Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32322d3232203d3e20323632343835.roa
File:                     3139312e372e31362e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier:          /HtbJVGiGgAtYhY1EvxwkPTMXrjAxP/HbqoyXofueVk=
Subject key identifier:   18:06:2D:1E:67:66:80:33:31:56:D9:47:FA:29:DD:0F:20:18:59:CA
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       4EEC4435C1A7C7259AE13CAB558B7603A22B90DF
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32322d3232203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:47 +0000
ROA not before:           Thu 04 Apr 2024 12:30:47 +0000
ROA not after:            Thu 03 Apr 2025 12:35:47 +0000
asID:                     262485
IP address blocks:        191.7.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ec:44:35:c1:a7:c7:25:9a:e1:3c:ab:55:8b:76:03:a2:2b:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:47 2024 GMT
            Not After : Apr  3 12:35:47 2025 GMT
        Subject: CN=18062D1E676680333156D947FA29DD0F201859CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:9d:45:33:3e:ea:06:b6:59:bb:3a:12:69:
                    b8:92:33:c7:5f:d5:bd:fe:cd:ba:9c:cc:4f:46:01:
                    1f:b1:f6:a0:3f:28:77:29:73:c1:c6:fe:f2:c2:d3:
                    c8:a5:b3:e9:d8:d4:a8:bc:0f:35:92:b3:44:a8:31:
                    31:7d:c7:40:c6:b1:2f:64:86:e3:09:2f:54:71:5e:
                    e7:db:39:95:23:eb:db:56:aa:7c:cc:8c:84:ef:98:
                    cb:23:a2:c3:aa:74:dc:57:b4:9f:29:aa:93:73:dc:
                    35:52:e2:51:ce:b6:69:7e:c1:21:1a:79:cb:69:19:
                    af:12:fc:ba:7c:19:63:c4:3f:5a:39:63:11:1b:7b:
                    9a:b5:7a:13:78:52:42:0c:11:d3:51:75:eb:aa:8c:
                    c4:dd:1e:1d:c7:34:fd:3e:a9:7c:0a:dc:1a:7b:30:
                    e6:2d:a7:37:d4:3f:e6:2e:9a:88:0d:8e:54:50:50:
                    89:b9:a6:1b:35:9a:2d:1d:9b:21:0f:5f:4c:0a:d9:
                    fb:75:a9:c5:e1:a0:88:5c:b9:d3:d6:3a:30:3f:51:
                    c0:c4:a6:19:cf:ed:fd:79:42:15:76:92:4f:ee:dd:
                    56:57:21:b9:8f:6b:56:4d:2f:9d:63:1f:37:22:24:
                    9e:4e:c4:41:e6:42:72:33:c0:a6:e1:5e:68:d2:b7:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:06:2D:1E:67:66:80:33:31:56:D9:47:FA:29:DD:0F:20:18:59:CA
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32322d3232203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:be:d3:9b:ea:dc:31:70:2b:08:66:6d:89:2f:ec:0c:37:90:
         65:79:ef:be:e6:67:50:c4:6b:1f:b3:02:87:85:c9:c4:fb:94:
         75:02:01:89:00:42:e6:ec:2a:df:cd:2d:70:15:4e:df:a5:7c:
         fc:93:61:db:dd:ef:d1:4c:33:2a:77:e0:06:b1:fa:a0:b0:71:
         83:6d:1b:ad:fd:38:a5:bb:b7:a5:f6:ae:40:d8:bd:f5:00:33:
         5c:e4:0d:93:e2:9d:33:53:d8:66:a6:5d:fc:e5:57:c1:ae:d1:
         48:0a:9c:8e:94:5b:ee:e9:01:f1:94:05:4b:10:c9:2a:c8:9b:
         96:6f:a6:a7:7e:1a:80:e3:08:6c:9a:49:88:7b:88:89:88:37:
         3f:91:ee:c5:a4:61:dd:33:b3:b6:ab:e9:09:31:14:e3:d5:c6:
         31:f3:a8:d3:b1:b8:79:c6:0f:5f:2c:c4:dd:78:cc:b9:a8:ea:
         25:6b:ae:ce:0b:d4:df:6d:fa:fd:8e:ec:68:cb:fd:41:a4:aa:
         d5:9b:e4:3c:b1:6b:43:16:29:13:22:94:b3:17:3d:42:10:5c:
         71:b0:e9:84:79:32:1d:61:c8:95:5e:fe:4d:b1:19:45:57:0b:
         88:36:33:0b:75:31:3d:a3:cb:cb:dc:92:bc:fb:7e:d6:90:31:
         86:bc:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org