Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa
File:                     3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa (raw, json)
Hash identifier:          v3XObKspc2NMoUqs3NFjQsVcF+TzkB1DuNZ4ddCmxUE=
Subject key identifier:   88:6B:43:0A:07:5C:43:11:F9:0E:DD:0D:04:F4:21:B1:57:82:F6:5A
Certificate issuer:       /CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
Certificate serial:       0549CADDF2FF09AE06F873C725C56C7C7D2D4EF1
Authority key identifier: FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa
Signing time:             Thu 11 Apr 2024 20:00:42 +0000
ROA not before:           Thu 11 Apr 2024 19:55:42 +0000
ROA not after:            Thu 10 Apr 2025 20:00:42 +0000
asID:                     262492
IP address blocks:        168.121.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:49:ca:dd:f2:ff:09:ae:06:f8:73:c7:25:c5:6c:7c:7d:2d:4e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
        Validity
            Not Before: Apr 11 19:55:42 2024 GMT
            Not After : Apr 10 20:00:42 2025 GMT
        Subject: CN=886B430A075C4311F90EDD0D04F421B15782F65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:79:3a:47:02:d6:98:dc:f8:df:ba:0a:c7:
                    fe:dd:83:c3:e2:fa:5a:7a:24:e8:a8:b3:c4:c9:07:
                    6c:0e:4d:b3:04:6a:5f:c0:1b:c3:92:c0:b5:03:b5:
                    46:f3:e3:26:3c:e6:9a:94:b9:2a:2c:0f:de:59:30:
                    13:8a:3b:ce:92:7f:88:ca:a6:e7:78:9a:b3:3f:88:
                    37:a2:67:bc:5f:e2:54:15:e0:c2:66:af:4e:cb:a8:
                    59:aa:ca:4c:f2:80:50:55:06:3c:fc:43:b2:10:ef:
                    d0:c8:0a:22:2f:ca:ec:e6:1a:ea:8b:4b:e5:d7:4d:
                    5c:dc:9c:3f:1e:fc:ea:bb:70:af:3b:02:f2:9f:1c:
                    70:55:a6:9d:23:d9:6a:ec:29:d2:6d:1f:99:21:27:
                    70:a1:4c:ce:fe:66:ca:78:33:86:cc:ca:59:d3:3e:
                    f6:2a:60:ad:c5:99:e8:44:02:42:45:99:f1:8c:3a:
                    64:16:bb:51:7e:00:49:f7:fa:87:23:f4:b0:e9:e8:
                    c8:e6:f8:3b:4f:f6:e8:56:07:e9:10:9a:92:a1:35:
                    a0:a0:9b:bf:4a:cf:65:92:be:03:38:05:d9:71:6e:
                    f8:f6:d1:c1:6a:67:25:38:3d:0a:ab:d5:9c:63:c3:
                    bf:d2:f3:d7:dd:7e:95:b1:ec:fe:43:98:da:79:b9:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6B:43:0A:07:5C:43:11:F9:0E:DD:0D:04:F4:21:B1:57:82:F6:5A
            X509v3 Authority Key Identifier:
                keyid:FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:da:a9:44:7e:d3:b7:ca:82:4f:c9:cb:fe:c7:05:69:8b:76:
         c4:b6:f4:c2:2d:96:aa:fa:21:d1:60:43:a9:ff:32:5d:0f:d6:
         ba:25:22:d3:e1:e7:07:05:c6:a5:e5:89:53:81:b7:b8:ea:0b:
         07:f0:99:7e:dd:1a:64:66:52:b4:76:ed:b7:96:dd:7b:56:72:
         97:f8:30:57:b2:50:f2:4e:58:8a:7f:f1:04:69:de:42:33:8b:
         40:58:d6:86:6b:74:eb:46:7c:60:aa:b1:1c:b2:3e:0d:db:b0:
         ea:8c:d5:ff:db:c5:df:ed:1a:c1:42:36:34:3c:a9:d5:fe:40:
         e1:05:fe:af:46:f1:3e:d9:7c:7a:db:ad:9e:99:17:1f:e1:0f:
         25:15:5a:02:cc:9d:9e:c7:be:3d:12:69:87:43:cc:9e:cb:52:
         cd:5f:e0:25:0f:00:0f:27:4f:05:f6:95:1c:6a:e8:90:d2:52:
         f2:9c:8d:cd:ee:d5:1b:1f:d7:c4:95:de:f5:93:9e:e7:aa:ed:
         f0:67:76:34:85:2f:33:19:b5:15:1c:39:34:b9:1e:0c:61:f8:
         fc:1f:7f:42:5a:06:91:ff:36:ef:35:f2:98:f2:e2:57:8a:68:
         cd:e0:a8:92:23:14:bf:4c:73:f7:9e:8e:7e:1e:ca:0e:c3:fd:
         e7:94:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org