Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
File:                     3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa (raw, json)
Hash identifier:          rSJBwDP8FohoeuU9KEqV6JDyCV27yGPBcma6thfYrsA=
Subject key identifier:   89:5F:4D:58:17:26:75:FB:12:03:46:92:B6:82:D9:EF:55:EE:F8:EF
Certificate issuer:       /CN=4DFD8362A9D1E25B80953D1F53DFA0E6041D65F1
Certificate serial:       57494052B03C99EA47B13EE9879BB211A2D72EFB
Authority key identifier: 4D:FD:83:62:A9:D1:E2:5B:80:95:3D:1F:53:DF:A0:E6:04:1D:65:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DFD8362A9D1E25B80953D1F53DFA0E6041D65F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
Signing time:             Wed 13 Mar 2024 19:52:07 +0000
ROA not before:           Wed 13 Mar 2024 19:47:07 +0000
ROA not after:            Wed 12 Mar 2025 19:52:07 +0000
asID:                     263336
IP address blocks:        191.36.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:49:40:52:b0:3c:99:ea:47:b1:3e:e9:87:9b:b2:11:a2:d7:2e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DFD8362A9D1E25B80953D1F53DFA0E6041D65F1
        Validity
            Not Before: Mar 13 19:47:07 2024 GMT
            Not After : Mar 12 19:52:07 2025 GMT
        Subject: CN=895F4D58172675FB12034692B682D9EF55EEF8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:ad:58:85:b0:9a:28:c5:13:89:2d:0e:02:
                    0c:d8:61:c0:15:6a:18:d5:b8:e8:0f:8f:68:2e:c5:
                    48:df:ef:14:ef:9b:e4:b0:9d:3f:d4:f5:b5:db:68:
                    bb:f7:29:68:9d:5b:a8:c0:2a:10:d9:f6:26:29:2f:
                    5a:72:f2:39:9b:ca:71:38:98:c6:bd:7c:ef:36:d9:
                    d5:15:31:be:3d:d2:a1:23:b6:c8:aa:05:6d:ac:43:
                    04:74:5d:ee:af:71:bc:4f:04:30:4d:50:1e:01:31:
                    4d:af:f6:56:dd:4c:d7:4d:56:c0:19:56:fb:7e:4b:
                    06:23:49:ed:da:8f:3d:5f:15:8e:0f:40:df:9a:cb:
                    c2:df:95:ec:e5:b9:a9:85:89:a1:d7:ea:c0:3e:80:
                    a4:63:37:ed:fe:c0:f7:d3:b7:c7:5d:bf:7f:25:5e:
                    a5:73:9c:13:d1:8c:f3:f3:19:c5:49:10:6c:db:d9:
                    dc:45:ca:b8:de:63:8c:c6:08:11:8b:d6:f7:32:f9:
                    fa:07:0c:e9:8d:df:96:74:2d:22:a7:06:a3:c6:1b:
                    0b:e2:cd:20:0c:8b:f3:8e:1b:fd:f4:b2:c2:be:6b:
                    f0:cc:ce:92:ff:56:93:e6:96:0c:40:89:2e:3f:ee:
                    b1:74:7d:36:f3:4d:4f:1a:75:7b:46:e0:15:de:c6:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5F:4D:58:17:26:75:FB:12:03:46:92:B6:82:D9:EF:55:EE:F8:EF
            X509v3 Authority Key Identifier:
                keyid:4D:FD:83:62:A9:D1:E2:5B:80:95:3D:1F:53:DF:A0:E6:04:1D:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/4DFD8362A9D1E25B80953D1F53DFA0E6041D65F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DFD8362A9D1E25B80953D1F53DFA0E6041D65F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:89:69:b7:7b:1e:1e:bd:e8:17:98:b6:40:41:ea:29:ad:3f:
         7f:6c:ee:e6:5b:8e:48:ba:ad:f7:01:be:41:f5:4b:bd:47:cb:
         af:5c:e0:67:0d:32:1c:be:f0:41:fa:dc:82:95:76:ff:71:fb:
         2e:d1:38:61:64:20:0e:28:ae:ff:0f:a2:fb:d8:e7:03:9f:43:
         d6:e3:9d:06:cc:73:db:88:fd:d7:37:4d:b3:f9:42:ef:63:e2:
         4d:fb:d2:90:fc:f7:f4:7c:78:3c:17:16:6c:c7:91:d2:d4:2a:
         2d:88:9c:27:60:53:58:6c:0a:41:02:e9:89:de:6b:e8:2d:42:
         cb:22:5c:79:3f:e3:fb:98:ac:44:3e:07:27:fe:fc:77:41:d0:
         a1:14:d3:5d:e1:aa:4b:00:1b:f1:98:2c:42:ed:6c:85:64:60:
         42:09:ca:bc:cc:3a:db:15:46:ef:83:91:78:90:8e:21:4f:99:
         65:9e:44:f3:29:cc:8f:d7:a7:4e:e9:0b:2f:32:f1:30:38:1a:
         4f:eb:b3:b0:39:bd:51:9b:d4:fb:59:3c:8d:cf:9a:4b:65:f2:
         b5:0f:d9:31:9e:bb:93:b0:7d:f3:9e:81:ce:13:18:6d:bd:a5:
         62:d3:90:be:1d:3d:a3:a0:77:a2:c1:e1:1e:2a:a5:ba:f8:eb:
         a7:92:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org