Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32332d3233203d3e20323635343837.roa
File:                     3136382e3139372e3134342e302f32332d3233203d3e20323635343837.roa (raw, json)
Hash identifier:          XccmsRsuX5NF9jbdN0wm6MA6JMylV3SY0xwP435DT6A=
Subject key identifier:   9A:EA:D1:33:E0:8D:99:D2:89:82:DB:A7:A6:DB:48:54:14:9D:25:EC
Certificate issuer:       /CN=FBBB999805E32505BB469C0FE86BBE3FF9063230
Certificate serial:       0A5DE50EFE85A88389CF793ED490BB5C9987B5AF
Authority key identifier: FB:BB:99:98:05:E3:25:05:BB:46:9C:0F:E8:6B:BE:3F:F9:06:32:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32332d3233203d3e20323635343837.roa
Signing time:             Mon 27 Dec 2021 20:36:05 +0000
ROA not before:           Mon 27 Dec 2021 20:31:05 +0000
ROA not after:            Mon 26 Dec 2022 20:36:05 +0000
asID:                     265487
IP address blocks:        168.197.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5d:e5:0e:fe:85:a8:83:89:cf:79:3e:d4:90:bb:5c:99:87:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBBB999805E32505BB469C0FE86BBE3FF9063230
        Validity
            Not Before: Dec 27 20:31:05 2021 GMT
            Not After : Dec 26 20:36:05 2022 GMT
        Subject: CN=9AEAD133E08D99D28982DBA7A6DB4854149D25EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:91:3b:3f:9b:f1:3c:5f:a9:17:bb:46:cf:
                    14:0e:f9:cc:32:0a:17:3e:03:b7:31:f5:c9:14:c1:
                    1a:43:c6:6a:b4:9d:b4:f7:e6:dc:04:ba:e0:62:d4:
                    9d:0c:80:26:7d:dc:33:4c:8a:77:61:07:80:5c:c7:
                    83:c3:ff:8e:15:b3:6c:08:56:07:52:e9:5d:8e:fd:
                    77:e3:38:c7:6a:02:d7:8e:39:c8:78:d0:31:ac:72:
                    d3:13:90:98:88:0c:20:81:ea:ee:7a:ca:e8:ae:16:
                    0d:3d:5d:18:b1:55:36:cb:ce:2a:ec:df:cf:fd:c1:
                    9f:74:95:f8:b3:8d:db:25:39:24:6d:07:f4:6a:34:
                    22:b2:7a:b4:fa:a2:d0:c8:62:4f:2b:7b:2f:3b:eb:
                    1e:78:59:ab:83:d6:8c:4b:0f:c1:f6:62:06:02:f1:
                    be:bd:c6:64:9c:92:0c:19:d3:87:63:b6:3c:7e:4e:
                    14:66:8a:19:e7:34:87:c8:49:83:47:c0:db:a1:54:
                    98:e9:ad:46:a3:ef:de:01:16:69:55:b2:0f:d3:e5:
                    31:21:74:2b:17:e9:3b:a6:27:1d:22:d1:19:26:1a:
                    3f:0d:5f:ba:0b:85:5c:35:46:0c:ed:37:48:4a:1f:
                    97:a7:5c:0b:9c:32:df:af:fe:8b:dc:31:ed:0f:93:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:D1:33:E0:8D:99:D2:89:82:DB:A7:A6:DB:48:54:14:9D:25:EC
            X509v3 Authority Key Identifier:
                keyid:FB:BB:99:98:05:E3:25:05:BB:46:9C:0F:E8:6B:BE:3F:F9:06:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32332d3233203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:fd:e9:14:64:ed:ac:3f:fb:07:87:ec:a9:13:f3:19:2e:
         63:93:1f:81:1c:ec:69:d2:4b:9f:c9:0a:c6:df:c1:1c:a9:cf:
         9c:6c:bc:fc:8f:fe:64:9f:d8:6c:5a:73:be:93:56:3b:4d:75:
         bf:11:b6:fb:0a:fe:1d:33:41:c5:05:95:45:83:4e:1e:b0:d4:
         7a:6e:54:3d:ba:6f:92:05:00:bd:4b:6b:bb:e3:28:68:bc:f3:
         40:d9:4b:11:7b:ab:85:f4:ac:48:fc:20:a7:38:e2:c2:75:4b:
         bd:2a:d8:63:71:c9:57:0f:76:32:c4:28:95:f5:41:39:f2:ae:
         82:e6:bd:8d:3f:f5:ce:7d:94:08:fb:76:52:3d:d6:9c:b0:0a:
         94:23:fa:7c:ba:56:fd:f1:65:26:bc:84:57:fe:82:4c:c3:85:
         fa:70:49:fd:9c:b0:d9:de:62:9c:d1:97:9e:ce:b8:a2:2f:20:
         71:9a:b2:36:e5:15:10:1c:94:6e:b3:48:71:ba:d2:9f:9f:ba:
         aa:88:05:7e:1c:c8:8d:ad:83:e8:c0:84:7e:6a:57:fa:c1:6c:
         9b:5a:4d:64:d4:f6:3a:02:00:4f:80:27:f2:67:89:94:89:ea:
         ae:de:9c:b0:14:2c:48:de:d4:3b:6d:dc:c8:f4:d2:14:31:28:
         c9:47:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org