Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
File:                     3136382e3132312e35342e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          LNsMyGfeLo3XVdhbTl3SQChlZ8tUdG+FvsSVSqtYcB4=
Subject key identifier:   60:E1:76:3D:74:41:DB:96:EA:37:4B:35:4A:F4:03:9B:42:C0:1C:CD
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       1EB0AB0F211767F4252E56C6828108C1018C171F
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:14 +0000
ROA not before:           Thu 07 Nov 2024 20:35:14 +0000
ROA not after:            Thu 06 Nov 2025 20:40:14 +0000
asID:                     28270
IP address blocks:        168.121.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b0:ab:0f:21:17:67:f4:25:2e:56:c6:82:81:08:c1:01:8c:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:14 2024 GMT
            Not After : Nov  6 20:40:14 2025 GMT
        Subject: CN=60E1763D7441DB96EA374B354AF4039B42C01CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:53:74:ee:24:09:ed:43:89:18:7d:eb:03:
                    26:82:06:59:c3:8a:29:cd:71:57:3d:d6:bb:4b:17:
                    f5:1c:37:66:09:17:1a:f1:ea:cb:a5:0c:5a:35:e1:
                    c6:68:8c:6d:13:a3:72:a3:2c:6f:1b:5d:ef:03:6e:
                    9b:23:1a:a2:46:8a:c3:f9:1b:d7:d8:52:17:5b:26:
                    13:8a:46:eb:46:77:8f:bf:34:23:de:85:f0:11:ee:
                    1d:f2:40:b1:2d:55:ae:81:a1:f1:95:ff:4f:4b:13:
                    c2:ae:97:bf:22:cb:c6:33:4e:60:94:4b:20:b8:86:
                    f3:e2:ac:44:cd:02:2d:6f:86:ca:1a:9d:08:73:6a:
                    85:9d:60:93:7b:c6:ee:3d:e6:c7:89:b4:e2:60:80:
                    3b:c3:5c:5b:09:89:7e:04:20:0c:76:79:f5:8a:b3:
                    76:f8:42:e2:f6:33:c8:32:6b:ee:45:aa:1b:8b:cf:
                    9a:8b:49:69:af:23:04:78:e0:c4:c1:46:9e:51:f2:
                    cd:3f:bd:c4:ee:30:23:92:cc:1a:0e:3d:7e:73:f0:
                    c6:c7:6c:5a:72:92:3b:fb:b4:35:b7:78:67:d3:88:
                    bb:2f:ef:61:e4:23:ad:2a:6d:12:40:1c:74:eb:08:
                    7d:89:76:9f:74:99:59:15:67:1d:75:2a:7f:42:99:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E1:76:3D:74:41:DB:96:EA:37:4B:35:4A:F4:03:9B:42:C0:1C:CD
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:5f:80:9a:67:c6:be:bc:50:c7:93:60:ab:c8:20:e9:6d:
         a9:3f:8c:e7:96:80:15:03:ae:e9:5e:7e:15:15:15:b6:70:ce:
         12:be:5f:59:a0:b8:35:b0:93:bf:6a:04:9c:6d:4a:6b:7c:0c:
         af:3b:26:7e:4c:ab:ae:8c:d9:62:60:b8:89:b6:4b:34:25:a8:
         ac:0b:d9:fa:f4:67:fa:c7:91:2a:63:2f:ff:87:78:83:1c:00:
         21:05:15:8e:9a:38:d5:f2:db:68:c8:5c:86:e4:de:d5:cd:36:
         e3:3e:ce:37:1b:fa:f7:82:d3:0a:13:2e:8c:6f:3e:da:1e:80:
         cb:70:fe:40:28:bf:fd:32:da:1f:5d:68:e2:76:e4:04:d6:3e:
         32:b4:6e:2b:1d:f0:9f:9f:f1:32:99:fa:12:f9:ab:97:52:9e:
         5d:02:41:ef:f4:38:fc:3c:b4:53:66:5e:de:8d:73:a8:90:2a:
         d3:50:6e:db:66:97:95:9d:8c:87:a0:d4:56:84:1d:7b:ff:43:
         3b:3f:69:67:7f:f9:a2:48:19:5f:e4:25:bd:1b:55:30:05:b9:
         ca:7c:af:c4:aa:e6:ef:6d:3e:f3:a5:da:c9:9d:db:c1:a0:0c:
         37:e5:62:53:59:52:fa:48:e6:02:ad:06:c0:b4:06:b4:7c:7e:
         16:0d:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org