Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa
File:                     3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          u639We16ZHcRJJ75ylVmgAJwnR0iujewJIDkmijF854=
Subject key identifier:   A5:A7:73:1B:63:35:F4:1A:31:E0:C6:5C:BC:6D:08:08:90:8F:70:AF
Certificate issuer:       /CN=F4A13298B8B1DBC0257898EF603127C38CA91069
Certificate serial:       04B1A3F272507B6D81F777D2B2CD49B1E55CA05B
Authority key identifier: F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa
Signing time:             Wed 31 Jan 2024 11:55:35 +0000
ROA not before:           Wed 31 Jan 2024 11:50:35 +0000
ROA not after:            Wed 29 Jan 2025 11:55:35 +0000
asID:                     262323
IP address blocks:        168.195.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:a3:f2:72:50:7b:6d:81:f7:77:d2:b2:cd:49:b1:e5:5c:a0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A13298B8B1DBC0257898EF603127C38CA91069
        Validity
            Not Before: Jan 31 11:50:35 2024 GMT
            Not After : Jan 29 11:55:35 2025 GMT
        Subject: CN=A5A7731B6335F41A31E0C65CBC6D0808908F70AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:46:50:b2:9f:19:8f:c4:fe:5e:7d:2b:ed:
                    9c:60:91:e9:f4:07:a4:c2:1a:06:29:f1:04:03:9a:
                    88:7b:8a:06:8e:a5:b3:c4:00:6d:3d:22:8a:24:29:
                    01:6b:a6:85:77:c6:76:40:f8:f6:4c:37:80:01:e5:
                    8d:c1:9a:61:25:7b:de:10:d7:b0:42:e1:91:bc:0c:
                    b3:a5:43:b5:f0:0e:e4:2a:23:ed:5a:16:30:30:92:
                    ee:2b:97:7d:82:9b:09:6f:ff:dc:c0:ce:1c:ee:3d:
                    d9:ec:2f:b6:5e:26:02:b3:1c:77:d6:b6:b7:f5:6a:
                    ed:c5:22:84:58:91:ba:6b:18:ec:66:ef:2a:d3:05:
                    91:e4:13:7f:2b:87:78:10:b2:ab:fa:f8:d7:d2:55:
                    6e:22:2c:f2:a3:94:74:60:36:73:9b:5c:63:77:b8:
                    8e:b9:88:03:93:43:9c:0c:f4:1f:5c:92:7f:9f:7e:
                    ef:57:96:f0:a3:89:d1:bf:7d:c0:12:8d:c0:7f:03:
                    7d:bb:02:99:6f:c7:2f:1e:8c:df:2e:2e:f4:1d:a6:
                    6f:f9:96:42:cc:e8:7e:10:ec:e0:8a:72:3b:71:bf:
                    a2:d8:5f:f8:d0:0b:6f:42:0b:c2:7e:6c:9e:89:12:
                    51:ba:36:95:13:e7:56:44:80:24:b0:d8:d8:86:8f:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:73:1B:63:35:F4:1A:31:E0:C6:5C:BC:6D:08:08:90:8F:70:AF
            X509v3 Authority Key Identifier:
                keyid:F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/F4A13298B8B1DBC0257898EF603127C38CA91069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:19:ac:ce:de:36:1f:f6:9e:ff:cc:a8:3a:3f:8d:59:90:
         c0:0e:f8:c5:02:76:f5:59:3c:10:4c:c8:a5:79:e3:18:54:1f:
         51:22:83:f2:1f:77:1b:18:6c:40:3a:e2:68:48:3d:d8:31:a8:
         b8:63:e3:83:0f:ff:a6:67:97:9b:fe:45:7d:ca:03:44:fa:42:
         a0:ef:93:7a:24:6f:8a:f6:0e:24:f2:24:d4:d6:88:e2:6c:c4:
         0d:cd:3f:c9:bb:96:b1:74:af:54:ca:05:a8:09:57:6d:56:13:
         16:2b:6e:79:27:69:66:cf:8d:3c:f9:a1:d3:3b:8f:62:e3:4e:
         8c:6e:d8:9a:17:3a:10:fb:bb:e1:47:9f:c2:a9:2c:bf:43:08:
         1c:95:df:4a:d5:8e:d3:ac:da:da:96:a1:40:db:02:21:cb:a5:
         17:78:62:28:f1:f1:c3:6c:ba:50:a0:79:4c:41:9a:0f:4a:99:
         79:11:29:46:7f:2f:2f:96:68:bc:30:8e:e3:04:c9:76:25:54:
         39:39:d8:5f:ee:5c:74:23:9b:a1:7b:5c:1a:81:eb:b3:80:31:
         52:68:71:e4:7c:e0:f8:dd:3d:e9:0d:23:20:5a:fe:db:bb:3e:
         7f:cb:d2:1d:cd:09:49:8d:f7:5e:21:34:e4:50:ca:ac:2f:6b:
         f4:52:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org