Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          Vx+RvN8QfrAGRR3JbnYloOQ0etkV8QIz887AmOhOv00=
Subject key identifier:   A6:BD:6C:6B:81:F3:7A:10:60:8A:B1:63:62:F8:FE:96:FF:49:DE:75
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       231B84280AFB824DF941768786EDAC9AD652C21D
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:44 +0000
ROA not before:           Thu 04 Apr 2024 05:58:44 +0000
ROA not after:            Thu 03 Apr 2025 06:03:44 +0000
asID:                     265010
IP address blocks:        170.84.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1b:84:28:0a:fb:82:4d:f9:41:76:87:86:ed:ac:9a:d6:52:c2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:44 2024 GMT
            Not After : Apr  3 06:03:44 2025 GMT
        Subject: CN=A6BD6C6B81F37A10608AB16362F8FE96FF49DE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:f9:65:8f:07:19:8f:71:a2:e7:ac:6f:47:
                    1c:fb:cf:20:7d:78:86:43:d2:44:60:1f:11:42:cf:
                    68:9c:cc:7f:2f:98:d8:da:79:23:5c:fa:f8:5d:34:
                    b4:a0:84:ff:12:1d:f5:7c:f9:93:3b:73:38:50:6e:
                    fc:49:fc:bc:7d:90:8d:d8:82:db:c3:67:7d:18:fc:
                    ac:40:a6:07:c4:0f:9b:56:bb:8f:85:a1:f2:fe:3a:
                    95:0b:d7:29:47:37:b6:ec:5c:23:f4:4d:2c:5d:9f:
                    2c:9e:72:14:f1:21:f1:81:d0:12:08:ab:02:b3:63:
                    02:b8:87:33:4e:ed:b0:56:7d:24:5c:df:d4:7a:b7:
                    99:92:a1:74:bb:df:59:f3:03:39:74:b8:f4:7f:26:
                    0d:23:a4:1b:61:9e:bb:93:b0:4a:12:cb:2c:5b:d1:
                    fa:ab:94:5a:b0:4a:c1:ed:d7:14:17:49:59:56:1e:
                    ee:d5:01:29:96:e7:65:e2:92:b2:3a:69:d8:3a:99:
                    a6:c2:b5:15:cb:34:e6:c3:87:83:c2:87:5d:4e:ba:
                    ef:3e:8d:03:be:be:07:23:4b:93:46:35:d1:6d:2b:
                    4e:ce:c3:92:ef:b1:99:07:06:4c:e9:b7:3a:44:ed:
                    5a:76:b8:b4:e8:ab:36:52:cf:f7:9f:14:0c:07:4a:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:6C:6B:81:F3:7A:10:60:8A:B1:63:62:F8:FE:96:FF:49:DE:75
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:ea:cc:f0:af:2d:d8:6c:0f:08:d8:96:11:af:ce:00:9b:
         d7:32:80:8b:c8:6d:ad:43:27:7b:6d:fd:aa:48:ef:27:76:95:
         e6:08:db:1f:67:7f:59:75:9b:91:72:fd:85:12:2a:b6:c2:45:
         ed:3d:fc:33:6c:38:03:8a:4d:1b:6d:f0:fe:9a:bd:c8:b7:95:
         77:f5:37:46:12:06:63:1b:86:83:e3:8e:b4:d8:99:40:95:32:
         f1:1c:8c:02:5c:de:5a:b6:19:54:21:0c:b5:8d:b6:4f:1d:f0:
         d4:de:0c:c6:a6:ee:1a:8d:58:39:35:57:59:25:0a:87:42:a2:
         0c:32:b1:e6:14:d1:de:61:95:b0:1e:f3:50:bf:2a:d8:35:40:
         7d:32:95:bc:f9:01:09:6b:e2:8c:86:e5:07:b2:c5:a4:ab:14:
         42:2e:0d:93:16:78:d9:7a:09:77:d0:e6:93:6b:ac:cb:bf:c8:
         bf:7c:fb:11:f9:14:19:4b:b4:fe:9a:0f:88:15:61:30:cd:66:
         96:ec:5d:01:87:4c:20:6f:70:97:4a:5f:cd:bd:eb:8d:de:cf:
         fc:7e:19:8a:9f:4a:13:d7:19:0d:92:12:17:6e:cf:81:91:7b:
         fa:31:a6:3a:db:4d:ff:dc:05:46:ef:07:e9:5d:0b:89:2e:ea:
         75:62:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org