Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa (raw, json)
Hash identifier:          /de/7pFdT4aVLihpdegg7wwLd1hqgDEGEX0aw0OFuXg=
Subject key identifier:   AD:36:74:75:9E:1B:33:0B:7A:2F:52:FB:EA:90:17:38:4A:41:C5:87
Certificate issuer:       /CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
Certificate serial:       33CF8332F6FE7B5FEBB14157BB850239A76D8778
Authority key identifier: FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa
Signing time:             Sat 22 Jul 2023 18:06:01 +0000
ROA not before:           Sat 22 Jul 2023 18:01:01 +0000
ROA not after:            Sat 20 Jul 2024 18:06:01 +0000
asID:                     265885
IP address blocks:        128.201.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:83:32:f6:fe:7b:5f:eb:b1:41:57:bb:85:02:39:a7:6d:87:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Validity
            Not Before: Jul 22 18:01:01 2023 GMT
            Not After : Jul 20 18:06:01 2024 GMT
        Subject: CN=AD3674759E1B330B7A2F52FBEA9017384A41C587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:d2:44:6b:f8:6f:cd:6c:e6:5f:6c:52:94:
                    d4:96:72:07:62:f3:e4:d1:b8:a3:04:83:93:57:d8:
                    5a:3f:b3:1f:28:41:6b:e3:b8:e2:a5:a4:ef:99:8e:
                    c0:98:4d:74:80:d8:ec:bc:ed:25:e3:62:4c:72:1a:
                    08:00:2a:c9:13:d6:dd:61:2b:34:1c:3d:81:a8:21:
                    6a:ac:4e:5e:9e:2a:63:bc:6c:3c:b5:82:4f:da:38:
                    9d:60:db:b1:5d:65:0e:ce:d4:26:06:4b:a9:b3:db:
                    5b:a4:c8:9c:fb:0c:14:9f:e0:8a:b9:2a:b4:28:5d:
                    95:e6:c4:e3:3a:5d:71:85:ee:e5:4e:1e:55:22:93:
                    5a:35:9a:f8:f3:6b:bd:37:d2:ef:88:72:6a:f1:da:
                    1c:3c:f2:82:63:0e:24:9a:6c:98:6b:9a:d9:f1:0d:
                    44:84:12:5d:3d:18:56:52:76:e5:54:1b:1b:e2:84:
                    e0:93:23:b5:c2:84:0e:48:6c:99:4f:bf:68:75:2e:
                    04:4e:68:31:dd:18:1d:36:3b:87:9e:3a:8f:e7:33:
                    ef:9f:ae:85:21:c5:2b:16:1d:8e:8f:cf:1b:75:66:
                    f9:7d:5f:7c:fb:a3:3a:08:db:f9:43:e7:3b:d2:db:
                    a9:28:26:70:f7:af:9d:f8:dc:81:70:ee:b2:96:a9:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:74:75:9E:1B:33:0B:7A:2F:52:FB:EA:90:17:38:4A:41:C5:87
            X509v3 Authority Key Identifier:
                keyid:FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:24:49:b2:bd:88:17:43:e0:aa:96:f7:59:50:b4:53:5e:7b:
         2e:c6:a5:1b:65:d3:c3:02:55:39:44:4f:6b:1b:04:89:96:37:
         4f:80:8c:58:72:88:43:c3:d1:ce:0c:11:2e:74:95:57:19:59:
         58:f3:ef:40:ef:79:9a:21:c1:7d:a3:a9:66:33:e4:9b:92:e2:
         10:b8:4f:e9:5b:26:ce:17:1f:3a:b1:94:a8:34:69:61:f8:dd:
         33:ee:a8:91:15:47:5c:1d:f0:4e:48:60:c2:55:d6:8d:52:38:
         98:0f:6c:85:bd:91:7b:ed:74:9a:19:e9:9a:ae:76:3f:fd:0c:
         72:9e:75:86:6f:ca:bc:70:b5:af:79:15:fd:96:b0:94:83:06:
         1d:cc:e8:b4:a6:a6:99:3f:4d:5a:6e:a2:78:48:ea:80:a4:5c:
         01:d0:57:80:0d:95:e5:ca:68:3c:8a:e6:b1:fc:2b:f0:de:7e:
         97:35:4b:9b:63:99:31:38:cf:c2:e1:79:28:68:61:11:d6:c3:
         ee:aa:3a:ad:df:c4:ea:2b:07:54:b6:72:2e:c8:db:7c:22:cc:
         49:db:21:99:d0:14:52:11:6f:5d:63:3d:a7:9a:7f:3e:f7:35:
         7f:87:f4:06:db:3e:76:87:d0:30:11:b0:e2:11:18:ab:1b:ad:
         e9:7d:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org