Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa (raw, json)
Hash identifier:          95TBZtY6NPYcIPBSkH152BVcQmvKuaaoQVc28rkmuTY=
Subject key identifier:   0B:FC:F6:10:40:67:64:ED:22:73:8C:3C:4F:A0:11:8C:90:1E:6B:D3
Certificate issuer:       /CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
Certificate serial:       6D8276891F0E7291F0482DCC9A55B0E3D7578285
Authority key identifier: C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa
Signing time:             Sat 16 Mar 2024 13:32:44 +0000
ROA not before:           Sat 16 Mar 2024 13:27:44 +0000
ROA not after:            Sat 15 Mar 2025 13:32:44 +0000
asID:                     264949
IP address blocks:        168.232.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:76:89:1f:0e:72:91:f0:48:2d:cc:9a:55:b0:e3:d7:57:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
        Validity
            Not Before: Mar 16 13:27:44 2024 GMT
            Not After : Mar 15 13:32:44 2025 GMT
        Subject: CN=0BFCF610406764ED22738C3C4FA0118C901E6BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:08:58:dc:ed:21:7e:33:59:d7:f7:09:cb:
                    0b:e8:fd:a7:8e:b1:bb:f7:b9:97:f8:4a:4c:3e:05:
                    41:2c:dd:a8:07:5c:18:ef:ea:6d:ab:ac:c1:11:8e:
                    d3:75:c0:14:32:82:05:74:07:04:b7:fd:83:a1:e3:
                    61:5f:2f:43:21:62:02:17:4f:12:51:ae:fd:8d:37:
                    b5:0a:bf:2d:be:6e:a9:42:9b:e1:48:3f:c5:8e:81:
                    d7:28:59:0f:a7:b2:7f:2f:29:9e:a0:e1:bf:60:93:
                    e8:55:c5:37:90:3a:ce:62:d0:bf:f6:ee:9d:91:b1:
                    00:5e:2d:88:84:6b:8e:dd:96:2a:c1:c8:12:f7:26:
                    89:59:a4:95:9f:18:9e:8c:9e:2a:43:ee:56:a2:1e:
                    47:b0:13:8d:67:96:4d:30:64:aa:59:73:30:76:d5:
                    2b:44:55:8e:30:51:5e:6b:51:03:12:c7:c3:9b:51:
                    3f:0f:ff:fd:14:18:ed:4c:9a:a9:76:83:4a:7f:3e:
                    81:9b:de:56:f5:bb:f6:a6:92:40:31:4c:f8:f9:69:
                    ce:02:b4:ac:c3:95:12:cc:12:07:f2:12:49:b7:8f:
                    9d:87:dd:54:c0:63:5b:93:ad:c3:32:e0:04:88:9c:
                    6a:1c:1f:28:a0:c6:57:4c:5c:04:2b:c3:64:31:18:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:F6:10:40:67:64:ED:22:73:8C:3C:4F:A0:11:8C:90:1E:6B:D3
            X509v3 Authority Key Identifier:
                keyid:C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:e9:0f:e8:9d:48:57:04:9c:2f:65:32:da:f3:9c:aa:30:ff:
         a3:a3:7f:12:2b:21:1b:78:4d:f5:82:bb:ad:49:6b:19:b5:5b:
         36:05:56:0a:4f:8f:11:43:8a:80:42:c2:71:88:ea:04:38:a2:
         3e:36:35:1d:c2:4d:38:b9:90:46:29:46:e6:68:36:ba:13:72:
         df:cf:31:b9:53:8b:f7:a2:f7:ef:fa:c9:b9:db:f1:55:51:a0:
         bc:ba:b3:55:4e:8b:19:eb:49:9b:06:e0:df:40:df:8e:d9:9f:
         eb:2a:e9:44:53:1d:84:4a:06:18:02:c6:7d:cc:31:29:05:a8:
         79:5f:32:03:e8:e4:16:93:99:a7:ff:00:09:17:d1:3a:0c:76:
         64:ec:a7:3f:46:41:45:99:b8:0f:83:b1:b0:7d:1d:1e:45:dc:
         40:fd:e3:25:8b:05:ce:35:20:a6:cb:38:fb:46:96:51:d1:8c:
         a3:fc:ce:7b:34:56:0d:82:69:34:40:13:c8:1b:e1:71:c0:d3:
         93:b6:88:09:d5:a4:65:8b:90:49:7d:0e:95:ef:2f:b2:db:5d:
         fa:b5:ba:9c:f8:77:15:be:42:e5:44:87:77:7e:9b:36:d9:51:
         29:54:ed:d0:59:a9:13:6a:da:1a:78:d0:0a:f7:29:e4:ac:fc:
         a9:b3:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org