Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32322d3232203d3e20323633363235.roa
File:                     3137392e3132352e31362e302f32322d3232203d3e20323633363235.roa (raw, json)
Hash identifier:          3FMCCl6PZFX4Bbzf0519v7PZyue4wmPJAJyVLQYrUyI=
Subject key identifier:   BA:2B:55:18:8F:30:8B:E2:22:8A:98:D6:7C:FA:4F:2C:05:E0:CD:AC
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       5BDE2119EF2AF49D43BA765B644C6A57C3875502
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32322d3232203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:28 +0000
ROA not before:           Tue 05 Dec 2023 16:27:28 +0000
ROA not after:            Tue 03 Dec 2024 16:32:28 +0000
asID:                     263625
IP address blocks:        179.125.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:de:21:19:ef:2a:f4:9d:43:ba:76:5b:64:4c:6a:57:c3:87:55:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:28 2023 GMT
            Not After : Dec  3 16:32:28 2024 GMT
        Subject: CN=BA2B55188F308BE2228A98D67CFA4F2C05E0CDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:df:be:06:7a:8e:99:0c:ef:97:7d:25:5b:
                    f0:af:15:fb:8d:4e:93:73:e1:d8:64:9e:c6:bb:32:
                    76:49:1a:07:75:cc:dc:33:09:68:fc:cc:b1:4c:b7:
                    8d:99:52:2d:62:44:d2:fc:4e:4b:b4:41:ee:81:20:
                    2e:c5:3b:9c:31:58:3d:cc:75:a4:9e:db:c3:1d:64:
                    86:82:66:78:8a:fe:6c:0c:64:a4:d8:61:23:5a:ac:
                    52:36:0b:53:e7:a7:cd:90:3f:98:0a:f5:41:fe:f0:
                    b0:73:ed:be:b5:6b:00:e8:42:2a:42:17:30:f3:f2:
                    4e:78:74:da:7d:0c:19:0d:05:5b:b9:3b:d5:93:99:
                    88:4d:60:d6:6d:48:37:eb:58:c3:0d:7e:be:27:8c:
                    54:17:46:b3:65:0c:84:fc:e6:72:b4:af:44:23:81:
                    d9:59:3e:5c:31:4d:25:c4:11:91:df:af:e0:da:29:
                    72:ed:d6:9f:c0:c9:2d:1d:c6:79:98:dc:70:0f:e8:
                    c6:5f:c5:0f:c7:99:c7:54:42:1f:11:7d:83:48:f9:
                    5a:0c:2b:ab:48:0b:60:31:18:43:28:f7:33:4b:d6:
                    7a:13:95:5c:0e:e4:6c:84:e7:5e:3b:9c:4b:83:73:
                    fc:5b:46:75:84:30:c3:c4:61:d3:f5:7a:d7:02:80:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2B:55:18:8F:30:8B:E2:22:8A:98:D6:7C:FA:4F:2C:05:E0:CD:AC
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32322d3232203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:83:4c:69:67:a1:e3:f7:70:61:9e:a4:93:c7:8f:00:77:92:
         65:3b:88:09:e6:4f:d7:88:0d:e9:17:f8:a7:80:97:06:27:68:
         d9:97:af:41:ef:22:88:f5:db:c0:f7:f4:08:78:5c:b8:33:15:
         3b:f2:6c:e5:ed:1a:28:46:dd:96:9d:09:b3:4d:dd:76:24:8d:
         b4:8c:3b:cd:c6:a5:0f:e7:9e:d0:8d:75:6a:72:d4:56:c9:29:
         74:8b:6e:f1:d9:40:62:56:8d:ef:ef:a1:e4:f4:7c:69:15:e6:
         12:1e:4e:17:a7:50:a4:03:7d:3f:86:7e:c5:e1:b6:a5:73:3e:
         46:49:3f:7a:03:83:48:b4:c9:5f:dd:70:85:77:73:a3:18:2b:
         0a:4f:e4:5f:38:dc:03:de:60:5d:8e:63:2d:c4:30:8f:ba:da:
         59:bf:42:b6:e4:e1:00:60:9c:35:13:06:34:62:48:4c:e0:c1:
         0d:49:84:20:3c:7d:cc:2a:df:ed:a0:4b:86:15:45:2d:b7:a5:
         72:76:f4:38:1e:2a:63:44:0e:7a:42:78:57:cf:42:c7:05:78:
         7c:93:d4:eb:e6:cc:f7:2b:70:c5:c7:c4:95:aa:19:90:b0:46:
         57:a4:d3:4a:13:06:e5:13:b1:b3:32:16:26:6b:7f:75:60:d9:
         66:c2:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org