Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/3136382e3232372e35322e302f32322d3234203d3e20323634383733.roa
File:                     3136382e3232372e35322e302f32322d3234203d3e20323634383733.roa (raw, json)
Hash identifier:          qAcg8cQ2M3AqFBbpgo/OTWRVodZ6EznJ8h4Z3L4Dxv0=
Subject key identifier:   9A:8D:71:C4:21:C3:08:1A:A9:E4:07:1E:BE:AA:9B:6A:B1:87:DD:73
Certificate issuer:       /CN=F1C14EF1523999794DD250CE11165F513FBE3E24
Certificate serial:       494D7A5E694DBDF04910DF8E4DF0A6207DC58313
Authority key identifier: F1:C1:4E:F1:52:39:99:79:4D:D2:50:CE:11:16:5F:51:3F:BE:3E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1C14EF1523999794DD250CE11165F513FBE3E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/3136382e3232372e35322e302f32322d3234203d3e20323634383733.roa
Signing time:             Wed 06 Jul 2022 14:30:00 +0000
ROA not before:           Wed 06 Jul 2022 14:25:00 +0000
ROA not after:            Wed 05 Jul 2023 14:30:00 +0000
asID:                     264873
IP address blocks:        168.227.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:7a:5e:69:4d:bd:f0:49:10:df:8e:4d:f0:a6:20:7d:c5:83:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C14EF1523999794DD250CE11165F513FBE3E24
        Validity
            Not Before: Jul  6 14:25:00 2022 GMT
            Not After : Jul  5 14:30:00 2023 GMT
        Subject: CN=3082010A0282010100D681A6641B0B1B3D975862157E272E0B3BF19F3581B53AEADD8D84629B7D7A10B724E9E4886B86EA92047E9095943E56D9BEA7DBA259933AC32F05DE276D961F95B21220B57EA548B75CF8A93B7709DC5D3D79770A07BEF457B82A1D36493CE147D72797B8FD40801A2075F0FCE7FC9699FE87A3E59D3F80C2FFDBF7F3EB7FDE7D0801F23DB4707E002507072566177403364064F1FF4C894B68D7C8D36D26A44FAC25D5B7BA1100200BDCDFC976B9FAA20DF64BCB9D4811BADB89FDF7EEB39C23B9DD924772FFE23CAB60225162D655F64F32495EC83791000986CA26BCA79691533766B1C592CCEDFB65158B54FFD87A67932488088F347AEE7E423E1EC6C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:a6:64:1b:0b:1b:3d:97:58:62:15:7e:27:
                    2e:0b:3b:f1:9f:35:81:b5:3a:ea:dd:8d:84:62:9b:
                    7d:7a:10:b7:24:e9:e4:88:6b:86:ea:92:04:7e:90:
                    95:94:3e:56:d9:be:a7:db:a2:59:93:3a:c3:2f:05:
                    de:27:6d:96:1f:95:b2:12:20:b5:7e:a5:48:b7:5c:
                    f8:a9:3b:77:09:dc:5d:3d:79:77:0a:07:be:f4:57:
                    b8:2a:1d:36:49:3c:e1:47:d7:27:97:b8:fd:40:80:
                    1a:20:75:f0:fc:e7:fc:96:99:fe:87:a3:e5:9d:3f:
                    80:c2:ff:db:f7:f3:eb:7f:de:7d:08:01:f2:3d:b4:
                    70:7e:00:25:07:07:25:66:17:74:03:36:40:64:f1:
                    ff:4c:89:4b:68:d7:c8:d3:6d:26:a4:4f:ac:25:d5:
                    b7:ba:11:00:20:0b:dc:df:c9:76:b9:fa:a2:0d:f6:
                    4b:cb:9d:48:11:ba:db:89:fd:f7:ee:b3:9c:23:b9:
                    dd:92:47:72:ff:e2:3c:ab:60:22:51:62:d6:55:f6:
                    4f:32:49:5e:c8:37:91:00:09:86:ca:26:bc:a7:96:
                    91:53:37:66:b1:c5:92:cc:ed:fb:65:15:8b:54:ff:
                    d8:7a:67:93:24:88:08:8f:34:7a:ee:7e:42:3e:1e:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:71:C4:21:C3:08:1A:A9:E4:07:1E:BE:AA:9B:6A:B1:87:DD:73
            X509v3 Authority Key Identifier:
                keyid:F1:C1:4E:F1:52:39:99:79:4D:D2:50:CE:11:16:5F:51:3F:BE:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/F1C14EF1523999794DD250CE11165F513FBE3E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1C14EF1523999794DD250CE11165F513FBE3E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHoBBpBFaRQUiZbXaKHKMB3YJpdrJAv4jPjXUETNV3fz/0/3136382e3232372e35322e302f32322d3234203d3e20323634383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:da:ac:50:82:39:14:79:d8:01:87:49:d9:8e:8d:43:c9:42:
         83:00:07:5e:36:17:e4:f5:16:c5:c2:73:8a:2c:b7:06:51:7a:
         ac:0f:65:e8:d7:c9:44:0b:1c:58:1b:cf:74:6a:09:ee:c8:54:
         8a:b3:c5:f8:dd:17:19:5c:56:b3:ef:c1:bc:6a:ce:81:ba:66:
         2d:53:f4:85:aa:c8:74:f8:66:ab:a4:a0:4e:6f:71:e2:88:1f:
         19:92:94:7f:a3:e6:39:2e:53:c0:cd:58:88:b6:de:99:99:52:
         f1:5c:64:b7:fd:4b:4f:31:74:8c:ff:54:2d:59:06:31:62:7c:
         e5:a7:02:12:3e:08:6f:ca:1a:0d:bd:8f:85:bd:9e:d9:81:cb:
         5e:e1:e3:f8:a1:39:3e:9d:cf:b2:1d:70:72:c4:7e:3c:bf:96:
         32:4b:c8:b0:a9:9e:33:4e:22:19:d9:3e:14:ac:3d:bc:f1:8b:
         da:b1:3a:11:00:14:18:b7:5b:b8:c5:22:38:1e:e1:1d:49:5f:
         ce:c6:97:12:9e:0d:dd:46:c2:42:28:ee:9f:0f:6a:c8:d9:1e:
         b2:5f:5d:a6:99:4a:d7:4c:89:8e:ab:aa:32:cd:03:5f:4e:39:
         c9:06:ca:47:3d:16:a3:02:7d:c0:08:6a:f5:8c:3c:70:54:18:
         4d:9f:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org