Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3232203d3e20323635313734.roa
File:                     3136372e3234392e3230342e302f32322d3232203d3e20323635313734.roa (raw, json)
Hash identifier:          Nnp4p6PNwHQE8XaGnHy4kdG9z8gVL+BKBpVQvG9d680=
Subject key identifier:   6D:48:1C:54:4E:00:CE:19:CF:F1:37:35:61:C5:E6:91:AD:16:C8:EF
Certificate issuer:       /CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
Certificate serial:       2528EBF5CC3AEF9DDE779FFC2938AD934DA1386B
Authority key identifier: BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3232203d3e20323635313734.roa
Signing time:             Wed 08 Mar 2023 12:03:10 +0000
ROA not before:           Wed 08 Mar 2023 11:58:10 +0000
ROA not after:            Wed 06 Mar 2024 12:03:10 +0000
asID:                     265174
IP address blocks:        167.249.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:28:eb:f5:cc:3a:ef:9d:de:77:9f:fc:29:38:ad:93:4d:a1:38:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
        Validity
            Not Before: Mar  8 11:58:10 2023 GMT
            Not After : Mar  6 12:03:10 2024 GMT
        Subject: CN=6D481C544E00CE19CFF1373561C5E691AD16C8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:c0:e9:ed:3d:ec:c8:8e:15:06:48:a9:9b:
                    10:cb:4f:dd:e1:9b:66:ae:00:b4:76:2d:71:3d:35:
                    3e:83:9e:a1:60:18:38:8d:17:0f:d6:9b:d5:b3:35:
                    09:78:05:a0:19:bd:e0:fb:0f:4a:ba:9b:14:86:17:
                    ff:c5:22:aa:fe:a4:1a:55:1d:27:21:53:fd:c4:4a:
                    d4:57:df:1e:97:78:d6:36:c9:68:55:be:bb:b7:af:
                    a7:2e:36:e3:d8:92:cd:e9:b3:fa:75:2d:fd:10:7e:
                    0e:ed:b6:23:25:34:0b:23:64:e7:71:4b:2a:83:82:
                    e3:aa:a6:13:1e:95:14:d5:d6:93:a9:3d:6e:af:f3:
                    5c:f8:90:5e:60:35:7a:c2:64:49:17:8f:96:13:ca:
                    cb:b0:ab:0c:f3:fc:b7:52:c6:43:47:7d:1d:ff:8d:
                    e5:b4:6c:4b:96:97:10:09:ab:83:05:17:88:e7:11:
                    90:06:34:d0:fb:2f:90:aa:8a:17:4e:16:3a:17:9d:
                    24:7c:b9:05:de:70:30:5d:b3:84:d5:8e:86:8a:54:
                    7e:f5:6b:0e:e5:2c:6a:98:06:cf:1f:01:34:5e:1b:
                    9f:d1:11:03:d0:04:d5:4b:95:f8:98:2a:35:b0:c7:
                    11:a0:70:d5:a4:ec:fa:5f:ce:0c:d2:d1:d9:20:25:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:48:1C:54:4E:00:CE:19:CF:F1:37:35:61:C5:E6:91:AD:16:C8:EF
            X509v3 Authority Key Identifier:
                keyid:BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3232203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:86:85:6b:9c:c2:ad:c9:b9:80:d3:dd:6e:3a:cd:5d:e4:
         6c:68:f4:1b:ea:df:0c:12:c6:36:34:84:3b:85:f2:43:cc:d8:
         bc:d8:7e:71:96:2f:b5:5a:2f:4b:71:32:0c:13:81:a6:87:12:
         2c:62:0a:d9:a3:47:9c:be:b3:f0:a2:71:e2:7a:5c:5b:64:d6:
         aa:bd:3b:89:f2:50:66:d9:a0:1e:5d:52:89:72:cb:f4:92:67:
         6d:c0:ef:d5:da:e2:53:1f:c2:ab:bf:99:2d:92:c6:75:19:a1:
         3a:3a:a1:41:86:c5:e7:d3:ca:2f:c1:29:b4:e5:97:dd:bd:79:
         71:6f:94:86:be:a5:05:c2:2d:23:e8:54:99:aa:70:79:b6:e5:
         25:82:04:d7:ae:9a:e6:82:d8:0e:53:1f:b4:cd:c6:16:85:3b:
         55:77:73:79:04:cf:70:38:f4:0c:4b:42:87:54:52:ca:59:0e:
         b1:b7:31:cf:ce:28:35:e9:3b:7d:98:54:f6:ca:66:03:a5:3e:
         7f:e2:f0:a9:e9:af:01:4f:41:99:10:af:ed:9e:4e:52:4f:a3:
         4a:f3:d6:b5:b4:fe:0a:ae:60:f7:8f:36:06:b1:20:32:7d:f0:
         34:bb:54:35:04:d5:ab:a4:56:88:c7:07:bf:d4:b8:21:24:3d:
         a2:67:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org