Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138372e3132312e3132382e302f32302d3234203d3e203232363839.roa
File:                     3138372e3132312e3132382e302f32302d3234203d3e203232363839.roa (raw, json)
Hash identifier:          9L9PuynoRg1O/4DLmZ96MKwHNhpsdqyggYA1GyuSfdU=
Subject key identifier:   04:07:3D:E1:18:3B:EC:F5:0D:F8:3C:14:CA:60:1B:14:5E:2A:AC:7D
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       047B20B51CDFBAE65579F6CDC6CB78CEB98A87B4
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138372e3132312e3132382e302f32302d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:03 +0000
ROA not before:           Tue 20 Feb 2024 16:52:03 +0000
ROA not after:            Tue 18 Feb 2025 16:57:03 +0000
asID:                     22689
IP address blocks:        187.121.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7b:20:b5:1c:df:ba:e6:55:79:f6:cd:c6:cb:78:ce:b9:8a:87:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:03 2024 GMT
            Not After : Feb 18 16:57:03 2025 GMT
        Subject: CN=04073DE1183BECF50DF83C14CA601B145E2AAC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:28:be:e6:0f:fa:64:e7:10:5b:97:99:d6:
                    33:9f:4d:ef:1b:69:b9:7b:e1:d4:73:7c:ab:4a:b7:
                    5c:c9:25:2f:3c:09:9d:24:8a:0b:51:7a:e0:6b:cc:
                    8c:12:df:52:68:01:e7:20:73:1f:f7:89:f0:a2:e2:
                    82:f5:dc:ac:70:97:ee:9b:b9:07:28:99:56:6f:3d:
                    01:35:ec:85:83:0f:8b:11:9f:39:2a:e2:91:51:58:
                    80:dc:7f:bb:f8:08:41:35:f2:25:53:0e:8a:13:b0:
                    0c:b9:d2:f7:25:1b:1f:bb:01:41:00:53:4d:e1:52:
                    c4:5d:3d:d9:aa:67:b4:6b:b3:4a:ab:e8:99:33:12:
                    90:31:f8:80:3b:48:71:17:b9:b6:f9:e2:10:c0:e1:
                    25:1d:19:fc:82:0b:ea:5a:03:7c:af:0e:33:9d:66:
                    02:57:16:59:60:16:5a:fc:79:2c:80:84:41:45:f2:
                    dd:26:93:ed:d4:62:a2:3f:06:db:05:d2:bf:2d:de:
                    a5:a4:b5:32:6e:f4:c8:5a:e8:5a:3a:88:f7:fe:1d:
                    f6:18:19:cb:5b:1f:fd:84:37:86:4e:cd:a0:7b:3c:
                    d5:b0:ca:d3:d7:5f:20:53:26:03:51:10:6d:63:16:
                    bc:b3:13:b1:aa:b2:fd:74:9d:67:8b:2b:48:1f:23:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:07:3D:E1:18:3B:EC:F5:0D:F8:3C:14:CA:60:1B:14:5E:2A:AC:7D
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138372e3132312e3132382e302f32302d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:a6:1b:c8:5c:42:17:4d:b4:ea:6c:8b:e7:8a:f9:39:19:
         91:47:30:7d:7b:29:66:e9:53:59:2d:e5:ac:25:c3:5b:b6:5c:
         00:5b:ac:2c:e9:1a:ed:80:e8:3c:65:57:ef:c1:99:05:d6:c3:
         c4:61:dd:2c:cf:36:32:32:16:86:ef:c6:fd:80:bb:2e:e9:4b:
         41:bd:33:83:89:48:21:e4:b6:1e:95:44:1e:e9:99:1c:c2:a5:
         1e:5b:41:fb:e4:a8:1b:2c:90:7e:89:41:66:c6:47:6a:7d:fd:
         b5:33:09:b6:32:62:36:e3:5a:41:50:23:6d:1c:e1:79:f9:cd:
         7a:19:79:2d:99:46:c4:af:cd:a8:42:7d:82:83:38:6b:b0:49:
         1e:e4:78:77:8c:1e:c3:cb:d9:c2:0c:7c:74:47:b1:d2:ca:35:
         66:56:82:69:f0:fb:e5:f4:f2:ae:af:20:1b:9b:2c:86:00:6f:
         79:ca:9d:f3:6d:68:34:a0:33:1b:0f:50:a0:0f:09:af:f2:34:
         d8:80:64:a7:b1:0c:87:3c:cf:36:e3:db:23:41:8c:7b:f3:2a:
         ed:21:16:f1:82:aa:fd:08:a1:9e:4f:07:fd:9a:72:36:18:68:
         ff:c4:97:1a:f1:1f:10:db:57:2c:00:80:54:5a:de:f7:c8:f5:
         ce:49:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org