Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/3138372e36332e3233322e302f32322d3232203d3e20323731363631.roa
File:                     3138372e36332e3233322e302f32322d3232203d3e20323731363631.roa (raw, json)
Hash identifier:          dnMYiCMoZRohptu+KT5rzUntCZKdZhry1HyIcbLDfUI=
Subject key identifier:   D3:DF:6E:8C:19:87:AA:0E:71:FF:8A:D5:5B:E5:74:8F:63:AA:56:45
Certificate issuer:       /CN=FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C
Certificate serial:       3D91970580A05306D198A6267488009FD623997A
Authority key identifier: FA:5A:A3:1B:D7:66:8C:AE:0D:5B:DB:65:1D:2C:AF:27:97:36:BE:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/3138372e36332e3233322e302f32322d3232203d3e20323731363631.roa
Signing time:             Tue 15 Aug 2023 12:45:12 +0000
ROA not before:           Tue 15 Aug 2023 12:40:12 +0000
ROA not after:            Tue 13 Aug 2024 12:45:12 +0000
asID:                     271661
IP address blocks:        187.63.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:91:97:05:80:a0:53:06:d1:98:a6:26:74:88:00:9f:d6:23:99:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C
        Validity
            Not Before: Aug 15 12:40:12 2023 GMT
            Not After : Aug 13 12:45:12 2024 GMT
        Subject: CN=D3DF6E8C1987AA0E71FF8AD55BE5748F63AA5645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:7a:e7:61:2d:dd:55:c1:0b:fb:97:ff:b8:
                    80:23:59:44:81:89:f7:aa:22:c2:e4:f6:bf:c2:ca:
                    72:d4:6b:81:02:e7:31:a1:bf:41:a9:91:da:52:f3:
                    6b:7b:c9:17:a3:3e:2b:c6:5e:25:24:24:1d:1a:d4:
                    6e:03:f1:06:b3:6f:1a:bd:98:04:e6:30:5d:fd:87:
                    2d:e1:14:97:68:cf:8c:4e:ba:96:86:fd:ef:39:d1:
                    66:80:eb:e2:95:75:82:98:c2:b5:35:b9:5b:d2:ed:
                    31:ba:98:21:8d:6c:92:81:d8:ed:16:c5:fc:6a:be:
                    27:c0:3d:da:a6:6e:77:13:93:8f:e5:90:a4:fb:60:
                    cb:a6:d6:6a:5e:36:74:2c:af:55:c1:7e:7e:55:8d:
                    af:fd:86:59:10:17:6d:0c:c9:83:95:ee:cd:f2:14:
                    e8:c2:5b:1b:f1:06:c7:9e:29:55:1a:15:2f:3f:83:
                    31:fc:d3:b0:ed:41:f7:ab:79:a8:45:44:e2:55:61:
                    3c:81:ef:e6:e8:f7:b9:ed:86:9a:67:46:b1:eb:18:
                    44:c3:e6:d7:61:50:d1:60:5e:6b:b6:31:9c:00:5d:
                    f8:4f:01:dc:45:3b:4c:42:09:03:f7:23:49:66:d8:
                    5c:f0:a7:7a:ae:70:c6:ed:d8:72:e3:de:74:e8:3e:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:6E:8C:19:87:AA:0E:71:FF:8A:D5:5B:E5:74:8F:63:AA:56:45
            X509v3 Authority Key Identifier:
                keyid:FA:5A:A3:1B:D7:66:8C:AE:0D:5B:DB:65:1D:2C:AF:27:97:36:BE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/3138372e36332e3233322e302f32322d3232203d3e20323731363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:17:64:9f:85:09:62:2f:5a:33:1d:d0:9b:b1:56:d6:1c:36:
         a7:9f:ee:05:b1:fd:21:70:d2:85:af:7b:3e:56:90:60:94:a3:
         f2:ea:ff:dc:d9:6f:52:37:48:09:63:1a:30:b1:a1:7f:bb:06:
         4a:9b:06:37:df:05:d4:5f:90:b2:d9:78:a8:b5:e2:80:28:cb:
         f6:17:6f:b2:0b:bb:1f:6b:0d:58:fe:8e:e6:ba:70:c1:a7:0b:
         8f:bb:e4:6d:34:c3:4f:b5:54:ba:91:0b:8b:66:5b:7a:53:62:
         86:97:09:22:63:a8:16:cb:82:2a:e0:12:09:aa:8f:c7:8a:16:
         b4:e8:30:6d:0a:f7:aa:78:ca:4b:17:c9:98:27:1a:98:9e:cb:
         c9:e7:d9:76:3d:16:ed:8f:4f:91:b0:36:d4:71:50:95:7b:c6:
         2f:01:eb:b1:8b:70:9f:85:09:66:0f:35:99:f6:9f:57:92:2c:
         df:f5:90:f5:c8:3b:da:23:99:99:1b:7c:63:79:38:ea:52:48:
         e1:3a:35:fe:94:9d:f6:da:c6:91:1e:29:92:eb:81:00:a0:66:
         8f:21:2b:5d:cd:1d:0c:4f:f6:80:ea:2b:1f:67:8b:9c:16:15:
         a0:b3:80:f8:40:80:b6:e8:c3:c4:ab:9e:d2:c3:a1:70:2a:b2:
         a3:68:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org