Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/3132382e3230312e3136342e302f32322d3234203d3e20323636363437.roa
File:                     3132382e3230312e3136342e302f32322d3234203d3e20323636363437.roa (raw, json)
Hash identifier:          FYs6YFvKn/zxddspjlQ9FEfNDAcQA1TeWKkoPSJtqg0=
Subject key identifier:   F4:08:61:6F:4B:3A:7B:8D:42:54:8B:B0:B6:1F:D5:BF:2B:62:29:EF
Certificate issuer:       /CN=C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C
Certificate serial:       50F9745552DE911E6290140816417DBF5B4FB264
Authority key identifier: C1:F8:0C:F5:CC:AB:65:25:17:0B:D6:FC:3D:9D:03:40:DD:63:EC:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/3132382e3230312e3136342e302f32322d3234203d3e20323636363437.roa
Signing time:             Fri 05 Apr 2024 14:37:29 +0000
ROA not before:           Fri 05 Apr 2024 14:32:29 +0000
ROA not after:            Fri 04 Apr 2025 14:37:29 +0000
asID:                     266647
IP address blocks:        128.201.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f9:74:55:52:de:91:1e:62:90:14:08:16:41:7d:bf:5b:4f:b2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C
        Validity
            Not Before: Apr  5 14:32:29 2024 GMT
            Not After : Apr  4 14:37:29 2025 GMT
        Subject: CN=F408616F4B3A7B8D42548BB0B61FD5BF2B6229EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:4c:39:52:be:e6:9a:cb:94:66:77:ba:20:
                    d4:e9:3c:8c:6b:ab:e7:bb:29:4c:eb:08:c6:13:b7:
                    27:ca:5a:5c:b0:e4:69:57:11:61:c5:72:17:43:a9:
                    35:32:d9:6b:dd:ce:71:75:ea:42:c7:4f:7e:82:44:
                    81:db:4d:95:18:af:77:6d:c6:92:b6:ff:f3:49:1e:
                    e7:5c:4c:48:74:c4:be:6e:69:03:72:bd:7f:3d:0a:
                    dd:a8:33:b4:b4:3f:0c:b0:86:c1:ec:fc:81:9f:89:
                    4b:14:5c:a9:b3:0b:87:63:01:ee:54:3b:46:f5:ff:
                    9a:f8:72:c9:70:f7:74:c7:43:0a:98:e4:0c:e3:36:
                    f0:f9:87:5b:a2:7a:1d:d5:41:62:e9:9e:9d:d5:4e:
                    f4:84:f3:07:78:92:cf:bd:07:3f:2f:d9:08:b0:ef:
                    10:97:d1:78:d8:63:4a:88:ce:fb:5c:65:a6:bc:f1:
                    3c:48:ae:dd:41:8b:12:91:94:97:c2:07:4f:d1:0d:
                    00:1e:82:28:c8:e2:60:47:30:f5:f4:32:8b:d6:97:
                    b4:59:a1:d5:2e:07:e8:98:85:af:24:f8:f7:b4:a2:
                    a2:e9:dc:72:bf:d6:6d:5e:5f:9c:79:ac:73:2d:6e:
                    be:d2:48:d7:5c:12:8d:21:19:c1:77:e3:f4:4f:0e:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:61:6F:4B:3A:7B:8D:42:54:8B:B0:B6:1F:D5:BF:2B:62:29:EF
            X509v3 Authority Key Identifier:
                keyid:C1:F8:0C:F5:CC:AB:65:25:17:0B:D6:FC:3D:9D:03:40:DD:63:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/3132382e3230312e3136342e302f32322d3234203d3e20323636363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:93:34:22:97:12:e6:c1:fc:af:c3:d5:73:74:9c:f9:37:
         f8:b3:9d:25:dc:66:e5:b0:01:63:ea:00:95:8f:db:60:a3:cc:
         47:40:12:cc:6e:e2:16:99:aa:38:0f:5f:86:f8:66:42:c5:f7:
         2a:f3:0d:be:b8:71:15:66:64:35:a4:f5:b6:b3:b9:98:e1:ae:
         c3:ac:d1:e7:5f:0c:1e:ca:02:3e:94:2d:e6:bc:ad:cd:fc:87:
         1b:2d:d6:1b:55:20:d5:89:5c:39:b7:d3:48:7a:d0:cf:77:5f:
         4b:5d:3d:31:6e:b6:ee:da:ba:70:f9:0c:2f:75:30:d0:05:2f:
         87:a1:06:92:ad:37:97:3f:ed:79:ce:dd:99:ed:f6:17:99:45:
         a2:61:af:a7:5f:b7:7a:f8:f6:f6:36:3e:ad:d4:4c:24:13:83:
         93:13:a9:12:14:43:75:3e:ea:41:f9:38:b9:a4:b3:b9:1d:a1:
         ee:34:98:80:7a:f0:af:e1:d7:30:ac:6f:ab:fc:8c:88:53:b9:
         23:65:e3:3e:ed:7a:89:cd:04:8b:ae:3c:d0:9a:fe:16:71:da:
         4c:59:14:8a:36:8f:32:4d:3e:80:f9:46:95:35:4a:7e:1c:ba:
         48:05:6b:cf:90:70:85:86:48:26:58:c2:24:23:f5:78:82:95:
         f6:6f:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org