Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa
File:                     3136382e3139372e342e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          aS/BwTxJ+K+preJvdKx3cO5DBirTxE6pY3ZXEmmbrAY=
Subject key identifier:   FB:21:E4:BE:43:57:27:20:6A:24:CA:D9:60:50:0D:A7:86:91:04:6F
Certificate issuer:       /CN=E0F50BC836788B2DEEAD1BAFAB381129AAEFC524
Certificate serial:       1FD2F097ACDAD916E371CF8420A77827FF8A9907
Authority key identifier: E0:F5:0B:C8:36:78:8B:2D:EE:AD:1B:AF:AB:38:11:29:AA:EF:C5:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa
Signing time:             Mon 18 Dec 2023 12:33:03 +0000
ROA not before:           Mon 18 Dec 2023 12:28:03 +0000
ROA not after:            Mon 16 Dec 2024 12:33:03 +0000
asID:                     262550
IP address blocks:        168.197.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d2:f0:97:ac:da:d9:16:e3:71:cf:84:20:a7:78:27:ff:8a:99:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F50BC836788B2DEEAD1BAFAB381129AAEFC524
        Validity
            Not Before: Dec 18 12:28:03 2023 GMT
            Not After : Dec 16 12:33:03 2024 GMT
        Subject: CN=FB21E4BE435727206A24CAD960500DA78691046F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:42:45:f4:ea:c1:3b:de:72:5e:5a:27:f7:
                    4e:59:ce:68:a8:56:18:87:08:72:86:f8:23:2e:b2:
                    ae:0d:41:07:f7:f2:7e:42:59:29:e8:44:90:02:8f:
                    d1:fb:88:60:a7:72:26:a1:b8:51:df:9f:5e:5e:74:
                    87:b2:74:d3:6b:b5:21:ab:4a:8f:31:3f:0f:25:b1:
                    3d:0b:52:f1:93:8a:ef:cf:12:ee:20:9b:a5:7a:ca:
                    a0:aa:10:fc:7b:38:2d:91:48:0c:dd:bd:ba:11:5c:
                    1c:45:8b:4d:d8:b0:5f:e8:55:2e:2b:78:2b:46:f2:
                    1c:02:96:95:a6:8d:38:f2:b9:ae:ed:22:d9:d2:ba:
                    b9:e1:92:d4:52:cc:9f:7c:7b:bb:27:60:ae:9d:3a:
                    d4:2b:79:db:16:89:11:c7:ec:00:af:30:43:77:a5:
                    6f:f9:7f:73:b0:38:00:4d:27:56:c2:28:e9:04:5d:
                    db:81:73:3e:ca:c1:91:05:6c:57:51:71:24:6c:ed:
                    9e:90:b4:6e:d7:11:46:89:28:ba:4b:eb:64:23:3b:
                    ed:71:db:c6:0a:e8:45:4a:23:9e:e4:5d:97:bc:bc:
                    f3:88:89:5c:b1:a2:41:b4:27:3c:32:f0:bc:cf:49:
                    9d:92:32:55:0c:e9:35:6e:24:f4:4e:8e:3f:7d:6f:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:E4:BE:43:57:27:20:6A:24:CA:D9:60:50:0D:A7:86:91:04:6F
            X509v3 Authority Key Identifier:
                keyid:E0:F5:0B:C8:36:78:8B:2D:EE:AD:1B:AF:AB:38:11:29:AA:EF:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:63:d5:88:25:4b:28:c7:59:05:59:81:b6:a3:e3:f8:22:c8:
         41:a5:9a:bc:97:a0:89:68:a7:8d:65:9f:d5:19:07:f6:1e:ee:
         06:4f:eb:be:e3:a0:e9:0b:68:9e:2f:a1:a2:a6:12:f9:86:96:
         de:4b:a0:a9:49:dc:a7:ad:0b:f9:6b:34:84:53:d3:ba:87:6c:
         69:94:1f:90:28:c7:82:c4:68:53:98:3a:42:ff:6b:c6:5f:3c:
         3a:bf:94:52:ea:ab:ac:02:8e:65:6e:c7:36:09:9a:74:10:61:
         42:a2:5a:88:d0:a8:e6:6b:6c:86:57:6f:18:b5:f5:f9:7f:e6:
         96:32:b7:9a:41:5b:ef:3b:f8:23:8e:03:e0:44:07:d3:ac:d6:
         84:6d:ec:03:aa:7d:d0:6f:f0:b0:9b:4d:e6:a7:eb:20:5b:5e:
         2f:c4:d5:bc:ca:f2:01:c6:a9:ca:05:73:5c:88:b3:9e:b0:4c:
         00:80:6c:8b:33:30:71:fb:27:2f:9c:37:a0:8b:bb:2d:a6:31:
         31:fc:51:25:57:a7:93:61:2b:29:8f:1c:54:d1:0b:ca:4e:ac:
         8d:6e:0b:70:1b:1b:9b:33:e5:dd:5f:f6:79:e3:12:2e:1c:68:
         6b:84:e0:33:5d:ef:88:87:61:53:4e:7c:db:30:dd:65:1c:c3:
         8b:1b:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org