Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38372e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38372e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          L2MRdyNhWonSPY7q1quCXPBU0sOKW6ZeS46uNqjOPVU=
Subject key identifier:   B7:49:D6:C9:6A:F4:62:78:43:A5:97:71:22:7A:01:97:5E:15:A3:70
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       38096433FC29321AEA0A11185B6EAF5FB78D6CD7
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38372e302f32342d3234203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:11 +0000
ROA not before:           Wed 06 Mar 2024 17:57:11 +0000
ROA not after:            Wed 05 Mar 2025 18:02:11 +0000
asID:                     52780
IP address blocks:        168.205.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:64:33:fc:29:32:1a:ea:0a:11:18:5b:6e:af:5f:b7:8d:6c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:11 2024 GMT
            Not After : Mar  5 18:02:11 2025 GMT
        Subject: CN=B749D6C96AF4627843A59771227A01975E15A370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:de:d0:bf:fb:e8:c4:84:19:24:8f:10:3d:
                    e2:5a:a1:7c:87:13:fd:d9:d8:56:5e:70:f1:9a:40:
                    da:ef:6c:94:28:c9:bc:f2:a7:23:8d:8d:00:85:87:
                    b3:6a:93:4f:10:bd:0f:f3:99:7f:b3:fa:2f:e9:74:
                    fc:9f:b2:02:75:69:b7:ef:90:c7:44:bb:7e:dd:c5:
                    86:01:19:8a:a5:0a:7d:6b:c1:85:ad:d9:75:23:b4:
                    8d:ae:06:02:ce:45:23:fb:cb:43:33:97:5f:a2:7d:
                    82:7e:b1:6e:9e:36:64:55:a4:5a:f1:03:02:0d:21:
                    c1:01:4d:3b:46:ec:00:25:5c:1b:6b:b9:d4:05:d2:
                    3c:8f:bb:1f:11:2f:2f:b6:e6:5e:ef:44:e1:a2:3d:
                    84:00:c6:12:f1:5f:b6:7d:21:d5:bb:75:be:a1:e7:
                    b0:a2:ef:23:c1:cb:76:3e:0f:64:98:8e:48:77:d0:
                    56:1b:e5:14:f6:e1:28:63:0b:a8:ff:3a:ba:ae:04:
                    29:89:ba:8d:b6:b8:d3:0f:3e:33:5f:78:0c:e2:16:
                    48:74:dc:1b:6c:71:f6:79:81:a4:c3:2f:4d:73:f4:
                    aa:59:77:43:42:dc:c1:53:a1:c9:ca:16:f9:f0:ad:
                    89:17:0f:74:33:64:25:e8:11:fc:2b:0b:83:a9:99:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:D6:C9:6A:F4:62:78:43:A5:97:71:22:7A:01:97:5E:15:A3:70
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38372e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:38:8c:4e:cb:19:d1:5f:5b:fd:9b:48:5a:be:42:23:71:
         a3:6a:b9:9c:52:7a:ff:54:42:9f:30:d3:58:43:43:c6:5c:bb:
         66:42:ea:18:d7:0e:64:89:d6:81:ea:7a:2e:57:19:44:c4:f7:
         ee:99:a3:02:f2:6b:a1:f3:24:03:ca:a3:01:0c:0f:44:b2:76:
         81:27:42:74:cd:e8:36:7a:19:48:ad:0f:02:22:54:67:51:b4:
         bb:b5:84:3e:c3:a7:01:cb:93:f7:55:f2:93:0c:d2:65:2e:73:
         1e:e1:1d:29:d1:20:02:d7:b0:2d:c4:af:52:cb:e0:17:a9:5f:
         1b:3b:98:77:e1:74:f2:0f:0c:de:10:29:24:eb:94:05:c1:b5:
         f0:df:1d:4c:ae:8d:3e:70:d9:1a:6e:5b:b3:9e:86:11:bf:5d:
         a5:46:38:72:4b:ac:1c:b1:56:c6:e8:a8:a9:c8:48:b3:b0:79:
         44:c4:c1:f0:78:c7:5d:aa:b6:18:56:fe:70:5a:44:ee:d0:11:
         06:cb:1f:63:ee:5e:ac:2c:48:20:82:39:3c:6a:75:85:c5:2a:
         b9:95:84:7f:bb:26:29:01:ea:58:a0:b7:ba:80:c6:21:11:87:
         0d:9f:e7:39:a5:3b:1b:44:96:65:9a:0f:13:9b:44:31:2a:d1:
         f7:a6:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org