Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31382e302f32332d3233203d3e20323633363235.roa
File:                     3137392e3132352e31382e302f32332d3233203d3e20323633363235.roa (raw, json)
Hash identifier:          y3jIIimQC7sPXUlNP1N5C7FsQ90ieK3SO8NLoH/PeTs=
Subject key identifier:   21:B7:6B:5A:0E:5A:A3:5E:06:FB:35:C1:6A:8B:4A:E6:DB:F9:45:80
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       6BDB369667E6744BB5D202CC882E678B77F7C278
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31382e302f32332d3233203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:28 +0000
ROA not before:           Tue 05 Dec 2023 16:27:28 +0000
ROA not after:            Tue 03 Dec 2024 16:32:28 +0000
asID:                     263625
IP address blocks:        179.125.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:db:36:96:67:e6:74:4b:b5:d2:02:cc:88:2e:67:8b:77:f7:c2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:28 2023 GMT
            Not After : Dec  3 16:32:28 2024 GMT
        Subject: CN=21B76B5A0E5AA35E06FB35C16A8B4AE6DBF94580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:da:02:11:55:f6:08:f4:08:58:d6:8c:c8:
                    ae:3c:1f:86:07:51:d8:7f:45:0e:fb:86:7e:2e:6c:
                    fd:48:38:fa:ed:f3:c0:ba:c4:fb:04:69:16:e7:88:
                    4c:69:56:25:fd:df:8d:43:51:0e:c4:28:73:9c:84:
                    6f:08:ba:3d:bb:77:40:84:ed:8b:1f:ed:2f:fb:9a:
                    00:80:11:d1:b8:e7:0d:84:8d:27:e1:69:e3:44:f1:
                    ac:f1:af:2e:b9:31:76:f4:f9:1f:d2:fc:cf:6f:f1:
                    52:5c:36:23:86:14:5d:99:72:67:13:d7:40:7f:80:
                    f2:fd:62:26:4d:c6:8f:6b:d2:f8:99:78:e6:ef:0c:
                    92:61:49:cc:57:7c:92:13:34:bb:79:d4:f7:99:c6:
                    d9:28:63:53:45:44:68:38:ed:c3:23:e4:96:0b:3e:
                    c2:db:07:b7:98:d9:67:fe:66:72:43:02:92:c8:14:
                    7d:e2:04:9f:b7:d2:39:57:92:75:bb:f2:e0:ec:35:
                    76:b9:22:88:fd:e5:59:2e:6d:ca:10:80:9b:23:9c:
                    2e:d3:7a:ad:83:51:86:d8:46:31:0b:02:b6:7c:54:
                    f6:bd:ee:f6:86:28:cb:9f:ca:e8:a1:47:7a:59:2d:
                    41:88:25:fc:47:8b:01:d6:5b:b3:38:14:d0:86:ac:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:6B:5A:0E:5A:A3:5E:06:FB:35:C1:6A:8B:4A:E6:DB:F9:45:80
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31382e302f32332d3233203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:b5:64:d0:7a:8a:4e:6a:24:b9:7b:f9:2c:01:a3:2e:bd:
         77:94:fa:f0:fc:57:a9:df:b5:85:64:2c:ff:b9:eb:23:97:ca:
         c6:23:18:92:20:a4:0e:86:4f:fc:20:26:e9:9d:64:42:85:db:
         59:7a:19:3b:08:47:75:e2:55:ed:40:b2:fc:ab:4a:bc:f6:82:
         9a:ff:18:ec:bf:f5:5d:67:c9:03:86:d4:cd:bf:5d:9c:93:29:
         9b:c6:0f:d4:32:a5:b7:d3:13:3e:5d:af:6a:ce:88:dd:8c:05:
         a5:7e:8e:46:b6:25:b5:4f:f5:3e:22:26:84:e8:4d:f8:cb:04:
         ba:79:24:49:cc:b4:39:12:47:9c:32:d5:89:36:b5:be:fa:29:
         7e:d1:e4:ca:17:b0:09:92:21:35:73:a2:c1:8f:d0:80:5f:bf:
         26:ff:69:7b:b8:47:3b:ac:34:9c:c5:85:f2:11:66:11:77:53:
         cf:7f:d8:d2:0d:90:82:6c:b5:4d:ce:1c:58:ef:0b:71:b1:04:
         92:de:bf:96:05:60:94:77:56:ac:22:fc:4b:4b:bd:94:b1:8a:
         d1:0b:e0:14:c0:48:0d:fb:7f:04:70:2c:05:11:87:ba:35:1b:
         b9:ac:cf:da:1b:96:bc:bc:12:38:bb:bc:31:9e:2c:2e:2e:a1:
         b0:eb:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org