Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234342e302f32322d3232203d3e20323635323338.roa
File:                     3136372e3235302e3234342e302f32322d3232203d3e20323635323338.roa (raw, json)
Hash identifier:          quIaPPWPoGTfZ/T69imJgKQvHtiXNdXiyOiNh9NcuI0=
Subject key identifier:   22:2C:B4:00:D9:00:E6:E6:AB:8B:4A:2D:65:7E:CE:35:83:B6:EB:2D
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       5B2307986A21B56D26357071968DDAC1EEB4F095
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234342e302f32322d3232203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 22:57:22 +0000
ROA not before:           Fri 20 Oct 2023 22:52:22 +0000
ROA not after:            Fri 18 Oct 2024 22:57:22 +0000
asID:                     265238
IP address blocks:        167.250.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:23:07:98:6a:21:b5:6d:26:35:70:71:96:8d:da:c1:ee:b4:f0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 22:52:22 2023 GMT
            Not After : Oct 18 22:57:22 2024 GMT
        Subject: CN=222CB400D900E6E6AB8B4A2D657ECE3583B6EB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:3f:1d:41:dc:89:f7:c4:37:2f:02:39:fb:
                    70:94:ac:af:a5:00:c9:55:76:18:2a:d9:d5:49:29:
                    f4:12:ab:bd:66:a4:25:02:3c:7b:5b:4d:90:34:4b:
                    4e:db:f2:7a:4f:18:e1:09:c3:81:7d:db:48:ae:4a:
                    0a:02:a1:08:43:fc:a3:dc:1b:c0:68:33:f4:c4:dd:
                    2d:84:b3:84:32:32:9b:06:84:b4:99:9b:b3:8d:80:
                    f6:b1:4e:2d:62:52:7e:cb:be:83:5a:33:93:60:34:
                    55:dd:0e:7f:3a:a7:01:bc:f0:10:5d:57:35:42:58:
                    67:49:3c:15:99:0f:de:97:26:92:3c:9a:e9:6f:24:
                    9e:fd:73:43:52:38:91:4a:f0:11:80:3a:bf:89:46:
                    0c:17:7b:1e:70:ae:c2:53:cc:fd:ed:cd:6e:f0:33:
                    f1:0c:f8:1e:a7:82:72:4a:31:9c:25:fe:d4:fb:6a:
                    01:1f:3b:6f:e9:4f:e2:89:f6:6f:de:12:eb:c0:e6:
                    75:df:10:2c:2f:e9:68:f6:29:35:5c:c1:b9:37:8d:
                    d4:42:ad:ce:70:67:64:92:b3:9a:96:21:8e:c6:ad:
                    1a:44:bb:4e:2a:17:4f:62:3d:a8:b4:60:cb:d9:d3:
                    4d:5d:23:fb:61:7b:a7:3c:49:8c:e7:74:88:27:8f:
                    5b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:B4:00:D9:00:E6:E6:AB:8B:4A:2D:65:7E:CE:35:83:B6:EB:2D
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234342e302f32322d3232203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:53:dd:63:bb:ee:8d:0b:31:f7:4d:93:c9:e1:72:88:95:4c:
         0e:ad:bb:26:d5:de:c8:2f:b8:74:10:f2:73:2e:ac:5f:6a:be:
         be:09:6f:61:4e:68:aa:c5:42:a6:24:10:76:59:06:66:99:62:
         72:ea:b8:8f:a2:51:f3:aa:3a:8c:bc:b9:61:b6:6f:7c:6a:f8:
         79:32:95:6e:60:3b:f7:6a:86:84:d4:4b:b2:11:9b:92:e3:44:
         61:69:f4:17:e5:1b:51:37:d8:e5:52:7b:e3:e1:fb:a8:31:4a:
         37:f2:32:ab:6f:51:99:20:bf:1a:bd:f6:dc:8b:94:3a:f0:06:
         01:eb:5f:2b:e6:0e:fd:9d:d0:26:b6:dc:8b:3c:90:1a:90:9a:
         d3:b6:93:57:15:f1:5c:34:43:87:77:d4:74:28:2c:d9:95:24:
         c9:11:da:7c:92:ec:01:2a:90:0e:cb:37:d4:95:e8:e0:6a:dd:
         69:9a:3d:ff:24:cb:dd:0b:b8:ac:54:df:b5:44:85:92:d1:cb:
         3b:b8:e7:a5:96:eb:22:69:c8:69:44:cb:aa:57:7d:8e:f8:6a:
         80:d1:47:e3:65:2f:f8:3c:8d:6a:ad:0e:c4:4e:84:dd:9c:30:
         1a:8b:ba:97:ea:61:7b:d9:ec:aa:3d:5b:ae:c4:05:ef:4a:64:
         2d:53:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org