Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa (raw, json)
Hash identifier:          xY8k8j03kso9c92rQhnXR9r+FjRiDtt8LaoV+kX6V9s=
Subject key identifier:   1C:E0:4C:18:8D:CD:10:CD:BD:07:6D:01:68:87:57:0F:E1:E0:DD:E1
Certificate issuer:       /CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
Certificate serial:       173A94F557F152792C43C299E5C0EE193E87D0A7
Authority key identifier: FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa
Signing time:             Sat 22 Jul 2023 18:06:00 +0000
ROA not before:           Sat 22 Jul 2023 18:01:00 +0000
ROA not after:            Sat 20 Jul 2024 18:06:00 +0000
asID:                     265885
IP address blocks:        128.201.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3a:94:f5:57:f1:52:79:2c:43:c2:99:e5:c0:ee:19:3e:87:d0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Validity
            Not Before: Jul 22 18:01:00 2023 GMT
            Not After : Jul 20 18:06:00 2024 GMT
        Subject: CN=1CE04C188DCD10CDBD076D016887570FE1E0DDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d9:a7:a4:2f:2e:4b:b8:25:92:b9:e2:16:13:
                    dd:19:c1:2a:bd:59:b3:d7:e7:56:3a:11:72:49:43:
                    14:28:31:3b:47:d4:30:4d:a7:88:1d:91:1c:48:b7:
                    84:6d:d8:25:44:48:33:ee:74:b3:34:b4:ca:c6:30:
                    ac:28:d7:cb:8e:f4:c5:a1:f9:b1:a8:49:e5:eb:b1:
                    db:da:77:77:8c:fa:53:04:35:11:97:06:eb:e4:e3:
                    fb:ad:e8:b5:40:00:e3:eb:cc:2f:a9:dd:48:69:31:
                    e9:c7:d5:18:2e:21:f7:a0:d9:db:38:bf:66:75:84:
                    b3:24:ab:ef:dc:e4:2d:e5:cf:5f:4d:8e:54:62:db:
                    42:24:ca:24:12:6a:a8:64:f7:98:7e:d3:1e:23:3e:
                    95:77:d2:84:56:5b:d1:41:1d:17:c4:c0:39:b4:e2:
                    4d:0c:04:de:e5:cc:9f:5b:d6:ba:8c:f7:10:d5:b2:
                    f3:e2:21:da:14:ba:92:37:72:2d:ce:1f:f8:50:95:
                    56:b4:50:45:38:ca:35:5a:f8:64:92:be:fb:24:a7:
                    24:9f:98:ed:f0:81:23:d9:9a:f3:b3:a1:27:d6:42:
                    c8:21:7c:f6:6b:ac:68:8f:5c:d1:29:fc:0d:1e:95:
                    3f:da:25:a5:13:f4:c8:76:43:ba:7a:87:8e:b0:99:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E0:4C:18:8D:CD:10:CD:BD:07:6D:01:68:87:57:0F:E1:E0:DD:E1
            X509v3 Authority Key Identifier:
                keyid:FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:d9:17:a6:14:3c:61:d1:b1:24:03:a9:77:0e:41:ce:bb:
         43:0a:28:d2:a7:94:4d:3a:92:2e:1a:7e:99:82:af:d4:e2:e5:
         40:ea:68:e0:b3:65:67:e5:c3:7c:2f:c3:38:af:5b:e7:6b:7d:
         58:68:d9:a8:80:ca:f9:73:da:2c:c2:ba:bb:5d:fa:76:c6:db:
         2f:b5:ea:f5:f1:15:b6:4f:ab:fc:88:10:a9:c7:27:a5:29:de:
         b8:c3:37:92:7b:ee:7c:0b:1c:fb:de:b8:ea:8b:58:a4:9b:ce:
         eb:bc:77:24:95:4e:ba:44:d1:ba:3b:73:f5:71:42:a7:d0:1b:
         73:7a:b2:c1:e0:c2:a1:8d:33:f9:70:fa:c4:2f:05:af:be:54:
         4c:39:94:e3:29:76:41:d2:c1:50:54:e9:0e:f7:c8:ea:9c:36:
         ee:e5:a3:1d:56:64:06:d3:89:9a:19:b7:46:9c:ca:49:8f:39:
         2b:f6:5f:4d:f0:27:41:db:9b:d9:b8:7a:5d:ce:e0:76:db:be:
         00:15:57:c3:f5:67:3f:0c:41:8b:70:2c:86:21:fa:e7:08:5b:
         8f:6d:cf:6b:6e:6c:6e:3c:83:6f:cf:0f:80:f0:6a:f7:bc:e4:
         84:a9:82:69:ca:84:53:e6:78:13:e1:1d:7e:38:87:8b:d1:cb:
         0f:33:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org