Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          Rqh9RBbzsp6TBEw9XfDPuHsz9KumHAllPkzZh+Od/4A=
Subject key identifier:   81:C9:5B:17:5B:BC:0B:BC:1A:3D:01:6B:A4:77:11:A4:CF:73:B4:16
Certificate issuer:       /CN=F890C5F6184833DCFA85CC387B0DE43D6BA21367
Certificate serial:       160E8DB8044C5CCFAFA782ACA3CFD39B535010F5
Authority key identifier: F8:90:C5:F6:18:48:33:DC:FA:85:CC:38:7B:0D:E4:3D:6B:A2:13:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F890C5F6184833DCFA85CC387B0DE43D6BA21367.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa
Signing time:             Tue 28 May 2024 13:47:11 +0000
ROA not before:           Tue 28 May 2024 13:42:11 +0000
ROA not after:            Tue 27 May 2025 13:47:11 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0e:8d:b8:04:4c:5c:cf:af:a7:82:ac:a3:cf:d3:9b:53:50:10:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F890C5F6184833DCFA85CC387B0DE43D6BA21367
        Validity
            Not Before: May 28 13:42:11 2024 GMT
            Not After : May 27 13:47:11 2025 GMT
        Subject: CN=81C95B175BBC0BBC1A3D016BA47711A4CF73B416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:81:9c:13:73:8d:0c:b8:21:85:5f:b6:40:
                    0d:f0:24:2a:1c:1a:ee:c1:19:88:b1:39:32:31:bb:
                    d8:8d:c4:92:84:6a:68:08:ce:6b:2b:8a:0f:3b:0e:
                    6d:05:4c:b3:cf:55:3d:5c:c1:92:37:4c:8f:b8:01:
                    6e:5f:8f:e6:49:ad:7b:6a:33:a3:13:b7:f8:c5:1f:
                    fc:40:d9:21:27:c1:55:3d:9d:2c:fe:c1:e3:20:b8:
                    0f:4c:43:f1:df:ca:bf:80:38:25:bd:d2:1a:b0:21:
                    d1:e9:83:41:d2:68:44:96:de:c5:9f:77:5a:43:1f:
                    2f:dc:6d:ec:c2:f4:fc:dc:19:29:6c:c3:e5:c4:f6:
                    e0:f5:13:3a:18:f0:9c:fd:5f:f5:1b:aa:3a:d3:84:
                    28:86:f8:8f:d7:1d:7c:d2:7a:7a:ee:90:b6:17:8c:
                    c1:5c:60:84:60:44:a8:ad:ea:58:80:1c:38:31:50:
                    94:cd:26:2e:f0:a8:76:e4:b5:3f:05:d3:07:12:43:
                    bf:d0:5a:b0:72:40:07:f8:53:5a:07:dc:04:16:2f:
                    01:64:f2:19:da:19:91:c8:50:c9:4b:c2:3e:fc:40:
                    cb:ec:0e:8f:57:89:66:b7:de:69:82:92:d5:b9:b1:
                    8f:79:96:d8:9c:fa:4a:bd:fa:2c:9d:ba:e2:d0:9d:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:5B:17:5B:BC:0B:BC:1A:3D:01:6B:A4:77:11:A4:CF:73:B4:16
            X509v3 Authority Key Identifier:
                keyid:F8:90:C5:F6:18:48:33:DC:FA:85:CC:38:7B:0D:E4:3D:6B:A2:13:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/F890C5F6184833DCFA85CC387B0DE43D6BA21367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F890C5F6184833DCFA85CC387B0DE43D6BA21367.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:c2:f5:89:0e:24:18:40:17:36:5a:cd:1e:7b:8e:20:b4:
         23:8d:43:5f:0e:1d:65:65:90:de:63:c9:40:e3:84:4a:f8:c0:
         da:65:87:2b:b8:72:60:cd:2a:b9:fb:82:b2:d8:ad:4e:d3:da:
         a0:b4:87:5d:e6:13:9d:b6:a1:59:ea:2b:6e:e6:25:69:61:1b:
         12:96:b7:3c:8c:4f:d8:74:49:ef:a4:32:2e:da:ae:40:1c:91:
         b4:3c:f9:10:a8:c3:fb:b8:4b:5d:9f:a6:ae:c9:41:6e:70:b5:
         fd:00:31:f6:cc:09:7d:a3:bf:0e:db:f7:ff:b0:63:2f:1e:35:
         13:be:52:a4:bd:03:b7:9a:03:a9:3a:84:2f:9e:84:9d:58:80:
         bf:ed:5c:2d:58:eb:d9:30:3e:2a:64:51:50:8c:1b:23:d5:b2:
         13:a7:5d:0c:e8:4e:5c:17:29:8e:cb:b2:51:7c:88:ce:db:5e:
         0c:21:5d:cf:ee:73:32:d4:85:6d:b8:5f:25:55:a8:22:05:52:
         ff:1c:3b:46:f7:62:cf:d3:40:fe:1d:57:36:2c:c5:2b:16:45:
         7a:ab:b3:d6:70:fd:42:eb:55:76:47:13:00:53:a9:1e:3b:76:
         d8:18:0d:5b:f7:52:8a:77:9b:be:14:ec:13:24:e5:03:55:7f:
         61:50:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 05:44:50 2024 by rpki-client on console-fra.rpki-client.org