Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          uyHYckFwFVQq9tiSlT02Q52S72CGphF0/psTZe9Or04=
Subject key identifier:   3E:4F:54:C6:03:90:F2:66:F3:38:09:C7:50:C8:24:3B:ED:B3:C8:16
Certificate issuer:       /CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
Certificate serial:       4C77E8E64DEE04B4511F1D93129909EF243AB0EE
Authority key identifier: FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa
Signing time:             Sat 22 Jul 2023 18:05:59 +0000
ROA not before:           Sat 22 Jul 2023 18:00:59 +0000
ROA not after:            Sat 20 Jul 2024 18:05:59 +0000
asID:                     265885
IP address blocks:        128.201.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:77:e8:e6:4d:ee:04:b4:51:1f:1d:93:12:99:09:ef:24:3a:b0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Validity
            Not Before: Jul 22 18:00:59 2023 GMT
            Not After : Jul 20 18:05:59 2024 GMT
        Subject: CN=3E4F54C60390F266F33809C750C8243BEDB3C816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:db:93:c1:9c:3d:04:46:28:b6:dd:02:87:
                    6b:42:13:91:2b:43:fc:31:29:c2:c5:ae:a3:4e:53:
                    89:0e:95:62:6f:8a:eb:88:2e:81:1f:7d:a5:4c:5c:
                    4b:32:a9:bd:38:5e:c5:71:7e:1a:d6:c1:1a:ed:6a:
                    fc:5a:e7:b7:3f:5e:1c:ef:a7:5e:27:97:38:e6:a6:
                    95:d6:ad:2a:b0:16:a5:2a:e1:4b:c8:d6:71:82:4e:
                    27:97:82:7c:70:4c:1d:82:c4:eb:4b:ad:84:a4:90:
                    0b:6c:c7:ee:de:ac:14:7f:64:97:d0:ea:42:a8:c1:
                    b3:26:fc:6a:b0:60:28:03:d6:ff:45:af:23:1a:ad:
                    42:e3:8a:ed:46:6f:af:2b:36:82:93:be:e5:cf:a3:
                    d0:a2:e9:c2:28:79:63:f5:2c:ac:dc:e3:f1:1e:41:
                    06:e7:b1:0f:9d:e5:cd:9f:56:f8:97:5d:cd:94:0b:
                    52:fc:9b:67:f3:9f:a0:a4:ef:45:45:6f:3a:2d:b0:
                    08:e9:7a:3b:7a:81:48:14:e7:f0:41:39:e5:f7:21:
                    c9:56:9e:74:06:b5:b1:0c:fe:84:d6:0b:c2:d9:13:
                    a7:cc:40:b8:da:81:57:0d:c1:8c:6b:46:f7:0c:f2:
                    66:29:a9:7a:38:9f:ad:17:75:00:2c:05:9f:12:7f:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4F:54:C6:03:90:F2:66:F3:38:09:C7:50:C8:24:3B:ED:B3:C8:16
            X509v3 Authority Key Identifier:
                keyid:FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:15:c6:42:dd:c6:4b:af:cf:7d:49:5a:b7:c9:5a:7a:aa:
         f0:c5:5b:44:9b:60:ab:d0:37:75:de:18:95:95:2e:b2:cb:e5:
         d7:75:5d:d5:63:82:2c:f5:40:a8:bd:b5:10:57:0a:e0:cc:3b:
         67:dc:8c:25:21:a4:87:1e:67:54:9f:8d:33:0c:66:77:9d:2c:
         28:0a:49:cf:b5:d1:1b:01:78:0e:8c:23:18:7a:02:3b:2a:58:
         13:88:90:00:c5:86:bf:04:39:f7:63:57:b6:f0:cb:7a:80:4a:
         0e:1a:38:14:9f:4f:0b:e8:fd:3c:ef:7d:cd:f8:fb:27:43:e7:
         bb:bf:61:6b:9a:15:b1:6f:b1:8f:29:87:c4:c5:6c:40:4b:ee:
         15:51:95:e2:46:69:93:c4:c9:d9:5e:f4:41:0a:c9:d5:35:52:
         75:e4:bf:4e:32:51:3b:df:c6:97:69:62:a1:af:83:95:93:07:
         ac:83:17:ef:dd:6f:0f:c9:aa:94:aa:5c:f4:04:1f:79:ae:8c:
         1a:10:79:89:1e:55:82:8f:f9:b5:50:a1:93:23:c9:f9:e6:69:
         e4:d0:4d:87:a6:a9:73:75:17:12:8b:6f:62:96:f8:2d:b8:42:
         fd:dc:b6:9b:54:19:b7:d1:0b:43:7b:23:a4:a3:c7:12:a8:f9:
         dc:dd:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org