Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/3136382e3138312e3134342e302f32322d3234203d3e20323635333438.roa
File:                     3136382e3138312e3134342e302f32322d3234203d3e20323635333438.roa (raw, json)
Hash identifier:          d+1W1oJP4N3ruaGS+f5JvXwib0LyxdBrwfrtjIj/u54=
Subject key identifier:   A0:C7:75:B5:5A:47:B2:91:56:83:05:0A:8B:A8:94:C0:EF:67:66:82
Certificate issuer:       /CN=F900D18BF91FD5BDA127F152B21BFCEC4B6B1CB7
Certificate serial:       5EF232E5B8E0224FBE8A2DBDA1300FFA2536BF21
Authority key identifier: F9:00:D1:8B:F9:1F:D5:BD:A1:27:F1:52:B2:1B:FC:EC:4B:6B:1C:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F900D18BF91FD5BDA127F152B21BFCEC4B6B1CB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/3136382e3138312e3134342e302f32322d3234203d3e20323635333438.roa
Signing time:             Wed 12 Apr 2023 19:20:14 +0000
ROA not before:           Wed 12 Apr 2023 19:15:14 +0000
ROA not after:            Wed 10 Apr 2024 19:20:14 +0000
asID:                     265348
IP address blocks:        168.181.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f2:32:e5:b8:e0:22:4f:be:8a:2d:bd:a1:30:0f:fa:25:36:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900D18BF91FD5BDA127F152B21BFCEC4B6B1CB7
        Validity
            Not Before: Apr 12 19:15:14 2023 GMT
            Not After : Apr 10 19:20:14 2024 GMT
        Subject: CN=A0C775B55A47B2915683050A8BA894C0EF676682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:28:b7:b8:1e:c5:bc:13:07:2b:81:41:91:
                    36:c6:b5:17:a9:66:81:34:17:a0:72:ba:b6:24:b8:
                    51:ee:88:f5:fb:64:48:2b:ea:e2:45:33:04:92:ff:
                    75:fe:f8:22:5e:cd:87:41:12:62:6a:86:c2:6f:75:
                    01:27:70:57:42:ae:76:f7:77:29:73:1e:e1:4e:c3:
                    2a:c9:3d:7c:e4:88:a8:cd:e8:17:b9:e4:b8:c2:f7:
                    03:c2:64:1a:52:e5:bf:ce:e8:e9:48:c6:f2:d7:49:
                    1a:07:54:6e:08:da:7e:d1:7c:b8:fe:01:34:51:e6:
                    93:aa:3f:f9:cf:2c:69:af:04:20:d7:e3:a2:eb:ca:
                    c6:76:74:4c:60:9c:bc:81:05:8c:91:80:d5:e0:1d:
                    a4:bf:f9:99:4b:94:24:79:75:8e:8d:9c:f1:c3:43:
                    ef:13:ab:f4:d1:ae:1c:7b:45:ce:a4:2b:2b:33:dd:
                    00:9b:a9:e4:29:54:2a:bf:10:21:6e:71:12:8e:80:
                    9a:4e:06:dc:b0:4b:5f:a4:34:a6:75:82:33:21:40:
                    63:a2:3e:d7:5e:4e:e7:62:10:87:ad:d6:02:fb:9e:
                    8b:91:e7:35:fd:d3:2f:4d:d7:17:16:59:da:bc:8f:
                    c1:0f:c6:51:d1:18:b2:c7:56:81:58:d4:f3:24:4d:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:75:B5:5A:47:B2:91:56:83:05:0A:8B:A8:94:C0:EF:67:66:82
            X509v3 Authority Key Identifier:
                keyid:F9:00:D1:8B:F9:1F:D5:BD:A1:27:F1:52:B2:1B:FC:EC:4B:6B:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/F900D18BF91FD5BDA127F152B21BFCEC4B6B1CB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F900D18BF91FD5BDA127F152B21BFCEC4B6B1CB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/3136382e3138312e3134342e302f32322d3234203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:5e:d9:c8:6c:f8:4c:b0:3a:1b:d0:33:f5:bd:cb:14:f7:cc:
         45:58:a8:fc:29:5d:99:ce:57:32:b8:33:20:18:18:0a:df:49:
         6f:9f:2b:9b:dc:6a:e9:36:2b:b8:d8:c9:5c:60:59:e7:e5:cd:
         46:ef:3d:3f:a4:25:38:66:f6:4f:43:5b:78:6f:47:f5:45:29:
         06:69:62:b0:85:54:f5:63:7d:f2:df:23:36:8b:2b:7f:ca:28:
         2b:ef:97:ae:37:e5:56:c2:2d:2f:0d:f2:7a:33:a4:6d:18:25:
         79:65:4e:c1:0a:6e:4b:e9:c6:aa:7b:3a:ce:fb:de:f6:7a:a1:
         d8:b0:5d:ef:9d:ef:f4:36:86:ce:7a:3f:f0:d7:14:d9:65:b5:
         ab:5b:50:22:7c:fd:96:06:94:b8:21:08:62:10:4d:a0:ea:c6:
         5f:a8:c6:9b:37:0c:84:d4:d0:9f:0e:15:16:a8:29:76:11:23:
         d6:db:1a:4e:f2:61:15:7c:03:a0:c0:87:51:33:da:02:ba:b2:
         1d:4c:44:a0:ed:a2:f7:d6:51:42:4b:ec:c4:1f:7a:d0:3c:97:
         77:11:23:c9:7d:1c:70:2e:ac:3d:f0:22:3a:87:48:5a:9f:b8:
         8b:86:a4:19:54:30:ae:50:dd:27:a6:64:d1:23:05:28:54:86:
         8c:14:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org