Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133382e302f32332d3233203d3e20323633333935.roa
File:                     3136382e3139342e3133382e302f32332d3233203d3e20323633333935.roa (raw, json)
Hash identifier:          un+Bj4FYFir1+ZQvXhRLN6nnq3DsimCiEGnsac3Uml0=
Subject key identifier:   94:54:73:0A:7D:01:05:F2:B4:E8:3E:89:28:E6:2B:E3:0F:93:3A:64
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       44795163C0891827A04CE56BCE6AFC8DAB41C7D1
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133382e302f32332d3233203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:18 +0000
ROA not before:           Sun 25 Dec 2022 17:17:18 +0000
ROA not after:            Sun 24 Dec 2023 17:22:18 +0000
asID:                     263395
IP address blocks:        168.194.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:79:51:63:c0:89:18:27:a0:4c:e5:6b:ce:6a:fc:8d:ab:41:c7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:18 2022 GMT
            Not After : Dec 24 17:22:18 2023 GMT
        Subject: CN=9454730A7D0105F2B4E83E8928E62BE30F933A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:07:4b:46:f9:c8:ec:08:a2:28:cd:f4:ce:
                    f6:a7:05:ef:40:1c:35:31:de:65:5a:51:74:55:6e:
                    4b:9a:ba:83:06:6a:14:fd:26:a5:0a:48:bb:a3:2a:
                    60:f5:23:34:4b:f1:85:75:15:56:61:5e:bb:fe:0a:
                    41:6f:cb:27:bc:af:45:03:af:6a:d3:b3:57:18:75:
                    a4:bd:d8:99:ab:36:29:15:db:32:5b:6a:1a:2e:fa:
                    f7:40:f7:f9:b5:71:76:09:ad:dd:61:0a:de:86:19:
                    72:08:97:23:6d:ab:59:92:4c:58:9c:11:a6:0e:3e:
                    72:27:f1:18:28:67:32:16:4e:35:4d:e3:5b:a0:ba:
                    bf:74:79:62:a7:c3:87:fb:a6:8e:97:fe:44:88:f3:
                    6a:01:40:27:77:f6:c4:84:73:3d:14:9a:15:5a:4a:
                    10:c6:2b:49:90:dd:73:5c:8f:f7:86:b7:bf:8f:be:
                    f3:e9:78:29:cf:76:1c:42:85:ae:e0:67:93:ef:9c:
                    cf:43:b1:13:da:88:eb:e2:f1:bd:21:a2:16:e8:01:
                    bd:45:c1:7d:c4:1d:66:5c:1a:46:33:d2:52:f9:66:
                    1a:d6:2f:77:58:73:f8:d0:68:8b:9c:57:13:1e:86:
                    74:a5:86:e5:2d:ee:74:94:54:1a:d8:26:e3:40:45:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:73:0A:7D:01:05:F2:B4:E8:3E:89:28:E6:2B:E3:0F:93:3A:64
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133382e302f32332d3233203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:b2:4e:23:e3:49:6b:7a:c6:1e:bb:f6:88:fb:8a:c0:21:
         6c:42:8a:87:c4:27:67:81:1b:26:0c:18:72:d8:7b:ea:36:81:
         d9:a0:19:d1:77:b5:de:37:19:5e:53:77:b4:04:ae:e7:af:5d:
         cc:75:df:df:2d:e7:f2:8c:c9:5d:96:40:97:cb:b9:a6:08:4f:
         29:4b:94:48:d7:ec:51:0c:b4:35:dc:3f:e6:58:a1:e1:b2:a4:
         19:62:d4:b7:ec:c9:9b:e9:b8:65:5c:cf:db:45:0d:96:fb:b3:
         79:4a:8a:7a:83:63:95:e2:fa:ad:70:8c:69:5d:e5:b0:c8:b1:
         21:26:fe:84:94:67:4e:90:f9:e8:0d:47:4a:86:17:bb:05:97:
         01:0f:07:1c:63:33:2a:fb:3f:15:9a:80:2e:57:89:8f:af:47:
         27:a0:c2:8b:91:73:ce:6b:eb:05:15:0e:86:6b:50:a8:dd:e0:
         68:2c:52:a1:c8:5d:39:71:e9:96:6d:39:f9:18:35:be:8e:b4:
         6a:08:0b:ce:84:e8:0b:77:6c:b0:eb:cb:43:0d:67:00:50:9b:
         3e:f4:63:2e:75:d6:05:01:8c:09:3f:79:9d:c4:c2:62:d1:ce:
         f6:46:cc:39:d3:bc:ea:6a:07:07:75:c9:4c:45:72:54:c5:23:
         81:c0:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org