Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/0/3138392e35302e36302e302f32322d3332203d3e20323730393633.roa
File:                     3138392e35302e36302e302f32322d3332203d3e20323730393633.roa (raw, json)
Hash identifier:          gH5KJEX0gHidWT3iNWwAPvpz9NnK7coZf0k1o/NBc0A=
Subject key identifier:   6A:A5:A7:A2:C7:39:5C:61:7F:D7:2F:E6:10:45:D8:54:B1:60:BF:64
Certificate issuer:       /CN=FCBC2D7B4A7113180B6D164795B8152D3D289E27
Certificate serial:       3AB32A7F58963EE6FCA8DDCD10D64B4F18C99AD6
Authority key identifier: FC:BC:2D:7B:4A:71:13:18:0B:6D:16:47:95:B8:15:2D:3D:28:9E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCBC2D7B4A7113180B6D164795B8152D3D289E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/0/3138392e35302e36302e302f32322d3332203d3e20323730393633.roa
Signing time:             Thu 12 Oct 2023 19:43:15 +0000
ROA not before:           Thu 12 Oct 2023 19:38:15 +0000
ROA not after:            Thu 10 Oct 2024 19:43:15 +0000
asID:                     270963
IP address blocks:        189.50.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b3:2a:7f:58:96:3e:e6:fc:a8:dd:cd:10:d6:4b:4f:18:c9:9a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCBC2D7B4A7113180B6D164795B8152D3D289E27
        Validity
            Not Before: Oct 12 19:38:15 2023 GMT
            Not After : Oct 10 19:43:15 2024 GMT
        Subject: CN=6AA5A7A2C7395C617FD72FE61045D854B160BF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:ac:03:1c:bc:0a:72:6d:de:8c:e8:3e:54:
                    35:27:3b:3e:d1:75:ab:1e:64:a9:d2:b0:c0:60:1d:
                    ad:d7:78:61:b7:a3:bb:4d:28:85:fb:79:f1:b8:0e:
                    89:87:83:e9:b2:8a:7e:d9:81:c3:4a:30:bc:34:90:
                    de:c0:e2:ff:03:83:b6:d0:c1:b0:e2:7c:66:cf:66:
                    aa:b3:87:b3:27:48:b5:bb:f5:f9:cc:fe:bb:bf:f4:
                    ba:3e:51:6c:ed:5b:b3:e9:2f:88:e5:9f:ac:d3:9c:
                    4a:00:6c:f7:75:a8:b2:97:e3:e8:c0:a7:3c:e7:bf:
                    1d:d6:c1:09:13:87:ec:3d:14:77:75:b9:1b:87:45:
                    f0:9f:99:30:be:67:03:83:2a:7f:a2:be:17:af:d4:
                    e9:0d:16:50:6e:94:35:24:0d:f7:68:cd:1c:27:64:
                    6d:4d:3b:d1:79:3a:9a:9e:c9:54:40:51:c7:ca:e4:
                    2c:97:92:01:54:43:b8:2f:92:0a:e3:1d:d5:20:36:
                    cc:a7:60:e4:b8:ec:f8:4c:b6:f5:9c:ae:ea:58:8a:
                    8b:d9:89:3a:81:a6:38:c3:9d:3e:9d:fe:c0:94:54:
                    f7:e6:93:67:9d:70:92:d6:96:8e:3b:e8:ba:0c:26:
                    ab:86:51:b1:a1:bc:3e:78:2b:30:75:51:19:c3:2b:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A5:A7:A2:C7:39:5C:61:7F:D7:2F:E6:10:45:D8:54:B1:60:BF:64
            X509v3 Authority Key Identifier:
                keyid:FC:BC:2D:7B:4A:71:13:18:0B:6D:16:47:95:B8:15:2D:3D:28:9E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/0/FCBC2D7B4A7113180B6D164795B8152D3D289E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCBC2D7B4A7113180B6D164795B8152D3D289E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/0/3138392e35302e36302e302f32322d3332203d3e20323730393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:fb:b4:88:58:65:ee:a6:b6:e6:e4:07:3c:db:f6:79:40:bb:
         f9:f3:f8:48:6e:78:20:f8:45:ad:6f:c5:7c:02:a7:86:25:cf:
         b5:a7:d6:a1:cb:26:72:be:00:5c:4b:33:c0:f9:94:6c:e7:5a:
         dc:30:44:62:83:d1:2a:ab:79:cb:24:a7:ae:59:ad:65:68:8c:
         1b:77:4e:b9:46:94:6c:e6:3b:ae:a0:8d:af:c6:21:93:6f:f9:
         6a:09:6f:4b:63:05:3b:52:0e:60:dc:2d:68:ef:5a:3d:fe:3e:
         6c:34:db:84:07:87:a5:1c:5b:16:21:85:54:86:3d:42:86:ec:
         18:d2:29:09:fa:d7:af:1d:a3:e8:8a:cd:6f:45:94:b4:a8:9d:
         06:c9:84:cc:58:f7:c1:65:98:9d:83:52:e0:0b:99:70:25:6f:
         cf:cb:82:72:63:d4:ef:65:70:05:ba:cd:13:2f:0f:49:75:21:
         d5:cf:db:1c:cb:f3:a2:1d:94:73:fb:48:d3:42:42:75:84:17:
         cf:4b:42:49:36:3f:53:de:d1:1e:eb:59:17:69:72:55:31:84:
         63:b4:57:ce:f3:65:d2:92:a1:37:9a:e4:f9:ca:be:c9:a0:62:
         ae:6b:17:12:47:1a:ea:7b:b7:78:65:22:01:f9:fc:15:50:0f:
         9d:25:26:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org