Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          Rru2zAIiO2PqddxWyQBkrUILfiudQtLF1FM2VSJOM44=
Subject key identifier:   28:67:74:72:34:9E:91:CB:27:8F:D3:A0:5B:C8:21:2E:3D:86:FD:65
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       178B63DE6AFE0290951F180F024EC85537CD5F7C
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
Signing time:             Thu 28 Mar 2024 16:18:54 +0000
ROA not before:           Thu 28 Mar 2024 16:13:54 +0000
ROA not after:            Thu 27 Mar 2025 16:18:54 +0000
asID:                     271111
IP address blocks:        192.140.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8b:63:de:6a:fe:02:90:95:1f:18:0f:02:4e:c8:55:37:cd:5f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 28 16:13:54 2024 GMT
            Not After : Mar 27 16:18:54 2025 GMT
        Subject: CN=28677472349E91CB278FD3A05BC8212E3D86FD65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:12:1f:04:66:7f:8b:b9:03:ac:a6:14:8c:
                    7f:22:ca:3d:42:e5:bd:50:9e:a9:02:f9:83:2e:ae:
                    e1:8e:1b:bb:64:c0:72:e9:87:80:7c:ed:55:48:7d:
                    19:67:23:d8:94:61:0b:73:96:c9:96:94:d5:bc:9c:
                    6f:1a:c5:6d:1a:a3:13:2e:6c:ba:41:e1:fe:19:a5:
                    38:16:6a:2f:a4:ad:29:0a:34:47:f3:b8:23:76:65:
                    78:8e:14:f8:6b:61:04:d2:61:ae:8c:d7:d1:ea:5e:
                    65:f7:ae:8f:4f:44:7b:5e:1d:c9:32:35:5b:90:6c:
                    f9:de:19:cc:51:c4:d7:44:c0:a4:b7:50:51:db:2e:
                    20:7d:c4:0e:d6:79:69:c5:a8:17:28:7d:b7:f0:e7:
                    f9:ad:44:93:73:17:84:4e:0a:87:e4:a6:39:e1:6d:
                    a4:88:fd:81:db:44:52:c3:c2:da:86:f0:43:e8:83:
                    f8:fd:eb:b5:79:29:1e:0a:0d:e0:fe:9d:ed:b9:4e:
                    75:2a:dd:a7:38:16:f3:46:8b:d9:77:3e:15:af:da:
                    3a:90:d0:3d:cb:84:21:c3:f5:d6:26:0b:2a:0b:6e:
                    61:fe:cd:bb:cc:0e:f9:d6:06:c9:e4:d4:48:78:06:
                    b5:1e:9b:29:39:a8:25:cf:d3:5c:08:7b:e9:35:45:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:67:74:72:34:9E:91:CB:27:8F:D3:A0:5B:C8:21:2E:3D:86:FD:65
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:a9:90:0e:bd:77:3a:bc:f2:f0:1f:8e:63:07:a9:2d:59:
         89:df:d5:f0:a7:8e:06:70:39:4e:49:68:3e:0b:14:d9:6b:a7:
         7f:de:5c:22:05:23:15:a9:d8:1d:b3:e7:46:c7:b2:5d:05:83:
         8d:4b:d3:6e:7a:69:5d:78:8d:e8:e2:65:ac:2c:a2:c3:4e:a2:
         27:88:6b:6b:d5:bd:e8:14:0f:e6:df:a6:28:96:e4:5a:3e:8b:
         ff:39:04:38:ea:ae:e7:20:67:21:4e:1f:34:8e:f7:e6:0d:66:
         10:3b:59:19:ca:be:22:0e:fb:7d:f6:de:ba:ce:51:d8:69:f1:
         59:ca:42:5f:0e:09:65:9f:c7:36:cc:ba:0d:d8:f4:7f:b0:4f:
         dc:e6:b5:ad:e6:cd:73:ce:92:43:0d:e3:a7:00:07:ec:5f:30:
         17:7e:70:d8:f4:a2:b4:a1:c8:07:e7:fc:9b:30:61:fc:e3:14:
         55:66:8e:49:ac:82:63:04:2f:24:51:99:f2:db:25:52:48:fc:
         23:48:6a:5b:f4:1d:89:ee:6c:25:88:b8:73:2c:a7:db:f7:22:
         05:94:4e:f1:96:ac:4c:20:63:2c:26:d3:84:d1:7d:bd:71:2c:
         e9:1e:18:98:0b:1c:60:32:02:c6:32:7e:22:1e:42:aa:c9:74:
         75:86:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org