Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          YXJik+5bFJh2NC6F1d8VJ/o3iAerv0u3r9tG8DW5j6Q=
Subject key identifier:   3A:60:37:4F:7E:77:3A:3F:DB:ED:5E:1D:10:7D:02:6C:52:C9:6B:B0
Certificate issuer:       /CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
Certificate serial:       30BD306745C4A28D93ED159FCA86896648AF2AAE
Authority key identifier: FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
Signing time:             Mon 04 Mar 2024 16:39:23 +0000
ROA not before:           Mon 04 Mar 2024 16:34:23 +0000
ROA not after:            Mon 03 Mar 2025 16:39:23 +0000
asID:                     269359
IP address blocks:        168.194.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bd:30:67:45:c4:a2:8d:93:ed:15:9f:ca:86:89:66:48:af:2a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
        Validity
            Not Before: Mar  4 16:34:23 2024 GMT
            Not After : Mar  3 16:39:23 2025 GMT
        Subject: CN=3A60374F7E773A3FDBED5E1D107D026C52C96BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:c3:a1:6b:b2:d5:03:6d:5b:91:33:ae:4a:
                    80:15:29:1c:d0:a2:f1:9b:26:e1:46:29:e5:7d:57:
                    26:0e:48:b9:3f:a1:33:09:f5:19:b7:ec:e1:2f:fc:
                    89:6a:37:58:d8:43:d5:7a:33:23:a3:aa:bd:6e:cc:
                    91:38:24:b0:97:66:ac:b4:5e:4c:e8:46:56:57:18:
                    4b:e0:97:f0:db:7f:dd:fd:af:5f:1a:f4:a5:b1:69:
                    ef:1e:4c:bc:65:c4:85:68:64:5c:36:37:02:39:79:
                    22:76:14:be:e9:09:1d:8c:53:4a:49:b7:1d:6e:c9:
                    a7:3e:1f:99:6f:83:24:33:e7:58:a5:6d:cd:70:23:
                    5e:ce:de:31:2d:a5:83:ba:65:67:2d:01:8c:eb:14:
                    d6:7d:6c:95:cf:75:53:47:c3:43:d6:ed:94:f4:17:
                    ca:ea:10:13:fd:a2:ba:db:f5:47:fc:37:60:b8:52:
                    f8:30:59:56:b0:9a:b0:e6:1b:a0:e7:26:72:70:af:
                    e4:2f:cd:c7:12:90:95:44:dc:b7:bf:7a:f3:70:9f:
                    b7:0c:fb:7e:e4:3a:18:18:62:90:6a:b2:55:3d:a0:
                    a7:d0:a2:95:35:c6:87:3b:ad:aa:75:9a:d9:84:98:
                    a5:f9:d8:32:5a:21:db:2e:25:d8:5e:e0:c3:47:95:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:37:4F:7E:77:3A:3F:DB:ED:5E:1D:10:7D:02:6C:52:C9:6B:B0
            X509v3 Authority Key Identifier:
                keyid:FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:e1:6a:52:eb:d2:d4:dd:5b:5b:85:0d:66:57:b8:94:58:
         72:65:a5:00:42:31:2f:3c:18:0f:52:0e:2b:74:59:d6:c7:19:
         b6:00:c9:0f:87:bc:bd:71:1c:eb:8d:bb:d4:7c:f5:e7:b0:28:
         78:9f:f4:c8:cc:73:c1:49:17:40:f9:25:49:7f:fc:3c:cc:e7:
         62:65:47:87:95:d6:37:6d:1b:56:60:1e:ae:d4:0c:4c:8c:dd:
         4a:2c:a5:29:43:08:e6:ff:92:a7:95:e3:af:0d:ca:37:61:7e:
         df:1c:dd:00:06:16:4f:bd:3a:17:8d:88:cc:be:8e:7a:c2:fc:
         f3:86:cb:49:86:7d:6a:43:39:fd:51:4b:5e:8a:7f:86:30:f6:
         7f:53:d7:5b:52:e2:26:c7:e7:4e:90:f2:78:3e:85:f0:e2:f0:
         20:cc:cb:e3:42:13:11:61:c7:2c:82:cb:2c:7f:e3:3f:d1:d7:
         ca:c6:c1:d2:42:3e:b9:50:bc:a3:a3:62:77:4d:a4:a5:93:18:
         01:2a:ad:7c:d0:3b:64:a6:12:e9:65:70:eb:35:a2:a5:e9:fd:
         33:15:f8:9e:dc:ec:65:68:6f:4e:7c:de:ab:13:ea:a9:38:b6:
         5b:28:a2:a7:70:b2:1f:76:9e:b2:3c:67:dd:e6:46:a4:cf:15:
         0b:24:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org