Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa
File:                     3138372e3130392e31362e302f32302d3232203d3e203533313132.roa (raw, json)
Hash identifier:          Mqo8hiqoXDBgGioizGaF5oi5YLfGY2Iup0HLGCm0L08=
Subject key identifier:   E3:A8:76:6E:C2:7D:48:79:A7:DA:D2:35:73:F1:B2:0D:4E:4D:6E:AC
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       0DD58B43C642F752D13912FAE035C7C3B62ADD90
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        187.109.16.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:8b:43:c6:42:f7:52:d1:39:12:fa:e0:35:c7:c3:b6:2a:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=E3A8766EC27D4879A7DAD23573F1B20D4E4D6EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:60:46:82:e1:af:2e:52:ec:20:6f:10:6f:
                    51:3e:a6:69:8f:94:ef:1e:d9:80:02:16:d2:72:e5:
                    26:35:33:4c:b0:24:5d:b5:52:74:ef:77:ff:fc:20:
                    70:2e:2f:56:26:9e:a9:98:51:97:52:24:ad:ce:fe:
                    c0:55:41:84:65:c0:a5:55:43:0e:17:15:68:98:59:
                    7f:e8:cc:ef:c0:b1:dd:0a:3f:48:75:cb:c1:15:9d:
                    59:7e:b9:70:93:c6:4f:70:d8:5c:ef:16:5b:25:54:
                    c5:c5:44:27:cb:5a:33:dc:a5:7a:1f:c0:73:24:fe:
                    eb:82:86:88:9b:4b:f5:36:ef:86:8e:f9:82:4e:49:
                    f3:74:56:4d:f4:2a:56:fc:bf:72:e9:57:d1:d3:80:
                    4f:f7:f2:8c:88:a0:c8:ef:0f:ad:7b:17:e4:2e:6a:
                    38:42:03:8e:19:29:8e:4a:5c:dc:79:bf:f3:ad:76:
                    ed:58:6d:5e:1d:0b:40:01:8b:1b:75:9b:dd:27:43:
                    be:41:49:e2:84:6a:54:76:88:28:15:1a:69:34:47:
                    65:8b:68:71:38:25:e8:f6:a3:fc:60:82:f5:2f:ca:
                    5a:ae:9c:af:45:26:a5:79:cd:24:51:f8:b3:fc:2a:
                    7f:7b:3c:82:c0:98:4d:a8:44:07:0b:d1:b4:16:20:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:76:6E:C2:7D:48:79:A7:DA:D2:35:73:F1:B2:0D:4E:4D:6E:AC
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:c3:30:94:df:b5:7e:02:f2:0f:77:57:72:f9:01:b8:1f:
         a2:2d:63:b9:03:84:d9:78:f2:0a:cc:32:44:05:46:0b:36:64:
         23:b3:fe:80:6b:aa:17:34:44:30:22:08:66:18:01:6f:49:76:
         f5:d6:75:3c:e8:af:57:0d:20:6d:4c:95:22:c8:2f:26:5f:0e:
         5d:9d:bf:33:18:73:81:ec:bb:16:ba:44:d9:09:1b:f8:0e:e1:
         82:52:d4:ae:b3:5b:ef:dc:79:3a:2d:25:b4:a1:0f:5a:c5:40:
         bb:ab:7b:78:cf:75:e3:e0:d1:0b:55:19:2f:8a:07:78:c6:f1:
         8d:70:88:1e:31:72:04:81:07:d5:54:df:97:f0:98:ae:95:09:
         63:d0:9c:7a:fc:c0:e2:33:07:1b:9b:25:88:d1:4b:52:b8:f5:
         b4:4c:d4:e8:bd:a1:4d:e5:97:21:ca:dd:f0:a6:f0:9e:9d:29:
         ae:e7:ef:86:f4:47:e0:d1:d3:27:d3:b3:34:86:5f:da:da:70:
         ab:c1:49:de:45:c0:dc:6a:82:b4:2e:ef:78:cf:53:4a:b5:7a:
         67:b0:69:6e:71:e1:a5:1c:b7:19:06:19:6d:7b:ef:2e:bb:f3:
         2b:45:c7:56:bf:19:5f:0d:76:9e:31:29:52:30:89:aa:00:3c:
         2a:1f:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org