97:5b:0a:08:79:27:5c:66:53:c0:
                    31:b1:40:67:2d:2c:e5:cd:27:8c:17:7a:6b:67:7b:
                    3a:68:a9:9e:f0:d4:5e:e4:f6:80:78:4d:fd:4f:99:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:C3:C9:61:39:19:89:29:7B:4A:4A:48:3E:9A:67:70:F8:06:29
            X509v3 Authority Key Identifier:
                keyid:FE:DE:3D:40:62:53:67:81:E5:EF:8F:9E:8C:D8:62:89:0E:B9:A6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:8b:5e:35:15:5d:e6:04:c3:96:f5:9e:25:6e:e5:d6:64:
         2c:4c:1c:d8:e3:82:a7:e9:9d:b8:1d:c3:8e:1c:23:fa:56:5c:
         80:8a:66:b7:f3:0d:8f:3c:fc:0b:5f:58:8f:46:68:2d:d3:0a:
         c7:89:cf:f1:36:2e:2d:85:0b:eb:c1:a1:e0:89:bf:c2:b5:fc:
         0e:e0:3d:74:7b:e7:20:54:56:fc:a8:94:4f:26:60:78:06:81:
         2a:fd:ed:6a:24:6f:60:57:02:33:94:48:70:da:b5:00:42:c2:
         5f:60:26:57:4a:d7:96:37:0a:f8:ed:66:6c:b3:e2:37:8e:f6:
         17:13:a6:83:90:ac:33:d9:2b:9d:de:12:da:83:a9:98:c6:e7:
         18:1d:10:c6:2b:4c:76:75:f9:d1:98:d9:24:45:1d:9b:61:92:
         49:7d:fc:ec:df:20:f0:58:6d:cd:8c:74:62:68:4f:85:42:3d:
         ba:da:20:c0:ea:4c:72:d7:a0:19:bd:4f:dc:38:db:c0:5f:7c:
         48:26:31:80:10:7a:31:9e:2a:6b:fa:86:c9:4c:62:c7:4e:29:
         c9:cd:79:61:06:c9:c8:26:d9:1b:05:7d:37:89:3e:51:42:5a:
         b6:f2:48:b2:eb:ce:e3:3d:ee:ed:be:a8:e4:76:c0:13:d4:1e:
         18:08:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org