Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          0ZxN+QkFDlmEC9ZpAErCpZ1SpX5YJI+A1lO600Idc0A=
Subject key identifier:   3F:AF:2D:8A:91:69:9D:A0:59:73:D6:AB:C5:4D:0E:06:88:8D:95:CE
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       245EF85D34BC16F1FBD435D0D367A1198DDD79E8
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:55 +0000
ROA not before:           Wed 20 Mar 2024 19:23:55 +0000
ROA not after:            Wed 19 Mar 2025 19:28:55 +0000
asID:                     271111
IP address blocks:        192.140.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5e:f8:5d:34:bc:16:f1:fb:d4:35:d0:d3:67:a1:19:8d:dd:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:55 2024 GMT
            Not After : Mar 19 19:28:55 2025 GMT
        Subject: CN=3FAF2D8A91699DA05973D6ABC54D0E06888D95CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:ff:2e:31:d7:45:1b:c4:61:f0:01:bc:69:
                    71:c3:40:3c:5b:7e:bc:f4:28:c4:37:56:2c:bc:a2:
                    27:5e:1e:c4:08:6c:5d:5d:f4:5f:a5:e0:10:c5:11:
                    d8:75:89:16:5b:69:f3:0a:93:e0:c1:6a:85:9d:00:
                    03:f4:21:e8:71:9b:74:30:61:aa:af:c4:47:c3:6e:
                    7d:91:58:b7:4a:c1:13:3b:97:b5:d0:62:8d:13:23:
                    d2:03:ef:02:c1:c0:1c:8e:5d:65:7e:64:4f:8c:a4:
                    e5:51:85:06:05:4d:33:8e:4b:92:a6:42:14:17:2d:
                    ee:c1:77:b8:1d:9e:c0:35:c8:4f:f5:56:88:ce:e2:
                    16:a0:e0:34:b3:01:ab:72:b4:ca:4c:81:e5:c0:5a:
                    48:30:9f:8b:c6:7a:e1:d7:50:68:65:92:5e:0e:98:
                    57:10:90:db:34:11:75:9a:f4:08:8e:4d:2c:bd:56:
                    3f:f9:c8:37:b2:31:d5:fd:48:d6:a2:b0:8a:38:57:
                    9f:89:54:29:b5:a9:3f:6f:44:f9:4e:91:0c:cc:00:
                    2c:40:be:1e:a8:8a:2f:3e:4f:97:90:99:74:21:a1:
                    77:3c:81:10:c3:c6:65:46:26:b5:36:91:95:76:9e:
                    45:54:e3:59:e8:66:c2:a8:cc:69:46:fa:c0:db:c4:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:2D:8A:91:69:9D:A0:59:73:D6:AB:C5:4D:0E:06:88:8D:95:CE
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:86:64:8c:0a:32:3d:d8:1a:a9:fb:51:91:a6:6c:c7:b9:
         68:21:51:ef:25:a3:35:d7:59:60:8c:a0:b4:b2:ea:22:ad:05:
         aa:68:47:0f:ee:56:d1:35:7e:cd:d8:0a:25:02:4c:75:d9:60:
         84:b0:d1:50:31:8f:c0:40:02:43:8b:da:bc:dc:3c:07:02:98:
         05:ad:1d:ac:39:12:cd:db:ce:f4:5d:80:e3:5d:d9:f7:35:73:
         d5:d3:b7:e7:8d:fb:ee:43:b2:92:52:80:be:24:b6:bf:30:5e:
         77:da:4e:e2:b6:48:8e:4f:65:fe:f0:8e:49:32:83:4a:4b:f7:
         46:e9:8b:f6:0a:6f:bd:b9:13:02:e9:f5:1e:18:36:5c:96:40:
         6f:45:18:1f:03:4a:e4:5b:b7:51:dd:2f:7c:56:37:dc:7c:8b:
         f6:3a:ee:1e:9a:cd:c3:8c:5f:57:f7:f2:03:c3:4c:96:ec:77:
         70:9a:44:68:57:d5:7a:ef:d4:aa:d1:fd:cb:33:a6:29:74:13:
         6a:27:00:65:59:23:52:2d:68:5d:b2:72:5b:32:3f:7c:2c:32:
         e7:c3:c1:49:13:89:a9:cb:0a:19:14:b8:b9:95:15:02:73:57:
         02:9d:39:70:31:09:63:c0:85:c2:10:6a:62:6b:d1:be:dc:ab:
         21:37:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org