Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3234203d3e20323636333934.roa
File:                     3137302e38312e37362e302f32322d3234203d3e20323636333934.roa (raw, json)
Hash identifier:          5Bwg7RSA3csNAJCAhIVqQiCN858vIPpX6RVgmdWSORM=
Subject key identifier:   FB:EC:1B:2A:5D:E7:D0:12:1F:48:79:A4:1C:FA:09:2E:B1:E1:F7:C6
Certificate issuer:       /CN=FC08546012DBB8FBB52697DB7520556A0E251895
Certificate serial:       3CD1DDDFBCE2E73F3A47C57A36B5AA22AC9508C4
Authority key identifier: FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3234203d3e20323636333934.roa
Signing time:             Thu 01 Dec 2022 13:20:14 +0000
ROA not before:           Thu 01 Dec 2022 13:15:14 +0000
ROA not after:            Thu 30 Nov 2023 13:20:14 +0000
asID:                     266394
IP address blocks:        170.81.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d1:dd:df:bc:e2:e7:3f:3a:47:c5:7a:36:b5:aa:22:ac:95:08:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC08546012DBB8FBB52697DB7520556A0E251895
        Validity
            Not Before: Dec  1 13:15:14 2022 GMT
            Not After : Nov 30 13:20:14 2023 GMT
        Subject: CN=FBEC1B2A5DE7D0121F4879A41CFA092EB1E1F7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:91:b0:15:e2:db:d2:e5:81:32:df:9e:32:56:
                    64:32:c3:dc:75:c1:70:9e:0b:53:92:24:03:61:0b:
                    6a:c1:28:5f:3a:c4:c2:2e:d6:64:0c:21:f6:17:e0:
                    f3:7b:0c:48:ee:32:49:13:8f:7a:8c:1c:8e:63:d5:
                    7a:a6:e9:85:9e:12:1d:ce:8d:b9:4a:55:59:23:50:
                    72:13:74:7b:15:d3:9e:4b:65:ae:cd:9b:48:d8:97:
                    16:16:d3:53:cb:de:38:84:5e:ff:0d:a3:c4:7a:1d:
                    cb:61:cc:5b:f0:99:42:73:3d:cf:43:3c:06:fa:a4:
                    47:09:6c:7e:76:35:cc:13:08:0e:ca:f5:86:08:86:
                    6b:7c:b8:84:c8:dc:30:ff:47:42:53:cb:51:87:7a:
                    cd:74:77:8a:d1:f3:1c:5a:0a:bb:f1:64:80:00:4c:
                    4b:90:4d:7e:37:fa:4b:29:e1:5c:9d:77:e4:7f:16:
                    d9:b2:95:df:c8:03:f7:35:ed:1c:ca:d8:02:13:e4:
                    c5:c2:08:d0:fb:64:d1:bd:ad:3c:a5:76:7d:e1:17:
                    8b:f6:6c:91:42:0d:88:2f:24:03:84:28:d2:73:3d:
                    f1:d6:84:99:f1:1f:1b:13:0f:ac:6d:70:09:ce:05:
                    8d:6c:e4:90:1f:d8:91:57:92:20:54:37:ed:84:e0:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:1B:2A:5D:E7:D0:12:1F:48:79:A4:1C:FA:09:2E:B1:E1:F7:C6
            X509v3 Authority Key Identifier:
                keyid:FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/FC08546012DBB8FBB52697DB7520556A0E251895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3234203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ee:49:1c:11:1e:48:7d:f5:c3:22:71:b2:a6:a6:5c:5b:9b:
         fd:38:93:c8:12:b6:be:7a:02:0c:f3:a4:64:4d:4f:a8:14:bf:
         73:20:09:d0:a6:d9:d8:db:f8:aa:ca:75:52:10:72:2a:a9:aa:
         65:37:4d:82:fd:39:66:76:88:89:8f:9d:29:0c:5f:6a:cb:4e:
         93:1e:02:14:18:68:6f:d4:50:fa:7c:91:bc:7a:e5:fc:7b:93:
         51:15:45:22:9d:1a:69:70:f8:d6:49:a8:1d:f2:9e:57:b9:db:
         a1:b2:94:11:15:47:68:d2:41:3c:dc:fb:62:a5:bd:9a:da:e8:
         e8:6a:0c:65:3d:45:e6:f9:38:45:43:c5:80:43:eb:40:50:85:
         15:a1:c3:8a:fa:6d:2f:6c:24:ef:64:a9:88:4b:7a:20:6a:c2:
         bf:70:c4:24:c3:eb:bf:fa:19:40:7f:42:c1:04:ba:fd:eb:89:
         1e:a3:7a:66:45:16:3f:0f:f6:ee:60:e8:eb:e9:68:93:65:2f:
         41:e0:66:04:9d:d7:77:52:9e:f6:2f:43:70:46:6e:92:8f:00:
         ef:93:f7:a5:90:4e:d7:9c:39:f4:fa:e7:6b:b7:04:ac:be:9c:
         89:f1:06:9c:4e:21:a4:c6:08:9f:4d:b2:eb:93:b1:cb:16:7d:
         6e:d5:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:23 2023 by rpki-client on console.sobornost.net