Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3234203d3e20323635323831.roa
File:                     3136382e39302e3139322e302f32322d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          510rKYYRycc2tRzjZPFF3uWlxLW1o44twlyA1OQRz0U=
Subject key identifier:   E0:11:F4:A6:B8:51:C7:C3:8F:D6:5C:A7:F1:8E:88:17:F5:7B:E3:E9
Certificate issuer:       /CN=FDDF05E443295DD5E2D256144A34564E7AFF3EDE
Certificate serial:       457AF98A604A142E8E8D863777E2D3A07045A971
Authority key identifier: FD:DF:05:E4:43:29:5D:D5:E2:D2:56:14:4A:34:56:4E:7A:FF:3E:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3234203d3e20323635323831.roa
Signing time:             Fri 29 Sep 2023 12:45:40 +0000
ROA not before:           Fri 29 Sep 2023 12:40:40 +0000
ROA not after:            Fri 27 Sep 2024 12:45:40 +0000
asID:                     265281
IP address blocks:        168.90.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7a:f9:8a:60:4a:14:2e:8e:8d:86:37:77:e2:d3:a0:70:45:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDDF05E443295DD5E2D256144A34564E7AFF3EDE
        Validity
            Not Before: Sep 29 12:40:40 2023 GMT
            Not After : Sep 27 12:45:40 2024 GMT
        Subject: CN=E011F4A6B851C7C38FD65CA7F18E8817F57BE3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:19:0b:5c:99:e1:cb:8d:a3:03:f4:67:f7:
                    bb:ac:e7:68:98:f1:e9:85:0c:c6:cc:f5:02:7b:b6:
                    fc:cd:58:1d:f7:37:95:50:f8:35:c0:d9:d0:2a:8c:
                    5f:49:2e:a8:d8:76:e0:b7:79:59:63:50:76:c2:64:
                    41:04:61:61:86:d7:91:6f:7e:d3:09:8d:bf:b1:79:
                    ef:fd:56:31:bf:44:f0:8d:35:ed:2c:93:be:c1:c6:
                    e4:13:76:c3:84:1c:c8:a4:89:73:78:2e:76:68:11:
                    58:b9:fe:3c:34:c8:54:0f:66:0f:d7:95:54:b0:7a:
                    d3:ab:c5:32:ba:ca:44:67:69:11:41:50:1a:e7:f1:
                    ac:7b:bf:f9:cf:e2:f4:b2:22:d1:d6:67:b2:e0:bc:
                    98:2f:64:c3:01:83:67:f7:5e:21:85:f4:4c:9f:1c:
                    bb:ab:69:c4:7f:ea:a5:7c:2f:d2:b1:ed:28:5c:a2:
                    c8:e1:b0:d8:3f:61:27:d7:a8:2c:0f:73:20:c1:79:
                    53:18:3a:3e:d2:06:2c:30:99:8f:66:fd:29:4b:ac:
                    ee:9b:98:b8:40:7c:23:80:e7:12:57:81:0b:33:8b:
                    06:4d:21:71:ff:0d:88:2a:9f:fa:a0:b9:98:1a:65:
                    34:12:4f:71:48:3c:78:89:e1:e3:b8:8a:ed:c3:f0:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:11:F4:A6:B8:51:C7:C3:8F:D6:5C:A7:F1:8E:88:17:F5:7B:E3:E9
            X509v3 Authority Key Identifier:
                keyid:FD:DF:05:E4:43:29:5D:D5:E2:D2:56:14:4A:34:56:4E:7A:FF:3E:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:b7:e7:d9:7c:b9:07:4f:09:ab:22:3b:d5:90:71:27:ad:98:
         61:e0:4a:b7:6f:18:6a:b8:a4:0e:36:92:81:fb:34:09:cf:07:
         24:ea:c3:a8:7e:b6:da:19:40:24:46:60:aa:91:8f:97:62:75:
         41:61:f8:e9:bd:5b:40:92:74:d5:f3:ea:67:31:5a:d8:4d:ac:
         78:22:ce:6d:29:d8:85:5b:ae:a3:1d:ff:31:14:f4:23:c1:75:
         71:b6:cd:d8:52:ba:69:e6:52:a6:d6:85:30:c2:c8:b8:f4:44:
         d2:fe:95:54:90:f6:41:cd:b3:8a:20:9f:13:02:2e:16:1a:66:
         c0:1f:2a:1f:be:6a:77:80:94:73:97:60:70:64:d1:85:72:6f:
         80:33:6f:e2:10:ed:48:f7:7c:a1:85:37:71:50:e7:ad:5a:f0:
         6c:0b:8f:34:32:d0:78:5a:ff:82:6c:2b:85:7b:c2:74:b0:8e:
         19:dd:b6:d5:5c:3c:b5:49:d8:18:ae:11:05:4d:5e:f2:e6:3d:
         19:a2:6b:1f:8a:90:0a:ca:da:51:1e:cc:1e:d8:b2:ac:ee:11:
         ef:df:53:a6:f1:20:ec:26:19:ae:0c:47:6a:9a:98:bb:9f:da:
         72:2c:ee:7c:5b:d1:75:e1:16:6c:e9:0a:62:fb:1f:c4:7a:2c:
         22:85:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org