Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3136382e302e3235322e302f32322d3235203d3e20323632383534.roa
File:                     3136382e302e3235322e302f32322d3235203d3e20323632383534.roa (raw, json)
Hash identifier:          1g2FGQaasKozdjeGK6FjDzSC3ef9+LKQ/ngwMHt1ubU=
Subject key identifier:   EB:34:15:ED:1C:DA:87:33:5D:C2:0E:CF:CF:4D:C6:91:7D:06:99:27
Certificate issuer:       /CN=0067DCB299F651ACFA1334059D304AD88AD8B525
Certificate serial:       0EC80A4300D92DDDCBB159F4B849C0C6A8E4EB03
Authority key identifier: 00:67:DC:B2:99:F6:51:AC:FA:13:34:05:9D:30:4A:D8:8A:D8:B5:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0067DCB299F651ACFA1334059D304AD88AD8B525.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3136382e302e3235322e302f32322d3235203d3e20323632383534.roa
Signing time:             Sat 08 Apr 2023 02:44:41 +0000
ROA not before:           Sat 08 Apr 2023 02:39:41 +0000
ROA not after:            Sat 06 Apr 2024 02:44:41 +0000
asID:                     262854
IP address blocks:        168.0.252.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:0a:43:00:d9:2d:dd:cb:b1:59:f4:b8:49:c0:c6:a8:e4:eb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0067DCB299F651ACFA1334059D304AD88AD8B525
        Validity
            Not Before: Apr  8 02:39:41 2023 GMT
            Not After : Apr  6 02:44:41 2024 GMT
        Subject: CN=EB3415ED1CDA87335DC20ECFCF4DC6917D069927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:7e:85:63:53:3f:17:0e:ba:f4:95:05:a6:
                    88:50:cf:bd:38:18:53:35:50:a2:96:80:1d:33:eb:
                    93:e3:cd:77:41:6a:f4:fe:92:15:c6:3c:30:e9:57:
                    6b:08:5e:59:84:21:b4:e1:e4:c3:53:66:26:c5:0c:
                    f8:97:82:55:40:f7:be:ce:4a:85:22:d9:5f:37:e9:
                    c4:2c:a2:a8:56:3a:4b:a9:11:76:b1:e5:7f:02:72:
                    2e:f7:0a:fc:dc:e0:1c:3e:c9:fd:41:d9:c2:3c:de:
                    db:aa:c3:36:b8:83:ac:b1:20:98:c8:29:fb:82:29:
                    67:43:f2:b8:ef:ce:b1:ed:f1:6a:dc:f2:ae:01:b3:
                    34:5c:2e:a8:0b:9d:da:f7:bb:67:8e:0d:62:3f:71:
                    80:f0:5a:8b:b8:09:b9:99:73:fe:c6:3f:54:3b:a3:
                    d2:e2:60:82:bf:1e:97:0e:06:14:4a:02:bf:da:c0:
                    4d:f1:bd:7f:56:dd:74:f0:7c:37:5e:4e:20:b7:e8:
                    fb:69:9c:71:64:cb:a1:f3:d6:01:a4:9e:cf:95:f6:
                    74:4a:93:ce:45:8d:75:90:e1:e0:e5:ec:29:44:4b:
                    f6:5a:2e:93:8e:d8:09:9f:b5:a0:d4:9d:d7:21:2e:
                    35:86:7b:49:1d:2b:cf:27:7c:fb:98:7e:7c:b9:ad:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:15:ED:1C:DA:87:33:5D:C2:0E:CF:CF:4D:C6:91:7D:06:99:27
            X509v3 Authority Key Identifier:
                keyid:00:67:DC:B2:99:F6:51:AC:FA:13:34:05:9D:30:4A:D8:8A:D8:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/0067DCB299F651ACFA1334059D304AD88AD8B525.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0067DCB299F651ACFA1334059D304AD88AD8B525.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3136382e302e3235322e302f32322d3235203d3e20323632383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:c6:26:71:e8:9b:61:68:49:84:db:be:1c:bf:ae:3b:a1:
         d1:4e:7e:b2:d3:c1:c7:65:c5:32:e3:99:17:db:4a:3a:74:9a:
         7b:d3:fb:37:80:fa:60:d3:ba:65:94:1b:b3:b6:1b:08:3a:bd:
         c0:68:74:b4:8e:cf:2f:2a:84:51:83:22:9d:cb:5f:5d:e2:66:
         3c:cd:10:37:81:c3:f7:45:05:fc:be:e1:2f:01:45:aa:75:72:
         b2:71:c2:77:44:34:8a:f8:d4:36:98:e7:43:2e:b0:f9:dd:56:
         63:62:38:8d:39:cd:a0:77:4a:48:67:62:13:b2:99:33:7e:aa:
         e2:1b:e4:2f:ac:cb:cf:91:11:01:6a:b0:96:ad:d1:11:19:8c:
         75:63:19:98:a1:f1:78:d3:52:af:cd:66:78:b4:d9:45:ff:7c:
         8e:33:b4:b4:12:10:13:32:a1:6d:e0:3c:38:f5:3e:66:14:f3:
         92:72:af:18:61:4e:61:a3:6d:a3:51:29:47:91:37:55:f7:b9:
         0f:23:30:16:5b:64:48:03:5d:86:41:b2:15:b1:fa:25:cd:ab:
         e0:bd:27:5b:02:fd:57:2c:2d:71:9a:c3:90:f7:71:4b:f3:35:
         43:95:89:6f:32:9d:14:7c:5a:09:a6:55:8d:8c:ff:3a:26:03:
         23:fe:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org