Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32332d3233203d3e20323632343835.roa
File:                     3139312e372e31362e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          LtVppPQVNCOAaUK0cvcGEnfe5QBrb6TWrgYz4OrqifI=
Subject key identifier:   B3:08:2E:2F:D7:1E:FC:72:3B:39:8A:0B:2B:5C:DB:82:40:F9:B5:4B
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       1A075CD54C854483334FB861F463304F65FAB1E4
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32332d3233203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:48 +0000
ROA not before:           Thu 04 Apr 2024 12:30:48 +0000
ROA not after:            Thu 03 Apr 2025 12:35:48 +0000
asID:                     262485
IP address blocks:        191.7.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:07:5c:d5:4c:85:44:83:33:4f:b8:61:f4:63:30:4f:65:fa:b1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:48 2024 GMT
            Not After : Apr  3 12:35:48 2025 GMT
        Subject: CN=B3082E2FD71EFC723B398A0B2B5CDB8240F9B54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:1d:26:63:e4:e3:71:b8:dd:c3:3f:8c:71:
                    30:cd:97:ff:44:bc:f2:ec:ef:b7:4f:dd:be:1c:de:
                    88:ca:f5:ce:0e:f2:bf:05:bf:20:9e:5d:3a:a4:67:
                    fb:54:2a:2b:93:52:92:58:ba:c5:5c:9e:10:bf:16:
                    d3:82:d9:88:9e:db:bd:60:8d:bc:ce:41:b4:ab:a0:
                    7c:1f:6d:28:74:53:f5:b9:f2:08:67:99:a6:5c:3c:
                    ca:df:af:61:56:4a:4c:db:67:ed:da:f2:1d:26:64:
                    4d:c2:fd:e4:ce:d9:ea:c5:ce:af:f3:e6:e5:36:55:
                    70:44:da:33:95:fd:7f:7d:bc:60:54:ea:f4:ae:13:
                    d5:a6:ed:1d:1b:fa:b4:01:d2:d3:ec:62:74:5b:b1:
                    23:5d:b8:c9:01:28:50:79:b5:6a:90:ba:35:a2:a7:
                    81:d7:6e:ff:e3:83:76:3e:fa:f2:0a:c9:6c:72:ae:
                    b9:a3:4d:b7:4a:12:29:69:e5:6f:23:c4:13:d2:27:
                    35:6d:0d:95:32:b7:21:45:ac:03:4f:be:c7:4f:87:
                    42:43:cd:bd:d2:09:a6:88:d6:7b:9b:93:cc:46:78:
                    e8:31:4c:17:64:70:cb:b9:49:ff:c7:0c:0e:fb:35:
                    38:1d:f8:7b:da:8d:ca:5a:6e:b0:7c:c7:90:51:4e:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:08:2E:2F:D7:1E:FC:72:3B:39:8A:0B:2B:5C:DB:82:40:F9:B5:4B
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:fa:79:18:41:ea:ee:7a:fb:fb:be:76:71:19:bd:4f:cb:
         ad:7b:a9:d0:a9:c1:d7:d0:da:50:a8:93:29:a7:2f:ed:47:e4:
         62:6c:86:33:12:af:e4:c1:53:f2:e5:71:14:1b:ae:d0:7b:4b:
         49:dd:76:bb:2c:75:49:35:73:4d:55:a5:08:7a:af:2b:66:3d:
         9e:c1:e5:08:7f:86:12:78:0a:03:62:58:ed:a4:42:b3:a4:89:
         20:54:4d:1d:9f:89:83:00:db:c9:5d:0b:6e:00:01:02:5a:f2:
         67:07:07:86:e4:3a:fc:ca:7b:44:f2:bf:05:a9:b9:f6:32:46:
         08:8f:c6:77:1d:66:4f:a6:e0:33:a6:c3:95:a5:b3:da:1a:04:
         a2:c3:76:a3:fe:e7:5a:6a:31:50:e9:12:4e:dc:dc:0f:58:ec:
         03:44:53:4a:2c:d0:25:75:e6:94:43:7b:ce:af:7b:17:ec:20:
         d6:91:bb:23:73:1f:bb:34:43:3e:2e:96:bd:c3:1b:cf:7a:ef:
         eb:d0:b7:0b:4e:61:35:4c:7a:28:2b:b9:6b:e6:a7:94:43:1e:
         89:b4:29:39:9b:c4:cb:63:a1:06:44:a6:f1:99:32:da:fa:25:
         4d:b9:87:ca:ad:09:0d:99:a9:4b:87:a4:58:9d:9e:f1:03:51:
         e1:65:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org