Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa
File:                     3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa (raw, json)
Hash identifier:          FgUMMLbWZ7D63tHfGYQHUhySizSJXRBhf1p+FUFzVVc=
Subject key identifier:   87:A0:4D:C0:93:DB:47:7B:A9:B7:AB:C3:C4:A1:33:61:E6:4D:08:4F
Certificate issuer:       /CN=92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472
Certificate serial:       42383DDBB46688DA9E7FD62306CCF023056E5193
Authority key identifier: 92:19:1D:0C:D8:E1:07:AB:4B:CE:5C:6F:E7:A7:FC:C2:3D:32:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa
Signing time:             Mon 24 Jul 2023 12:30:37 +0000
ROA not before:           Mon 24 Jul 2023 12:25:37 +0000
ROA not after:            Mon 22 Jul 2024 12:30:37 +0000
asID:                     265053
IP address blocks:        170.231.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:38:3d:db:b4:66:88:da:9e:7f:d6:23:06:cc:f0:23:05:6e:51:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472
        Validity
            Not Before: Jul 24 12:25:37 2023 GMT
            Not After : Jul 22 12:30:37 2024 GMT
        Subject: CN=87A04DC093DB477BA9B7ABC3C4A13361E64D084F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:0d:88:e9:c8:25:1d:9d:85:f2:69:9a:4f:
                    ee:ff:1b:17:bb:27:93:5d:9c:c1:45:8c:71:a0:47:
                    22:86:79:75:7f:e0:e4:cb:d2:a4:1e:6d:ee:ab:21:
                    a5:54:b8:59:26:ba:90:70:7a:b4:b4:a4:44:11:00:
                    ec:40:96:8e:1d:a7:a4:08:4f:2a:a6:28:94:58:75:
                    80:ea:96:45:5b:2b:da:e9:af:92:6e:92:4f:bf:22:
                    02:78:f8:da:a6:0a:29:6a:ee:17:80:97:c9:41:cf:
                    dd:53:5c:8f:25:72:f0:51:fe:22:f9:80:c1:d8:21:
                    37:97:73:89:84:3c:5d:f9:ab:ed:fe:cc:36:3b:62:
                    b2:e8:b6:df:95:ae:35:33:4d:93:fa:1d:21:19:1e:
                    ec:36:7e:45:5e:52:16:37:05:7f:d0:cf:45:2b:21:
                    dd:c5:45:29:33:fa:74:7d:c3:70:7c:fb:bf:d4:fe:
                    6f:11:f4:0d:8b:af:ef:e1:94:5e:0c:da:cc:f0:7e:
                    c4:16:c0:ac:d3:1c:d8:4f:32:a4:b2:7f:81:fe:9d:
                    10:54:c2:c5:96:d4:30:6a:85:e9:f2:d9:79:45:50:
                    a2:ec:39:df:d0:d1:2e:4e:47:23:38:75:35:c4:8d:
                    8d:f1:82:0a:21:34:bb:9e:45:0e:87:93:bf:6c:41:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A0:4D:C0:93:DB:47:7B:A9:B7:AB:C3:C4:A1:33:61:E6:4D:08:4F
            X509v3 Authority Key Identifier:
                keyid:92:19:1D:0C:D8:E1:07:AB:4B:CE:5C:6F:E7:A7:FC:C2:3D:32:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:4b:7d:3f:e0:6d:cc:5a:d7:0b:f8:b2:c0:37:d6:02:57:
         d5:c7:c7:4b:d5:3b:1c:7c:62:f3:b8:6c:ce:01:b6:0a:77:59:
         88:b8:af:16:d6:9c:52:1a:6f:22:eb:92:91:a7:68:16:09:1f:
         27:85:02:e0:94:69:3a:22:5c:7c:a6:0e:e8:a0:33:25:ae:86:
         09:8d:96:3e:ab:fe:9c:d8:a8:ae:ce:8d:7b:88:a3:b7:03:6b:
         37:7e:07:30:73:3a:85:e4:56:a4:92:c9:c0:e8:32:65:c7:1b:
         d5:30:84:1c:8d:97:b6:b3:76:0c:42:91:8b:d8:ee:7e:46:ec:
         45:c2:bc:c8:6f:12:5f:30:6f:34:ea:9c:26:9f:b5:6d:fd:d4:
         4f:98:90:96:57:55:0f:01:48:17:ba:40:75:30:3d:3d:6c:fb:
         8d:e0:61:b5:b2:3b:9b:44:01:e7:03:98:db:2a:9a:69:0d:5a:
         ba:56:6b:4f:90:72:d6:d2:1c:c5:8b:54:97:7e:eb:ab:40:7c:
         ee:96:d2:7a:11:b3:bb:d3:3b:01:9b:a7:de:d9:ce:ec:d4:b8:
         f9:3d:ff:8f:8f:93:3f:45:5e:b8:ed:38:b0:ad:78:da:af:9d:
         d6:de:3a:5b:96:ee:21:1d:20:3f:e3:f4:48:3b:0c:fd:54:6a:
         1f:75:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org