Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (raw, json)
Hash identifier:          ZZu7KO/sRN9Jojt58tSeL3jVaEsJfUf/THpGdddddho=
Subject key identifier:   86:70:31:0F:90:AE:F7:74:17:C9:23:49:0B:59:B0:9E:AB:15:93:A2
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       036066FE85C8CBFE02CA10DA6DFC36D9AE70DFA9
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:56 +0000
ROA not before:           Wed 20 Mar 2024 19:23:56 +0000
ROA not after:            Wed 19 Mar 2025 19:28:56 +0000
asID:                     271111
IP address blocks:        192.140.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:66:fe:85:c8:cb:fe:02:ca:10:da:6d:fc:36:d9:ae:70:df:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:56 2024 GMT
            Not After : Mar 19 19:28:56 2025 GMT
        Subject: CN=8670310F90AEF77417C923490B59B09EAB1593A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:77:f4:b1:86:20:e6:8d:54:7f:15:89:19:
                    bc:09:19:0f:3c:40:20:84:f7:3d:65:32:74:a3:3b:
                    ba:55:c5:ba:52:31:d1:a1:7f:44:b9:43:42:b7:3b:
                    d1:ab:06:ce:5c:04:46:a0:47:da:7c:eb:05:fe:e8:
                    97:84:62:4d:50:08:3b:7c:f3:40:8b:dc:91:ca:94:
                    fb:79:9b:83:4f:50:53:d0:85:d9:6f:36:c8:75:8a:
                    9c:f8:6c:91:17:61:71:35:30:8b:7f:17:3a:23:67:
                    17:12:c0:c7:35:29:7d:9e:29:7e:52:d4:6a:d8:d8:
                    97:df:50:87:a6:01:ea:3b:9c:9b:7c:35:31:e7:63:
                    53:0c:df:d1:0b:06:bc:a5:0d:d2:bd:e5:44:d3:73:
                    48:5d:b1:bf:ce:8e:0f:cd:82:5b:6f:5c:88:83:b1:
                    a5:62:43:0f:7c:ad:bc:15:63:30:e7:30:13:98:b2:
                    23:05:d7:59:7a:80:16:b8:66:ff:46:84:f7:4f:77:
                    d7:6a:c5:eb:0a:13:14:5f:1a:7f:15:22:37:2d:82:
                    c5:00:66:4b:a1:db:35:f6:54:c1:3b:bc:5d:16:c4:
                    f0:c9:62:f1:7e:4a:47:6f:10:99:70:af:cf:bf:69:
                    1e:99:50:65:ae:29:28:d5:b0:be:e6:a3:34:d1:df:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:70:31:0F:90:AE:F7:74:17:C9:23:49:0B:59:B0:9E:AB:15:93:A2
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:9b:40:71:f9:e3:f4:27:d6:05:3d:88:29:51:bb:61:d0:
         78:f7:28:df:67:10:eb:2c:3d:b9:73:77:3b:29:5a:ae:08:69:
         7d:aa:ee:d3:d0:e8:c2:a7:bb:e3:c0:bf:c1:4c:39:a8:df:32:
         ba:61:ec:64:1f:1b:a1:48:6d:29:e9:e1:b3:01:eb:03:d8:b3:
         f6:aa:f9:2e:a3:96:01:a9:52:65:53:b2:c7:cc:11:55:65:ab:
         b1:99:8a:92:eb:f3:ae:fb:9d:31:51:cb:13:e1:08:e9:9d:fa:
         fb:8e:bf:35:54:8a:11:8c:64:79:35:58:16:e9:e4:f0:c4:7a:
         26:27:d1:67:9b:e9:fe:00:8c:c6:a9:b0:c3:c6:7d:f0:ec:91:
         6f:12:d1:5e:85:b3:78:28:db:21:43:b8:80:0f:8d:93:02:58:
         bd:a8:65:2e:3e:e3:82:73:eb:fb:a2:c1:97:81:14:e5:fb:1c:
         ad:35:68:c9:bc:7c:7e:27:31:46:31:54:32:4c:ce:50:74:47:
         cf:2f:c2:3e:6f:3d:a3:f9:02:e1:8c:1e:95:4f:9b:fb:af:0a:
         ac:8c:23:bf:83:d4:ce:b2:51:f8:c8:4e:a8:80:b4:f9:45:ef:
         b6:fa:be:6a:6c:e7:ef:61:bb:d5:e2:cb:14:18:bd:87:29:ed:
         aa:7c:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org