Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          Xq1CAMPHy4BUUe7xsYwX2QH6RzeJog0aYbk7yLMJ/3Q=
Subject key identifier:   D9:9A:16:7A:2D:C9:26:49:D8:35:93:9C:53:7B:26:B7:2A:F5:D2:C6
Certificate issuer:       /CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
Certificate serial:       52821914A310EB6D3DAF53F3E9366078ACFFDC0C
Authority key identifier: FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa
Signing time:             Sat 22 Jul 2023 18:06:02 +0000
ROA not before:           Sat 22 Jul 2023 18:01:02 +0000
ROA not after:            Sat 20 Jul 2024 18:06:02 +0000
asID:                     265885
IP address blocks:        128.201.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:82:19:14:a3:10:eb:6d:3d:af:53:f3:e9:36:60:78:ac:ff:dc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Validity
            Not Before: Jul 22 18:01:02 2023 GMT
            Not After : Jul 20 18:06:02 2024 GMT
        Subject: CN=D99A167A2DC92649D835939C537B26B72AF5D2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:e3:79:79:b6:23:94:d2:5d:3e:b1:74:94:
                    ca:ee:c2:38:2f:49:1c:71:b5:08:a4:29:e0:d1:21:
                    27:d2:d9:3b:59:1e:2f:1d:2d:40:6f:e6:b0:3f:8a:
                    90:ca:8b:3b:74:dc:4a:f5:13:04:a3:ae:0f:59:2f:
                    85:40:cb:63:49:9a:d9:51:bd:b6:e5:fa:ac:74:66:
                    86:3a:ab:15:1c:da:1b:46:e1:82:b8:32:ea:50:84:
                    f6:82:91:07:58:e9:7e:68:e9:3b:7c:ba:b2:f4:31:
                    82:82:f0:13:6c:c4:9f:4e:cd:00:a8:34:67:5a:b3:
                    5a:9b:32:21:31:99:ad:e4:fc:ab:35:82:b3:e5:6c:
                    35:90:62:73:d5:73:ea:31:69:a3:9b:bd:52:7d:0a:
                    2b:95:6e:dc:4e:9d:f0:a6:1e:c8:8b:c7:55:8f:ee:
                    b7:6e:07:c6:bc:72:b0:d8:43:ec:61:c1:12:e2:16:
                    53:5e:89:9d:1e:02:fb:ba:48:97:45:54:66:d1:73:
                    b6:98:5d:a0:47:73:11:9e:53:e3:f5:cc:17:2f:03:
                    af:9e:ea:65:c1:3a:4c:1b:f1:37:5f:db:f9:d5:26:
                    aa:19:e4:8c:e8:33:e2:00:6c:a1:0d:7f:0f:fc:9b:
                    a1:e8:28:61:bb:d3:cd:9f:79:b5:c9:1f:1d:c1:8e:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9A:16:7A:2D:C9:26:49:D8:35:93:9C:53:7B:26:B7:2A:F5:D2:C6
            X509v3 Authority Key Identifier:
                keyid:FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:24:28:c4:1b:0b:1e:91:0e:59:a3:2b:1a:53:8f:f7:43:
         5f:24:8e:4d:60:f0:89:18:65:e0:bd:45:53:8e:ef:f3:86:bd:
         24:ed:b2:fa:93:1c:6e:ae:ec:d1:01:93:03:8d:0e:bf:0c:24:
         d9:77:4a:36:0b:06:78:ee:4e:dd:c0:94:8a:3d:79:8e:e6:07:
         8e:14:89:db:02:03:90:34:9a:a1:22:14:ff:36:b6:37:c5:77:
         31:96:32:b1:14:9f:f6:d8:a8:22:fc:f4:08:b0:c7:09:ad:64:
         50:c3:35:bf:2a:e7:2a:80:a1:24:6a:6a:98:21:ff:99:e2:69:
         12:c0:72:4d:76:a3:f7:9b:74:37:53:09:13:d1:99:e6:bc:d7:
         db:9d:14:a1:e3:1c:00:14:56:71:c3:bb:ca:65:d1:b8:01:79:
         6a:f1:e1:27:1f:7b:23:06:59:e8:cd:4e:b3:fb:3c:e7:37:63:
         14:a9:63:c5:80:87:a8:2a:14:3d:70:01:61:6c:92:ba:61:f5:
         c2:ff:6d:f9:bd:f7:50:a6:f8:0b:af:da:ec:d3:94:a9:e7:99:
         c5:91:62:3b:dc:bf:c7:6a:26:33:af:4b:e1:fd:15:b8:8d:04:
         07:23:8a:32:23:df:fe:0c:64:c8:c9:ee:bd:98:60:2f:44:23:
         2e:cf:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org