Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa
File:                     3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa (raw, json)
Hash identifier:          OKJobxuoHTW4CrABRF23veHY6Qai4L09fcYsxi/VpNY=
Subject key identifier:   7F:68:D5:6D:CC:39:CA:35:B1:04:81:C3:FD:EB:8B:60:BC:33:3C:31
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       064716D6189B6BEC6C7C3C72DFE1A238FD4AF1CA
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:57 +0000
ROA not before:           Wed 20 Mar 2024 19:23:57 +0000
ROA not after:            Wed 19 Mar 2025 19:28:57 +0000
asID:                     271111
IP address blocks:        192.140.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:16:d6:18:9b:6b:ec:6c:7c:3c:72:df:e1:a2:38:fd:4a:f1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:57 2024 GMT
            Not After : Mar 19 19:28:57 2025 GMT
        Subject: CN=7F68D56DCC39CA35B10481C3FDEB8B60BC333C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:64:6c:cd:98:27:78:c2:06:29:b3:5f:81:
                    4e:05:05:b6:c3:d3:40:b2:eb:af:91:2c:17:ed:78:
                    be:b9:38:a6:0f:64:81:52:e7:dd:f6:fd:b6:1f:7e:
                    cb:dd:be:3d:df:2c:9f:b8:ca:f3:e9:61:e1:79:90:
                    34:d9:d5:b9:d9:23:12:72:5a:cd:ce:b9:e6:8a:ad:
                    4f:9a:56:83:9f:e4:42:93:ae:46:3c:21:11:c9:b1:
                    25:4c:01:b3:bf:56:8a:19:4d:fe:e4:0f:ea:d8:b7:
                    d9:90:73:67:b1:6d:eb:f6:93:39:82:fe:4f:44:3f:
                    24:22:9a:8d:24:08:a0:37:c2:b3:3e:a6:32:ae:38:
                    a6:2b:d0:60:4e:b1:21:a9:c8:6f:74:02:a5:4c:4a:
                    dc:59:cc:08:14:f3:07:0f:7f:27:b5:77:75:67:30:
                    1a:e9:2b:81:1d:42:c2:31:39:1a:fd:73:f6:59:6f:
                    32:c8:92:dc:82:bd:73:ee:84:d1:8b:67:a0:59:48:
                    53:b0:93:10:f8:04:3f:df:a6:5d:38:4d:0a:90:7e:
                    40:cf:44:2e:9c:14:66:bc:93:8a:18:4b:21:b1:0f:
                    24:88:ec:ea:a2:72:59:fc:d7:33:53:85:bb:d1:31:
                    74:6a:00:c9:14:ac:d6:f2:e0:84:f8:c7:96:be:0f:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:D5:6D:CC:39:CA:35:B1:04:81:C3:FD:EB:8B:60:BC:33:3C:31
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:31:3e:22:fe:3b:35:c9:b6:fe:e9:97:49:c6:b9:28:7b:
         17:9f:c1:dd:89:3f:ce:3c:a8:53:36:e5:7e:89:d5:2f:b7:14:
         44:d4:1a:2e:4c:60:43:0f:10:16:93:5f:c6:9b:f1:a8:f2:2f:
         cf:29:5d:bc:60:48:5f:eb:48:b6:84:18:67:fe:ec:e2:d4:2d:
         28:a9:ec:ee:91:60:d6:e6:03:c6:84:10:f8:16:e9:80:5f:90:
         fe:9d:92:ee:a0:84:75:48:2d:2f:8f:1c:59:95:4a:8b:f7:ce:
         d3:8f:1b:b3:86:d9:b6:3e:b0:a0:6e:99:22:ae:2f:28:d6:bd:
         bb:4b:69:8d:cf:75:d2:76:50:92:f5:c9:c6:09:5b:36:9f:01:
         24:9e:0e:99:f0:79:51:1b:74:de:da:5c:53:ca:30:f8:64:8f:
         df:63:b0:f7:3b:da:f9:8b:63:b6:c0:40:7b:fc:f9:55:ba:ba:
         c5:0e:47:e2:c3:61:bd:d8:e7:06:85:84:94:c3:14:a8:b0:3e:
         e5:4d:47:97:a4:4f:b0:c5:9c:e5:9e:51:39:51:70:19:4b:1f:
         77:eb:5f:e1:39:b1:6b:fc:38:f4:15:1a:37:1e:7b:41:50:db:
         d9:ab:9d:f3:76:2a:88:e3:44:84:cf:65:49:58:32:d1:3f:65:
         5d:c4:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org