Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa
File:                     3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          45azl9fhqA6JRW7qIUdFaAA6quWwZX4HevY1MxcTFOA=
Subject key identifier:   60:F3:25:F5:93:60:36:86:9E:77:5D:8B:BC:9D:69:94:81:88:61:63
Certificate issuer:       /CN=C297D032290ADB0DA80D712D1C9C8B5414068CBA
Certificate serial:       652CE22BE76A1A0C41EC324BD492DF458C8BAD29
Authority key identifier: C2:97:D0:32:29:0A:DB:0D:A8:0D:71:2D:1C:9C:8B:54:14:06:8C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa
Signing time:             Sat 09 Mar 2024 06:04:55 +0000
ROA not before:           Sat 09 Mar 2024 05:59:55 +0000
ROA not after:            Sat 08 Mar 2025 06:04:55 +0000
asID:                     263395
IP address blocks:        168.194.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2c:e2:2b:e7:6a:1a:0c:41:ec:32:4b:d4:92:df:45:8c:8b:ad:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C297D032290ADB0DA80D712D1C9C8B5414068CBA
        Validity
            Not Before: Mar  9 05:59:55 2024 GMT
            Not After : Mar  8 06:04:55 2025 GMT
        Subject: CN=60F325F5936036869E775D8BBC9D699481886163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:64:e4:4f:44:5f:a5:c5:20:1c:c8:e4:53:
                    a3:32:52:70:ea:88:fe:bf:47:e5:66:17:37:8c:c8:
                    9c:92:69:5a:4a:dd:c0:de:1a:4e:2e:f2:e4:b5:b9:
                    c5:69:f5:21:6e:b1:fe:a1:9c:ad:c9:89:61:cb:af:
                    d4:5a:f1:9d:f8:55:75:24:35:5d:65:42:b1:32:47:
                    f5:a2:31:96:60:0f:e9:47:b5:19:42:ba:fb:7a:3c:
                    05:d9:2f:13:95:d3:ce:3e:b2:c4:de:dd:85:29:3d:
                    93:cd:de:8b:72:b1:32:90:e7:7d:15:d9:5b:54:6e:
                    33:d4:e3:19:80:06:b7:cb:ee:31:7a:ba:f5:f9:28:
                    e4:08:ae:2e:32:28:7a:ef:53:ed:26:4f:58:cd:7b:
                    c1:95:09:db:8b:48:70:92:15:5d:16:d8:c6:7a:32:
                    f9:8a:d4:f5:f2:fb:bb:3f:4e:df:11:43:be:e4:13:
                    36:4f:46:b4:25:21:cb:2b:7b:c5:be:db:04:1f:26:
                    bd:29:53:52:13:73:42:b5:6a:2e:66:ab:10:7c:4f:
                    03:96:a5:c2:36:f7:08:3d:fe:1f:b4:94:8f:c9:f5:
                    a7:57:fd:47:a4:b0:38:d8:f5:c8:35:80:11:1a:16:
                    fb:59:9b:98:9a:4b:0b:9b:0d:8f:d6:01:65:d4:19:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:25:F5:93:60:36:86:9E:77:5D:8B:BC:9D:69:94:81:88:61:63
            X509v3 Authority Key Identifier:
                keyid:C2:97:D0:32:29:0A:DB:0D:A8:0D:71:2D:1C:9C:8B:54:14:06:8C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:c2:7c:fa:4e:36:3e:09:b1:b7:c7:c5:98:af:3b:7e:48:
         ab:f6:64:4d:d7:ed:43:88:3a:8d:a4:37:62:e9:ef:55:54:72:
         54:93:c9:24:c2:97:80:27:e7:3c:de:7f:12:d1:cd:15:32:72:
         98:3a:a8:62:f7:a7:c7:87:37:a2:06:f6:bf:3c:fd:d7:9e:82:
         7f:45:4f:6f:3b:62:30:3a:cc:9d:f9:71:5a:51:f1:5a:c1:91:
         d9:7a:da:24:d4:ff:a8:5c:6a:dc:76:51:50:a9:6a:d7:37:da:
         9b:7b:df:fb:1a:72:9e:29:2f:e5:4b:ca:97:10:93:ba:9d:62:
         3d:dd:34:14:7b:23:cd:a7:43:eb:a2:15:48:f5:f7:e7:fa:9a:
         d2:da:21:3c:b2:f7:3e:d3:92:58:89:bc:9a:51:6d:dd:68:31:
         4d:63:50:99:d0:f3:d3:05:7f:75:ee:06:4b:e1:39:2d:a5:b2:
         63:25:49:33:59:4e:99:ee:39:5e:aa:cc:64:d9:bb:9b:7a:e7:
         3f:fd:d2:d8:33:00:f4:0e:b9:ad:77:33:cb:af:65:b9:91:6b:
         4d:ef:21:61:c4:70:32:b4:b9:3c:f2:71:b6:d1:38:cd:18:5f:
         e6:fb:0a:ae:a8:b9:d1:22:a1:2e:6d:c3:17:b0:cb:19:01:61:
         d1:36:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org