Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa
File:                     3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (raw, json)
Hash identifier:          LRaZyI46+vh8MHa13kI0nnGRs6dMJSml4Mga7Sb5H/A=
Subject key identifier:   F3:10:8B:EB:62:39:45:D8:33:36:CE:5F:31:9F:42:39:AC:D6:D2:B2
Certificate issuer:       /CN=FBEB418DF0268B98F48FD50A02C24FBA8F6171EA
Certificate serial:       5401CF2F2B3A6E5CBA12B490ACE6A789D617FB13
Authority key identifier: FB:EB:41:8D:F0:26:8B:98:F4:8F:D5:0A:02:C2:4F:BA:8F:61:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa
Signing time:             Sun 14 Jan 2024 17:09:59 +0000
ROA not before:           Sun 14 Jan 2024 17:04:59 +0000
ROA not after:            Sun 12 Jan 2025 17:09:59 +0000
asID:                     53139
IP address blocks:        168.197.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:01:cf:2f:2b:3a:6e:5c:ba:12:b4:90:ac:e6:a7:89:d6:17:fb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBEB418DF0268B98F48FD50A02C24FBA8F6171EA
        Validity
            Not Before: Jan 14 17:04:59 2024 GMT
            Not After : Jan 12 17:09:59 2025 GMT
        Subject: CN=F3108BEB623945D83336CE5F319F4239ACD6D2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:e3:00:21:63:a2:7b:4f:9f:dd:3f:27:81:
                    53:4d:8d:83:0c:f2:31:af:77:53:f0:fb:3c:54:d8:
                    ea:0d:c6:69:74:07:e5:b0:9f:36:4e:d0:88:ac:f0:
                    56:35:e9:67:61:7a:1e:86:59:7f:8e:06:c9:04:7a:
                    3c:a6:f0:da:cb:3b:46:11:e5:30:8a:d9:59:1c:cf:
                    dd:1c:79:9e:ef:40:05:b5:11:7a:a0:b6:59:6d:f6:
                    35:6b:92:c9:56:cc:f0:39:84:43:aa:fe:49:9c:20:
                    59:4c:72:71:b6:98:28:34:c7:3a:dc:ab:01:9c:0c:
                    50:e5:94:b9:c0:e1:c9:e7:e9:1f:6e:d8:a3:e9:98:
                    4c:a7:61:47:a5:f3:87:07:7a:14:71:c9:48:25:9e:
                    a8:a5:fa:cc:81:f2:96:f2:37:8a:93:c0:6a:f0:ee:
                    8e:52:2a:1b:d0:2c:e6:9f:fc:62:15:3e:e4:2d:aa:
                    05:3d:5b:32:3a:02:10:c8:26:d5:8b:92:6e:9d:c4:
                    63:56:16:e4:38:3e:3b:bd:1f:1a:40:7e:3d:21:63:
                    e9:1f:e7:8e:c9:f9:d1:5c:6d:28:26:a2:0a:70:9d:
                    f9:1d:69:46:53:6f:69:ce:4c:01:75:28:fb:d2:f7:
                    94:d3:ea:98:9b:6a:e1:bc:64:1c:70:cc:77:98:ad:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:8B:EB:62:39:45:D8:33:36:CE:5F:31:9F:42:39:AC:D6:D2:B2
            X509v3 Authority Key Identifier:
                keyid:FB:EB:41:8D:F0:26:8B:98:F4:8F:D5:0A:02:C2:4F:BA:8F:61:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:b1:ab:76:eb:44:9b:82:b5:32:43:f9:22:57:d6:45:cd:
         70:64:95:cf:cd:7a:47:09:f6:32:fd:a8:13:fd:cd:a9:ad:aa:
         53:06:09:a9:8a:bb:c5:87:fc:7f:bf:c5:12:55:db:aa:98:0f:
         88:78:db:8e:da:81:50:4f:78:31:7f:f5:78:4f:85:b3:ae:a6:
         be:bd:ec:88:e6:7f:47:a5:68:12:f9:4d:58:82:26:e5:a9:85:
         6d:9c:f5:92:99:dc:8d:9f:d9:8f:9a:4d:9c:1b:2f:e5:2d:cf:
         8d:55:c4:dd:9d:aa:d3:4e:77:ac:50:fc:19:49:fe:dd:97:b6:
         bb:6f:74:c3:3d:df:cd:14:bc:be:a4:0d:18:80:5c:b5:93:c9:
         9a:c2:ee:16:64:e9:3d:b6:c8:48:3f:d1:69:8a:95:42:6b:49:
         f8:d0:09:f2:e1:76:a0:2a:aa:2c:8d:10:d2:d4:af:57:4d:91:
         f6:46:9c:07:76:51:2b:8b:33:73:4e:f9:fa:cb:7f:59:44:81:
         0a:ff:c1:61:13:45:a0:7e:ce:e3:17:c0:5a:cf:a0:79:b8:77:
         02:25:da:da:b1:ae:c6:27:7b:40:e6:85:11:67:d3:ee:2e:ee:
         e9:aa:9e:c2:7e:42:71:c5:d7:34:d9:df:fb:67:0f:68:da:6c:
         95:12:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org