Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
File:                     3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa (raw, json)
Hash identifier:          X6bUmquHPsNawPYEwSppbykJQZGlADcYn5Q6cXFDKC8=
Subject key identifier:   19:52:CA:C0:23:16:8B:E2:F4:F2:62:0C:56:87:9C:92:A4:D3:80:7A
Certificate issuer:       /CN=FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F
Certificate serial:       6FF75B18E5967798CD3FD48B45D26D9927FC380E
Authority key identifier: FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
Signing time:             Thu 04 Apr 2024 02:53:05 +0000
ROA not before:           Thu 04 Apr 2024 02:48:05 +0000
ROA not after:            Thu 03 Apr 2025 02:53:05 +0000
asID:                     61774
IP address blocks:        200.225.136.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f7:5b:18:e5:96:77:98:cd:3f:d4:8b:45:d2:6d:99:27:fc:38:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F
        Validity
            Not Before: Apr  4 02:48:05 2024 GMT
            Not After : Apr  3 02:53:05 2025 GMT
        Subject: CN=1952CAC023168BE2F4F2620C56879C92A4D3807A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:1e:34:f7:2d:4a:5d:05:cb:bd:ed:42:f4:
                    8f:49:9c:8d:02:88:fb:88:ae:c1:86:a2:6a:f7:47:
                    00:22:b8:98:14:78:fb:b3:15:0f:43:2d:84:4d:d5:
                    19:50:16:ef:ae:70:fa:3c:3a:2e:b9:0b:81:aa:7f:
                    0b:b7:fc:0d:b1:9a:bc:8e:c8:0d:af:fd:31:e7:40:
                    40:8b:d3:33:84:a1:d4:24:bc:cb:64:a6:14:9d:04:
                    26:bb:fa:d9:67:a3:95:8e:76:17:7d:64:d7:5a:79:
                    86:80:2e:02:26:17:d2:9b:db:e0:e8:01:1c:b3:4f:
                    2d:8d:a3:42:3f:64:fb:fc:c0:14:6a:20:1c:0f:29:
                    cb:bf:00:b6:ca:c0:d0:8d:00:30:30:9c:e2:a8:5b:
                    71:3b:8b:e2:71:b5:b8:19:bb:34:f6:16:97:30:8d:
                    e0:aa:19:42:50:94:8d:b7:1c:55:38:b4:b2:03:87:
                    58:b9:b1:df:84:a2:bc:8f:6e:29:5c:f4:1d:0c:c3:
                    e4:55:3e:67:0f:1b:ac:f9:55:f0:f5:38:c2:4f:e3:
                    f6:0a:71:37:a2:9d:32:25:9d:0e:22:6c:ec:c8:ec:
                    19:a7:54:dc:1d:bc:ea:b2:cc:97:40:96:f1:07:20:
                    0e:b6:c9:a2:08:dd:7c:01:b4:b5:a4:8c:f1:e4:9a:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:52:CA:C0:23:16:8B:E2:F4:F2:62:0C:56:87:9C:92:A4:D3:80:7A
            X509v3 Authority Key Identifier:
                keyid:FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:96:19:ea:69:98:21:6b:0b:73:f0:e4:48:2d:ce:08:14:90:
         26:88:d0:3f:57:a5:c5:a0:27:eb:62:56:d4:2f:16:cb:fd:8a:
         45:b5:f2:47:bb:3a:98:a5:60:f1:1c:85:2a:da:01:be:bb:99:
         5d:71:0e:48:fa:33:5e:a1:50:80:c5:0e:eb:f2:ff:8f:5a:18:
         34:dc:55:04:cd:30:f6:27:d4:1a:a8:85:0c:ff:17:6a:c1:e9:
         e2:ec:48:87:b4:4d:30:4a:c5:82:44:6f:d5:4e:45:2c:b1:94:
         6f:bf:85:ee:6d:26:ee:37:eb:9a:51:5b:ca:8e:10:48:00:a3:
         ac:05:15:03:12:b7:38:fe:4c:3f:97:79:97:9a:81:6c:3d:0d:
         8d:d0:68:69:e8:d1:fa:d9:0e:4d:72:37:a4:af:47:0a:c4:ab:
         e1:ee:fd:b2:79:36:89:50:3c:69:96:d3:25:f1:f7:7a:d6:af:
         89:0a:fa:e1:16:82:87:75:b1:ba:82:29:02:92:f7:67:f9:75:
         12:b2:fa:a1:d1:ea:98:68:27:e4:55:10:97:37:9c:cb:e4:c1:
         16:5f:bb:3a:3a:88:c2:7f:40:1e:5e:21:b5:8b:0c:92:c8:aa:
         03:c5:2e:7b:22:fc:bc:68:ba:fb:1e:cb:81:2d:d4:c2:66:9b:
         07:0e:e6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:56 2024 by rpki-client on console-fra.rpki-client.org