Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa
File:                     3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (raw, json)
Hash identifier:          bQe2Rc1039MVsf7BvLb5fkN4ZLsf8ab9/oo2UmWhI8M=
Subject key identifier:   00:69:89:4C:EB:60:15:98:78:81:F6:1B:7B:3A:00:52:AE:56:5A:92
Certificate issuer:       /CN=FCE940C2247A788B799AA62C2E97E481838AC304
Certificate serial:       2C0B7DAB18E25170D9591EBC39D916F31052ACA0
Authority key identifier: FC:E9:40:C2:24:7A:78:8B:79:9A:A6:2C:2E:97:E4:81:83:8A:C3:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCE940C2247A788B799AA62C2E97E481838AC304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa
Signing time:             Wed 22 Nov 2023 19:27:20 +0000
ROA not before:           Wed 22 Nov 2023 19:22:20 +0000
ROA not after:            Wed 20 Nov 2024 19:27:20 +0000
asID:                     263877
IP address blocks:        170.246.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0b:7d:ab:18:e2:51:70:d9:59:1e:bc:39:d9:16:f3:10:52:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE940C2247A788B799AA62C2E97E481838AC304
        Validity
            Not Before: Nov 22 19:22:20 2023 GMT
            Not After : Nov 20 19:27:20 2024 GMT
        Subject: CN=0069894CEB6015987881F61B7B3A0052AE565A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:33:6c:48:a8:5b:fb:71:27:08:b9:13:42:
                    d8:89:07:aa:38:c3:6e:06:df:06:f8:6e:31:b0:53:
                    e8:13:10:c8:96:b8:14:6f:65:21:e1:eb:b3:46:8e:
                    6e:02:b5:88:74:83:e8:9b:7b:46:f4:ea:4a:f4:1b:
                    e0:92:dd:48:cd:41:3c:f3:f0:df:8a:3b:66:ac:0e:
                    3a:77:7f:ed:66:d3:1c:ac:ed:0f:e3:15:6d:df:d4:
                    1e:a0:2e:dc:4e:e3:46:f8:93:8e:58:bf:df:bc:01:
                    b5:f9:3e:75:f4:40:8e:df:d5:8b:de:7b:70:35:15:
                    3b:3b:0b:15:8d:84:9f:07:9e:6c:8f:95:47:a9:fc:
                    e8:33:1e:2f:49:de:e5:b7:d7:6c:7b:33:f1:fc:39:
                    0e:82:a1:a3:d3:71:66:ba:e7:eb:69:fd:1b:c6:68:
                    2c:4b:56:b8:30:10:d1:b6:90:93:dc:c2:cd:51:a1:
                    7f:cf:7f:44:82:5d:1e:27:ea:ce:3f:01:81:38:aa:
                    36:b1:62:de:8b:d2:6e:c8:7d:03:72:fc:0e:d1:a9:
                    ac:b1:09:a3:60:90:3c:e3:2a:e1:e7:7b:f0:63:ea:
                    2c:dd:b9:ca:3f:dc:44:73:56:55:ae:a9:8d:23:54:
                    c6:1c:cf:61:c1:6f:db:75:2d:15:28:3f:75:69:a8:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:89:4C:EB:60:15:98:78:81:F6:1B:7B:3A:00:52:AE:56:5A:92
            X509v3 Authority Key Identifier:
                keyid:FC:E9:40:C2:24:7A:78:8B:79:9A:A6:2C:2E:97:E4:81:83:8A:C3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0/FCE940C2247A788B799AA62C2E97E481838AC304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCE940C2247A788B799AA62C2E97E481838AC304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:08:8a:4a:5a:1c:78:aa:bc:66:12:0a:f8:f7:aa:f1:c4:
         4d:d9:8d:63:36:80:58:d9:53:ae:04:1d:64:47:50:49:c4:80:
         bb:a1:4b:95:2a:4e:08:26:0b:6c:e5:84:d0:4a:ef:88:05:60:
         60:68:f8:28:3d:2a:80:95:0c:9e:9e:3e:6e:aa:36:cd:c6:85:
         ed:c5:c2:9a:f6:cf:85:d9:0b:ed:c8:fb:d9:5b:a9:c8:4f:21:
         a4:48:dc:8e:ff:65:fb:b2:90:eb:ea:98:32:7b:fd:3c:a1:0d:
         32:a7:ea:67:9c:63:0b:eb:de:ad:6c:5b:8e:b9:d8:b8:06:79:
         30:e8:6c:e6:6a:80:65:9d:7a:6f:93:a6:62:8f:8c:50:14:45:
         41:18:87:51:cb:2c:52:81:06:e6:23:f2:2c:d2:7f:23:27:57:
         47:4a:18:cf:73:ed:14:f7:d2:1a:39:93:cc:83:60:a0:b6:e5:
         ea:40:0a:32:0c:1d:65:e4:79:a3:71:1d:79:82:4d:cd:31:94:
         25:e6:49:14:c8:b7:d8:c2:a9:df:86:b9:7a:25:64:09:1e:9f:
         cc:eb:15:b5:e2:0f:4b:62:d9:4b:c6:4f:c3:2a:b2:a8:f1:3c:
         53:7d:f4:3d:fc:10:57:45:71:62:cf:c1:30:1d:4e:d9:3b:19:
         c6:19:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org