Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/3136382e302e3130302e302f32322d3332203d3e20323635323332.roa
File:                     3136382e302e3130302e302f32322d3332203d3e20323635323332.roa (raw, json)
Hash identifier:          83KwZlXd8ta1jXwJyDyCqzGz9gHuV0nDe70+tKy7S4o=
Subject key identifier:   C0:66:96:CB:40:1F:E0:A9:F0:A8:10:F4:50:22:EC:9D:AB:3D:9F:B4
Certificate issuer:       /CN=4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88
Certificate serial:       3A025E6EE1FD93FA79FFCA2498159AC5C17A8151
Authority key identifier: 4F:43:CC:FD:B2:B1:3B:CF:78:C7:C5:D0:D8:BC:29:61:B3:AB:4B:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/3136382e302e3130302e302f32322d3332203d3e20323635323332.roa
Signing time:             Thu 21 Mar 2024 22:09:24 +0000
ROA not before:           Thu 21 Mar 2024 22:04:24 +0000
ROA not after:            Thu 20 Mar 2025 22:09:24 +0000
asID:                     265232
IP address blocks:        168.0.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:02:5e:6e:e1:fd:93:fa:79:ff:ca:24:98:15:9a:c5:c1:7a:81:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88
        Validity
            Not Before: Mar 21 22:04:24 2024 GMT
            Not After : Mar 20 22:09:24 2025 GMT
        Subject: CN=C06696CB401FE0A9F0A810F45022EC9DAB3D9FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:06:91:87:7f:db:c5:53:23:0c:c1:ae:d2:
                    a0:b6:44:f2:74:63:f2:4e:5f:21:8f:8f:b5:ea:5e:
                    be:af:67:2d:23:2e:4e:36:fc:97:f0:a9:50:de:9a:
                    d8:6b:5f:2d:6b:48:2f:18:8c:0f:44:d6:13:76:ca:
                    12:7a:85:46:24:25:72:8c:85:4f:de:af:49:d4:d1:
                    68:0a:0d:ee:1c:d2:86:e2:d7:40:9d:07:87:d3:25:
                    1d:29:bf:41:33:f8:3b:39:c9:77:82:92:fe:33:74:
                    7a:b9:62:3a:17:c1:eb:df:90:d8:2d:05:e2:6f:b9:
                    93:c5:16:83:26:32:2d:5b:c6:41:ab:46:4e:34:13:
                    08:ff:d8:3f:dd:62:a4:3e:67:b9:0d:57:8e:a0:28:
                    be:f7:7c:b0:f2:a5:41:65:cb:a4:69:a3:96:88:b1:
                    d4:49:6a:24:c9:e9:91:6e:9f:74:3e:36:84:cd:c7:
                    e4:cb:0e:ee:b4:68:3d:74:26:80:75:ce:73:32:02:
                    d5:05:9a:20:7d:3b:b9:51:d3:ba:f9:ac:b8:c9:67:
                    db:a6:4b:20:0c:3a:24:44:9b:99:c3:4c:5d:86:d5:
                    8d:49:23:93:a6:14:1e:c4:27:55:7d:86:95:e9:44:
                    fb:93:85:82:9d:2b:48:f6:c1:19:8a:ac:27:0d:ab:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:96:CB:40:1F:E0:A9:F0:A8:10:F4:50:22:EC:9D:AB:3D:9F:B4
            X509v3 Authority Key Identifier:
                keyid:4F:43:CC:FD:B2:B1:3B:CF:78:C7:C5:D0:D8:BC:29:61:B3:AB:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F43CCFDB2B13BCF78C7C5D0D8BC2961B3AB4B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/3136382e302e3130302e302f32322d3332203d3e20323635323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:a6:2f:8d:d1:76:ca:5a:10:0d:58:6a:39:c3:fb:cc:5c:
         93:42:de:57:eb:a8:cd:61:ca:ce:88:31:3b:8e:dc:a4:35:a1:
         11:d3:47:b0:cf:3f:01:a3:2c:df:93:5e:42:d9:fc:24:10:da:
         1b:df:04:5f:f0:1f:a9:2b:7b:b8:84:2e:57:26:40:6b:be:27:
         df:86:6e:6d:e0:91:23:82:81:7c:bc:2a:5d:61:99:bf:f6:de:
         2e:dc:e0:2f:92:28:24:5d:a8:79:ce:db:9b:4d:a8:19:d6:18:
         44:61:03:ed:f8:a0:6d:67:d3:b0:b0:e0:08:ed:fa:d6:96:8d:
         b6:8b:35:65:b6:3d:2a:ab:b4:52:f7:1a:90:cf:2f:a8:f0:43:
         46:ad:f5:c0:50:9e:68:53:f1:c1:da:f9:59:37:6d:b2:f8:45:
         d8:4c:70:aa:ff:59:26:5c:5a:d7:2b:26:c2:2e:58:50:a0:7f:
         1b:23:79:e3:d4:57:fb:3f:41:60:5c:7a:b8:ac:db:47:26:4b:
         0f:11:b9:71:74:f6:9a:7e:cf:cf:ed:5b:b9:c3:be:9b:96:41:
         cb:37:eb:ca:35:b4:1d:5d:a5:cf:6b:21:0c:f4:4a:ad:f5:bc:
         c0:05:41:29:ea:a1:5a:39:b3:dc:c7:aa:d0:c9:30:c3:01:44:
         b4:ea:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org