Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa (raw, json)
Hash identifier:          rqCU2rlgSzrDrnakW586OuGxg2L/uljPOrYVm0SWj6Q=
Subject key identifier:   93:9C:C0:86:B4:4C:50:F8:F2:60:9E:6B:45:6A:4A:5C:97:26:CA:23
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       3C2FFBAABB62EC612E193EBC17AE01654326FBFE
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:57 +0000
ROA not before:           Wed 20 Mar 2024 19:23:57 +0000
ROA not after:            Wed 19 Mar 2025 19:28:57 +0000
asID:                     271111
IP address blocks:        192.140.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:fb:aa:bb:62:ec:61:2e:19:3e:bc:17:ae:01:65:43:26:fb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:57 2024 GMT
            Not After : Mar 19 19:28:57 2025 GMT
        Subject: CN=939CC086B44C50F8F2609E6B456A4A5C9726CA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:6a:62:45:fb:78:60:12:20:f4:60:41:b1:
                    66:d0:49:ab:bd:f7:b6:ac:4f:17:e7:47:a8:01:20:
                    4f:ae:6a:c2:21:c9:d4:1b:93:a5:28:ed:c0:fe:74:
                    1b:fe:68:09:1d:cb:a2:97:45:83:8d:e4:64:52:aa:
                    8a:df:21:a2:83:8b:b6:12:46:c1:22:4f:e6:4f:a7:
                    64:78:81:f1:8e:cd:62:69:49:16:67:64:e0:9a:c9:
                    70:2c:7a:26:6c:e3:7b:0b:87:6a:b8:cc:9c:d1:f7:
                    ba:b6:65:2a:24:92:ae:b6:4e:c9:8c:eb:47:ce:10:
                    a5:8e:bd:bd:cd:37:a0:29:7e:86:4d:b9:3c:03:f8:
                    91:7f:a3:de:5b:84:00:3e:c7:e9:f5:de:8c:c0:1f:
                    eb:a9:2b:28:24:da:5f:fd:31:cd:9c:73:b7:c9:11:
                    70:eb:7e:02:78:33:48:f8:6e:e3:dd:de:a7:db:fa:
                    e3:c7:42:e2:9d:e4:ea:0a:ae:38:f4:4c:e9:0c:a2:
                    c4:ee:bf:54:ed:05:40:e8:b0:c9:02:a3:53:ad:d9:
                    1b:da:6e:96:91:40:50:04:1e:20:e2:4b:0a:86:2e:
                    05:05:94:e2:6b:71:8e:8b:29:84:8d:a8:41:db:c8:
                    f9:74:c6:ec:2c:c2:fb:d5:a9:9f:4c:55:a9:55:eb:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9C:C0:86:B4:4C:50:F8:F2:60:9E:6B:45:6A:4A:5C:97:26:CA:23
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:2c:fa:e6:3b:d0:0d:9c:a8:89:62:b2:1b:9b:77:cd:3f:
         fc:34:61:b5:44:8f:d9:ca:f3:0e:fd:11:ad:61:b3:a9:d6:ae:
         48:f0:28:c9:66:d6:62:52:7b:84:f7:fe:e9:79:80:04:70:7a:
         ea:0f:32:9a:bc:b9:16:12:9a:9a:46:ea:26:09:09:4c:8d:77:
         d2:71:62:eb:b0:15:09:b3:7c:79:28:9f:c0:22:29:89:77:9c:
         90:e3:09:4e:3b:ce:c5:b2:99:84:0a:1b:02:5b:84:b1:32:1e:
         3d:0e:b5:2b:50:96:e0:3a:74:4e:45:2f:7d:49:94:07:7b:43:
         5f:d7:00:2e:bd:8d:d0:25:35:60:a3:d2:08:cb:eb:50:58:2f:
         9c:e9:5b:7b:5e:d8:7e:0d:5e:49:41:7e:1a:7d:3d:a9:2b:96:
         dc:23:c9:ce:3c:fd:b4:39:1e:25:01:8e:8a:ba:80:7d:b2:74:
         41:b6:5a:33:1d:54:92:1c:79:55:d4:ef:d6:86:6c:0c:8e:75:
         cf:50:63:0d:ff:0c:1d:b8:84:f9:82:76:f8:46:b5:2f:95:c1:
         b0:d6:21:17:5c:94:8f:7a:04:9d:80:33:6a:ee:83:b2:b7:26:
         6f:6c:20:ed:12:3a:6f:19:e4:db:c1:71:86:d7:08:74:50:8c:
         2b:b2:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org