Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
File:                     3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (raw, json)
Hash identifier:          sepZtHr3g/u0RVd1VHbPjYvke0aogU2PesjyoZN1Nis=
Subject key identifier:   65:BD:12:39:5A:92:A3:2E:4A:86:0B:82:1D:20:F6:25:90:E5:C3:B5
Certificate issuer:       /CN=F8DA3BB9FC614DD0CFF2678783099499201827CD
Certificate serial:       2BD033B0690C09A1734780CEC953E0289F1A9B66
Authority key identifier: F8:DA:3B:B9:FC:61:4D:D0:CF:F2:67:87:83:09:94:99:20:18:27:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8DA3BB9FC614DD0CFF2678783099499201827CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
Signing time:             Mon 13 Nov 2023 22:16:55 +0000
ROA not before:           Mon 13 Nov 2023 22:11:55 +0000
ROA not after:            Mon 11 Nov 2024 22:16:55 +0000
asID:                     265440
IP address blocks:        168.194.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d0:33:b0:69:0c:09:a1:73:47:80:ce:c9:53:e0:28:9f:1a:9b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8DA3BB9FC614DD0CFF2678783099499201827CD
        Validity
            Not Before: Nov 13 22:11:55 2023 GMT
            Not After : Nov 11 22:16:55 2024 GMT
        Subject: CN=65BD12395A92A32E4A860B821D20F62590E5C3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:15:88:d0:d6:9d:91:9d:4e:7d:73:0f:bd:
                    ac:4f:3d:f7:3e:c9:9c:29:9e:73:15:08:6a:0b:3a:
                    98:10:47:83:12:e3:d3:e3:58:b0:dd:a1:28:5c:80:
                    68:de:66:1f:21:5b:7c:66:69:e9:40:2c:c0:a6:60:
                    a3:b8:37:6e:9c:a2:cb:e6:12:5e:36:d5:30:d3:49:
                    2f:e6:8d:52:c6:81:98:6a:a8:d2:94:80:39:24:c1:
                    1e:fc:1f:ac:c2:d4:49:ea:5e:0a:95:93:06:9c:68:
                    ae:92:02:ac:c1:00:b9:df:33:de:7a:fd:d2:df:9c:
                    53:14:31:1f:5f:9c:01:b6:21:b2:b7:bb:2d:52:fc:
                    3b:cb:c6:8f:4e:32:b8:17:df:8b:06:78:20:44:f2:
                    45:63:3d:74:1a:ea:49:ea:ee:35:cc:ed:b6:30:dd:
                    9e:01:ba:5f:75:10:cf:d9:15:7d:a5:e0:b8:52:81:
                    0f:12:05:c5:80:29:09:27:55:88:a7:03:bb:b4:55:
                    ae:2c:6c:5d:92:21:62:45:1a:99:d3:b5:79:74:0d:
                    e0:b0:20:6e:96:e6:44:86:73:e3:19:78:fc:5d:14:
                    26:27:08:fb:6f:78:79:1a:4f:1d:b9:07:c1:9f:0e:
                    41:50:78:03:24:6d:ca:c0:d3:58:1c:99:01:e2:8c:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:12:39:5A:92:A3:2E:4A:86:0B:82:1D:20:F6:25:90:E5:C3:B5
            X509v3 Authority Key Identifier:
                keyid:F8:DA:3B:B9:FC:61:4D:D0:CF:F2:67:87:83:09:94:99:20:18:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/F8DA3BB9FC614DD0CFF2678783099499201827CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8DA3BB9FC614DD0CFF2678783099499201827CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:bc:3a:8e:7f:26:8e:2f:66:db:b4:86:db:0c:b3:6b:76:
         ef:cc:d8:27:41:ff:58:8e:8c:90:ca:d4:74:52:75:8c:45:b8:
         5f:08:59:22:72:d1:c8:24:a5:ae:72:21:34:66:16:51:fa:f2:
         27:c8:3b:6b:55:7a:60:2c:19:e3:79:88:74:88:f6:13:1e:a0:
         82:56:cb:26:97:c8:61:e0:d5:fe:4e:e1:48:48:3b:62:5f:d2:
         1c:a9:d2:68:b3:28:a9:c4:33:3d:10:98:52:d5:9f:10:fc:7a:
         f2:e1:87:99:46:66:52:30:ec:d8:fc:03:a5:55:12:dd:e7:21:
         52:e7:78:58:ce:1c:6b:c2:43:f2:2a:a9:5c:ca:61:9c:59:24:
         2c:46:5c:19:6b:f8:03:b5:7b:34:e3:74:b0:c2:a4:62:79:ff:
         8a:90:ee:8a:10:9c:72:20:bc:a6:c9:54:dc:48:7a:b5:1f:db:
         7b:6f:87:95:45:59:d7:98:76:62:1e:dc:af:87:30:c6:e2:3e:
         15:0c:e1:89:9c:74:a6:14:db:3a:49:99:ce:f4:88:be:7c:6a:
         fd:44:5b:1b:da:84:4d:24:4c:0b:b4:72:84:3d:94:bb:77:28:
         c0:da:7c:28:f9:06:41:6c:6c:24:da:15:8d:46:41:98:5a:63:
         5a:c5:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org