Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3233203d3e20323635323234.roa
File:                     3136372e3235302e3231362e302f32322d3233203d3e20323635323234.roa (raw, json)
Hash identifier:          g52BPwCTNeCza+hQAA9Lwjyk2lbmfG+IZcaPeFc3TjY=
Subject key identifier:   E7:16:E5:37:F3:54:2E:FA:06:C8:B2:90:C0:A6:91:B4:9C:78:12:96
Certificate issuer:       /CN=FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC
Certificate serial:       7BB13C4CAE5F05BC0A91277432C3F637C4B00008
Authority key identifier: FC:AF:90:04:53:3E:19:B4:86:B8:FF:F3:F7:4B:2F:01:D7:DD:FB:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3233203d3e20323635323234.roa
Signing time:             Thu 27 Jul 2023 18:25:11 +0000
ROA not before:           Thu 27 Jul 2023 18:20:11 +0000
ROA not after:            Thu 25 Jul 2024 18:25:11 +0000
asID:                     265224
IP address blocks:        167.250.216.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b1:3c:4c:ae:5f:05:bc:0a:91:27:74:32:c3:f6:37:c4:b0:00:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC
        Validity
            Not Before: Jul 27 18:20:11 2023 GMT
            Not After : Jul 25 18:25:11 2024 GMT
        Subject: CN=E716E537F3542EFA06C8B290C0A691B49C781296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:a7:b3:9c:28:fd:04:de:38:87:66:e6:f9:
                    7e:90:39:1e:b7:c0:7c:30:6b:54:96:36:cb:68:f2:
                    81:54:00:d2:db:00:31:c7:72:3d:13:2e:79:f6:78:
                    72:fe:29:c0:e1:7e:02:a8:84:0a:7a:9c:32:59:8b:
                    d4:0e:6c:ea:af:2e:b6:02:ab:35:30:d1:3a:87:f3:
                    27:23:b1:23:18:d9:fb:8e:ad:0c:18:7a:8e:3d:01:
                    8c:15:0b:ca:2f:71:35:f4:c1:92:e7:3a:c1:1f:b0:
                    73:16:91:f8:3d:ce:50:cf:11:db:6c:62:6e:f2:22:
                    5d:88:8c:15:94:c8:86:a9:7e:d7:8b:0d:08:02:60:
                    4f:e2:5d:55:b1:b7:61:1b:4b:ac:cd:42:a3:0c:02:
                    a8:92:a5:be:89:fe:4e:9f:72:4a:e8:21:ec:de:b9:
                    9a:50:e1:8f:9c:62:fd:cc:80:82:f9:bd:a2:73:b6:
                    66:6f:a8:de:f7:6a:e5:14:ab:58:2e:29:e4:7a:6f:
                    b2:9f:ef:9f:48:91:df:1f:30:13:61:87:a7:c2:e6:
                    c4:47:e6:f9:a5:de:48:99:fa:12:b6:cc:66:4b:f5:
                    06:a8:6d:19:b8:78:d8:78:91:52:96:e7:67:97:2b:
                    bb:39:35:f4:ec:55:56:be:3f:07:1e:29:cb:a4:5f:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:16:E5:37:F3:54:2E:FA:06:C8:B2:90:C0:A6:91:B4:9C:78:12:96
            X509v3 Authority Key Identifier:
                keyid:FC:AF:90:04:53:3E:19:B4:86:B8:FF:F3:F7:4B:2F:01:D7:DD:FB:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3233203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:83:e4:26:61:da:3b:85:25:2d:61:e2:ce:45:25:d3:c7:
         ed:4a:44:ac:13:a9:b3:80:40:fb:f8:92:a1:f8:ab:cc:2a:a4:
         eb:25:48:dd:4e:75:c8:17:f4:e6:96:1e:80:fe:db:74:48:ac:
         20:99:e3:47:9a:70:30:86:d8:58:93:c3:92:9f:f7:76:8a:a2:
         fa:92:b1:f7:3e:66:35:ea:9b:1d:27:15:72:63:24:14:bc:7f:
         0a:f0:4b:a9:b2:37:e6:18:3a:45:81:30:07:15:af:6a:5a:03:
         9a:16:33:fc:36:08:66:26:c3:51:8a:a7:f0:a8:a3:7d:1f:95:
         55:7f:7e:e6:a8:34:84:de:bd:bf:af:ae:83:db:51:89:04:12:
         dd:24:60:ce:7c:cb:4f:8f:ad:1f:73:c4:ea:f5:97:cb:b8:ef:
         e6:1b:45:09:d2:25:8d:d8:b5:44:83:7f:6e:41:b7:1f:1b:ad:
         dd:dc:ae:6d:ad:7a:d2:b4:3c:7d:e7:ea:9a:98:0a:47:fa:1e:
         8e:3b:4c:d7:ee:21:90:07:c3:62:30:08:8a:cb:8e:3c:3b:76:
         9f:78:ea:ff:20:b8:fc:a6:c0:c6:29:71:40:74:93:dd:ee:b6:
         3e:05:d8:0b:8e:d6:b8:8c:62:30:8e:cb:f2:a4:b2:1b:c8:16:
         11:73:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org