Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa
File:                     3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          hT5GKRiPGLX1Pw0oEBlgPMkqA4ZGr3VUddT24uy6hZ8=
Subject key identifier:   0E:BA:5B:98:BE:8D:DB:B9:6E:86:12:06:D6:AB:BC:13:87:4A:1E:15
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       693B5E7520531F11859B53CAC4D13F1CB7701529
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:48 +0000
ROA not before:           Thu 04 Apr 2024 12:30:48 +0000
ROA not after:            Thu 03 Apr 2025 12:35:48 +0000
asID:                     262485
IP address blocks:        170.238.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3b:5e:75:20:53:1f:11:85:9b:53:ca:c4:d1:3f:1c:b7:70:15:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:48 2024 GMT
            Not After : Apr  3 12:35:48 2025 GMT
        Subject: CN=0EBA5B98BE8DDBB96E861206D6ABBC13874A1E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:8d:5e:80:74:ad:9d:0b:db:34:94:44:a9:
                    86:f7:e3:8b:bd:31:93:0b:86:d0:2a:ca:b8:bb:7d:
                    e5:e3:2d:e4:33:49:66:a1:df:5f:70:93:6d:b0:aa:
                    a2:08:2e:20:9b:26:45:21:d0:62:7d:95:0e:93:d4:
                    56:7f:45:53:3f:ec:e3:9e:bf:d1:52:13:89:e0:8d:
                    c6:d5:d2:4d:0e:c0:19:1f:31:7e:3f:a9:83:eb:44:
                    b0:62:63:52:e7:0b:9d:81:70:a9:ea:02:78:28:65:
                    93:a6:99:b5:ed:c1:29:1f:4d:7a:5e:d4:54:57:b9:
                    f2:44:29:20:29:d7:40:70:c9:af:5e:78:ff:48:94:
                    f8:ee:f3:f9:e1:a4:35:fc:2a:92:8c:e2:10:66:5e:
                    5a:44:cc:e3:f5:85:26:0f:de:b2:c2:88:df:40:06:
                    55:0f:92:2a:45:13:f4:e8:1b:62:9d:0f:6e:f2:24:
                    1d:94:01:84:8d:bb:97:4d:3f:62:16:14:8f:e4:e1:
                    e6:b0:e9:ac:76:45:62:0f:e7:0d:4f:9a:c7:10:d6:
                    ab:c9:64:2d:c7:5b:5a:28:ff:8a:e5:55:fe:12:2d:
                    89:92:7b:e4:69:77:a9:53:69:c1:58:c1:60:f0:0e:
                    ea:51:a1:aa:22:67:7e:cb:09:27:8c:3f:65:05:d5:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:5B:98:BE:8D:DB:B9:6E:86:12:06:D6:AB:BC:13:87:4A:1E:15
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:bf:a3:59:e1:5c:27:3d:8f:34:43:d8:19:31:97:93:78:
         d8:6a:fb:40:0d:f6:5c:38:46:ce:6a:bf:ff:93:fa:ae:ca:f2:
         03:80:1d:80:c0:90:98:11:d9:1d:df:76:12:f6:75:1e:0c:ec:
         fd:a9:9d:bd:05:32:af:46:1a:18:98:34:fe:71:c3:61:70:22:
         8f:8f:c1:6b:d1:1a:cb:2f:69:0e:8e:89:22:76:6f:23:13:42:
         06:e8:8a:ed:98:67:98:88:6f:05:dd:38:35:86:8c:37:7f:4f:
         c6:38:35:95:ce:85:46:38:bf:37:fe:ad:92:2e:ed:57:03:90:
         60:fc:6e:0a:09:d2:a5:99:16:99:43:c4:19:92:42:15:1d:7a:
         df:0a:2b:1a:b4:b3:96:eb:c9:32:9b:37:68:bc:61:df:c2:e6:
         58:3a:73:3b:1a:99:17:f5:f2:7f:60:c3:0d:06:c1:5f:20:9d:
         85:fe:1f:3e:5c:ae:68:c8:38:a3:9d:28:bd:38:f8:75:53:9c:
         92:3b:70:eb:98:79:10:a7:e7:c6:88:3f:42:07:65:55:47:64:
         90:c7:ae:bb:1d:fd:0e:e5:72:e4:b0:fd:48:54:4c:a3:5b:9d:
         6d:a4:02:a7:cd:ab:e1:e3:90:73:9d:ea:69:ed:1e:8d:d3:df:
         58:73:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org