Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3136382e3232382e3132302e302f32322d3233203d3e20323632363938.roa
File:                     3136382e3232382e3132302e302f32322d3233203d3e20323632363938.roa (raw, json)
Hash identifier:          3MCTW7EIz+8HPyA7oeAGrojGngNrx5jOh6E9xoima30=
Subject key identifier:   99:B8:95:C4:F8:8E:90:BA:1B:55:4E:1C:EB:A7:9D:C9:5D:69:70:ED
Certificate issuer:       /CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
Certificate serial:       05A4DC38FA2E01E8CA87FF17B4B7B273E1AF4E93
Authority key identifier: FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3136382e3232382e3132302e302f32322d3233203d3e20323632363938.roa
Signing time:             Mon 14 Aug 2023 11:46:28 +0000
ROA not before:           Mon 14 Aug 2023 11:41:28 +0000
ROA not after:            Mon 12 Aug 2024 11:46:28 +0000
asID:                     262698
IP address blocks:        168.228.120.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a4:dc:38:fa:2e:01:e8:ca:87:ff:17:b4:b7:b2:73:e1:af:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
        Validity
            Not Before: Aug 14 11:41:28 2023 GMT
            Not After : Aug 12 11:46:28 2024 GMT
        Subject: CN=99B895C4F88E90BA1B554E1CEBA79DC95D6970ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:f2:0a:c1:2c:2c:a5:c1:b1:b9:37:f4:81:
                    25:e1:d4:b9:c4:ab:1c:a5:f2:51:5d:21:5c:54:70:
                    bd:a5:e1:2c:66:fd:55:b9:c2:f3:73:c0:bc:e5:32:
                    84:49:d2:a7:d0:2b:0f:ba:be:db:c8:a5:8f:5b:3c:
                    9f:73:8d:58:ea:07:d9:63:7a:cb:3f:f1:e4:63:b7:
                    eb:92:b6:db:95:ef:e8:8c:14:92:84:30:5b:11:d1:
                    1f:4b:4d:7d:b5:fc:c9:d5:0e:1c:5e:39:dd:34:eb:
                    c7:1e:00:e7:c2:3d:7e:2f:a9:a0:34:72:d6:80:6c:
                    18:f3:d1:43:8f:ed:b1:39:ef:0f:d5:1c:08:bd:aa:
                    d7:d0:65:91:f9:91:44:59:3d:ef:b8:b5:3e:ff:e2:
                    4a:1e:f9:55:96:48:ae:1d:69:d7:15:e5:0f:d3:1f:
                    84:31:a6:13:53:0b:96:91:c9:b2:0a:f5:92:2b:a2:
                    6a:6b:a3:ae:e8:c0:9d:11:b2:e4:39:95:45:fd:0c:
                    ff:ec:38:a9:90:03:2e:76:74:4e:15:31:90:96:11:
                    95:c4:ef:b0:70:29:ae:99:6c:5d:0a:0c:51:ed:9a:
                    99:6e:0a:e7:29:08:dc:b5:d8:76:c7:9c:a4:dc:47:
                    08:3b:87:af:ff:f4:03:5d:f5:1b:c7:c1:24:91:1a:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B8:95:C4:F8:8E:90:BA:1B:55:4E:1C:EB:A7:9D:C9:5D:69:70:ED
            X509v3 Authority Key Identifier:
                keyid:FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3136382e3232382e3132302e302f32322d3233203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:70:79:8e:67:85:3a:e2:78:bb:a2:b7:e5:8c:e0:75:a0:
         22:ef:f7:60:d1:c5:c1:68:95:c4:fb:1f:50:60:ac:1e:c2:e2:
         05:b2:e7:21:e7:c2:98:43:84:3c:e0:07:16:aa:8a:71:93:25:
         5c:18:95:4c:54:9b:92:c3:0b:79:f2:c6:be:62:ce:8f:fe:b6:
         10:82:90:74:ac:d3:6c:c1:29:3c:a6:82:dd:c9:de:27:23:f6:
         f4:a0:f8:ee:e0:6f:c8:91:1b:e0:0a:3d:42:bb:08:95:9e:f2:
         22:be:71:9c:cb:96:34:16:f5:40:35:88:75:e1:c2:41:e5:03:
         13:a6:6f:97:30:77:ee:94:03:a5:f3:3c:42:5e:12:19:9e:fe:
         14:e7:e3:18:ae:d7:f6:a0:ce:1a:ab:b3:35:f3:de:00:46:b9:
         26:ea:d2:03:05:ae:7c:b1:ff:00:cd:89:d5:95:9e:00:b2:4b:
         4f:1a:16:ff:40:0e:8c:e6:bc:97:87:72:8b:44:eb:a4:1c:df:
         bc:38:8c:55:18:31:bf:cc:b5:69:1e:b8:c1:48:9b:aa:8a:5d:
         fc:5a:b5:2b:f3:4f:f9:ef:49:d5:b4:16:52:cd:15:18:f2:98:
         c9:d3:3d:03:f0:fb:28:7d:cf:c4:c2:a6:f5:f8:00:5a:0d:0e:
         bb:f2:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org