Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234352e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234352e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          Vppx/MHGAP5SnKeWF6I/ZXKgzQyQdMIwY23KYS1G5+A=
Subject key identifier:   4A:B3:C8:FD:CE:7E:FE:A5:22:63:5D:F0:EB:53:AE:04:F0:17:E5:58
Certificate issuer:       /CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
Certificate serial:       6E192431CC7AC068E9E3F05FDED9BD77F92C6168
Authority key identifier: FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234352e302f32342d3234203d3e20323635383835.roa
Signing time:             Sat 22 Jul 2023 18:05:59 +0000
ROA not before:           Sat 22 Jul 2023 18:00:59 +0000
ROA not after:            Sat 20 Jul 2024 18:05:59 +0000
asID:                     265885
IP address blocks:        128.201.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:19:24:31:cc:7a:c0:68:e9:e3:f0:5f:de:d9:bd:77:f9:2c:61:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Validity
            Not Before: Jul 22 18:00:59 2023 GMT
            Not After : Jul 20 18:05:59 2024 GMT
        Subject: CN=4AB3C8FDCE7EFEA522635DF0EB53AE04F017E558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:14:8b:70:85:15:a4:ed:e2:32:3b:cc:da:
                    13:6f:5b:e5:e1:74:ae:5f:80:4c:f3:56:99:17:aa:
                    0b:fd:df:5f:99:8d:4a:76:9f:23:d6:23:ba:4d:86:
                    42:e2:45:27:62:5f:09:16:7c:7c:fd:5f:b0:d4:e5:
                    91:f9:ca:e9:01:b1:47:34:b1:ae:9d:f3:15:ce:1e:
                    6b:3d:1e:f7:75:1e:6d:ea:f4:00:43:30:50:06:a4:
                    a7:be:70:10:b1:1c:e4:ce:24:cc:30:45:43:6f:fa:
                    98:db:ad:09:7b:33:b6:09:a9:e0:77:53:65:6c:86:
                    86:92:62:81:d7:13:d4:9c:0d:5a:8d:40:6b:cb:29:
                    5c:d1:76:66:25:ef:77:df:d1:96:0c:ab:ac:dc:35:
                    26:36:7f:1b:13:54:ff:18:58:5a:b5:dc:ac:a0:45:
                    f2:e4:f6:94:bd:5c:0f:97:35:a6:7a:71:34:18:b9:
                    d8:63:96:85:29:ca:d7:6a:56:a9:ee:9f:88:de:4f:
                    70:89:fd:0d:54:ff:de:6a:91:cb:50:52:d9:35:49:
                    4f:0f:31:8b:12:b9:8f:b6:02:6a:d6:bc:6a:5b:3f:
                    09:9d:39:5f:32:01:09:67:5a:d4:48:15:ab:39:00:
                    5b:c1:f6:fd:3d:87:0b:84:b3:63:e7:e4:0d:85:3b:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B3:C8:FD:CE:7E:FE:A5:22:63:5D:F0:EB:53:AE:04:F0:17:E5:58
            X509v3 Authority Key Identifier:
                keyid:FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234352e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:20:1c:6b:b2:7b:0a:db:5b:8f:1b:ec:74:4f:5a:0b:e8:
         8a:5e:b4:e5:6c:a6:c3:ad:85:58:b3:fc:72:72:81:21:69:92:
         0d:2a:67:61:bf:a3:e4:50:7c:e6:3d:62:1d:50:ad:74:6f:3d:
         54:83:4e:5d:23:60:8a:8f:a0:2a:00:a8:dc:c0:38:e9:7e:a7:
         c8:b8:85:21:bb:9d:a8:53:bb:cf:b3:bd:fc:8b:85:87:8c:57:
         2b:72:33:9f:27:a7:44:71:0f:32:b5:ad:3f:cd:f3:ca:09:0f:
         47:40:aa:07:07:2e:10:5e:11:2b:f9:38:29:9d:ef:08:7a:a8:
         61:7e:5b:73:b1:99:39:20:27:3a:2a:9c:1d:1b:9d:d2:ef:44:
         fe:83:ef:27:b9:84:d3:4d:28:e7:9a:72:b5:65:d0:93:68:29:
         a6:d3:9f:6a:c4:37:38:e4:3e:7f:70:b9:7f:b6:81:53:cf:75:
         ea:54:3e:ed:ee:57:1f:16:81:79:2e:d4:83:10:a5:18:8d:2e:
         db:63:c3:a8:8b:26:3b:b5:9b:09:50:95:f4:e6:21:33:03:bb:
         7e:29:27:df:98:7a:55:91:31:fb:c7:f3:ff:76:1d:7c:7b:5c:
         c1:f6:b8:cf:92:03:b5:4d:6c:c5:61:a4:c2:f9:c6:47:fb:6c:
         15:46:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org