Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/3138312e3139312e3131362e302f32342d3234203d3e20323637343233.roa
File:                     3138312e3139312e3131362e302f32342d3234203d3e20323637343233.roa (raw, json)
Hash identifier:          BOnGP/wj9jSok8971NSTGAE4XBiUNk+StzczsSA+QYo=
Subject key identifier:   FB:E7:0F:23:ED:77:63:F1:A8:AE:5A:71:0C:64:C9:61:8A:F6:E0:90
Certificate issuer:       /CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
Certificate serial:       4A7EEB160B7A94CD9B4EF4FDB44804AC69CD9569
Authority key identifier: BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/3138312e3139312e3131362e302f32342d3234203d3e20323637343233.roa
Signing time:             Wed 03 Apr 2024 18:59:36 +0000
ROA not before:           Wed 03 Apr 2024 18:54:36 +0000
ROA not after:            Wed 02 Apr 2025 18:59:36 +0000
asID:                     267423
IP address blocks:        181.191.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7e:eb:16:0b:7a:94:cd:9b:4e:f4:fd:b4:48:04:ac:69:cd:95:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
        Validity
            Not Before: Apr  3 18:54:36 2024 GMT
            Not After : Apr  2 18:59:36 2025 GMT
        Subject: CN=FBE70F23ED7763F1A8AE5A710C64C9618AF6E090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:f7:7b:89:a4:19:3e:68:44:f0:d3:12:3d:
                    02:1b:a0:b3:56:4d:37:aa:c6:e4:1d:e5:b3:ce:d1:
                    7e:27:5e:d7:ba:31:65:c2:f6:0a:45:4e:67:fb:a9:
                    9b:df:49:66:2a:13:04:d7:6f:73:58:ee:12:ba:e7:
                    c5:ab:40:ba:f2:07:ff:51:e1:f3:a1:f7:69:06:d8:
                    16:8e:76:96:28:50:ae:ce:57:9b:9e:ac:e6:91:26:
                    3f:10:2a:2a:0a:c4:8e:e3:2c:a0:6c:b2:6d:12:d3:
                    55:b8:44:31:4a:6d:94:8c:ca:36:82:49:a3:4c:d8:
                    f1:b0:9b:29:22:a0:5b:3e:fd:61:02:84:98:cd:b3:
                    d0:af:e7:d4:30:cf:13:95:87:37:2b:19:f0:97:86:
                    30:79:3c:fe:c7:9b:e2:56:01:b6:6a:6e:4f:d2:38:
                    08:b5:c1:5d:ba:7d:98:60:c7:5c:39:a4:dc:c3:0a:
                    30:0c:65:05:71:c2:7c:60:1c:68:78:a1:5b:a0:ad:
                    e1:86:a6:91:01:85:3c:d4:b3:f3:ce:0a:aa:b0:d2:
                    be:8c:18:e3:94:a3:e4:eb:a5:60:f2:1e:eb:ed:b4:
                    3a:3c:c8:01:7d:01:70:fd:b2:98:18:9c:ba:2d:6f:
                    76:f8:84:ee:4d:72:32:85:80:36:cf:7a:6d:55:03:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E7:0F:23:ED:77:63:F1:A8:AE:5A:71:0C:64:C9:61:8A:F6:E0:90
            X509v3 Authority Key Identifier:
                keyid:BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/3138312e3139312e3131362e302f32342d3234203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:74:7c:01:b6:aa:30:ea:ac:64:fb:12:44:1b:e3:6f:83:d3:
         26:f0:03:75:5f:5d:0a:e8:2e:79:98:0e:71:c8:9c:28:a6:66:
         c6:b9:9f:c5:2c:b0:5f:36:42:b5:93:8d:a3:52:41:ea:fd:af:
         73:67:9f:61:d9:a5:ed:38:a7:2f:9e:ff:37:45:d7:48:28:66:
         f1:c0:eb:e8:67:6b:d8:ae:97:39:cb:73:e7:4a:83:de:23:c3:
         5a:e2:64:17:ba:4e:5c:cc:a5:8d:38:c3:ae:7a:7d:f4:0d:80:
         3c:53:9f:c9:a7:98:93:12:ae:10:6c:2c:fb:fa:d5:97:cb:06:
         b2:a8:25:bd:b6:d4:f8:c8:85:0b:bf:d6:9a:ea:8d:cc:e6:c7:
         f5:0a:9a:fe:e4:e9:e1:1c:17:f7:85:fd:6e:a3:f1:ee:2b:55:
         a0:53:d7:3a:48:04:e7:f7:81:8c:ec:e4:e9:14:57:9a:f3:af:
         05:1e:eb:e1:f3:fe:01:e8:c6:dc:53:66:af:b4:35:54:d6:e3:
         8c:2c:3c:70:f8:b2:1d:62:1c:2f:8c:2b:fb:6a:e2:85:5c:13:
         77:2a:8d:99:e9:1b:bb:57:30:d4:e6:d5:34:97:56:0f:6d:d9:
         0e:f2:5f:2e:c4:d4:be:4c:d0:87:c2:18:de:b3:cc:77:8d:d7:
         f2:f7:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org