Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
File:                     3136382e3132312e35342e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          75EN/Yj41iv4T2r9c5iIG8qBin/wP/2gxlkNV0PEWvI=
Subject key identifier:   8B:94:69:CF:62:7E:ED:1C:98:F8:2F:C2:9D:FC:DC:92:73:13:C2:21
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       456F4E6EB970BF581EE6156C5AFA5BC15297B3A9
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:02 +0000
ROA not before:           Mon 08 Apr 2024 20:02:02 +0000
ROA not after:            Mon 07 Apr 2025 20:07:02 +0000
asID:                     28270
IP address blocks:        168.121.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6f:4e:6e:b9:70:bf:58:1e:e6:15:6c:5a:fa:5b:c1:52:97:b3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:02 2024 GMT
            Not After : Apr  7 20:07:02 2025 GMT
        Subject: CN=8B9469CF627EED1C98F82FC29DFCDC927313C221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:1f:eb:fd:82:49:81:fe:70:88:59:d5:7e:
                    2b:28:ed:78:05:95:e3:04:80:9d:0b:7b:13:b7:ca:
                    c2:6a:d5:8e:9e:88:38:53:65:cc:09:a7:b5:4c:31:
                    85:f9:f7:aa:f3:71:5e:96:cd:72:c9:98:6c:a9:95:
                    95:9f:4e:38:16:b5:81:1d:89:94:59:d3:46:23:53:
                    8a:8b:d5:7d:ef:0c:41:0e:34:2f:12:ee:f6:83:bd:
                    6e:5a:da:7d:fd:15:cf:de:21:e2:b1:84:fd:7b:d3:
                    b2:2a:1c:16:b4:5e:14:66:c3:9e:b2:5a:18:b3:ac:
                    72:1e:bd:01:a8:40:27:d5:ce:bd:00:13:11:bc:13:
                    b8:c5:95:92:d4:95:17:05:08:c6:ba:35:37:f8:0c:
                    63:98:96:2f:f3:ae:e4:ea:6e:ef:be:db:66:f1:c9:
                    e1:da:dd:02:fc:c4:7f:a6:c1:ca:4a:76:3d:c5:35:
                    5b:9e:01:29:a8:16:c4:60:5e:ea:cf:28:4b:40:62:
                    25:6a:06:4b:85:4e:dd:4b:b9:55:d8:c2:2d:f8:29:
                    f6:51:4b:e7:c4:d2:b6:63:31:09:4f:d4:15:42:0b:
                    36:c5:39:c7:7d:fe:2c:c8:dc:7d:35:53:53:fa:00:
                    c8:0d:e7:3e:88:7d:fd:8f:e2:32:96:d1:40:e2:55:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:69:CF:62:7E:ED:1C:98:F8:2F:C2:9D:FC:DC:92:73:13:C2:21
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:40:fa:c8:bd:62:dc:60:a4:5d:d9:db:e6:a3:06:dd:e9:
         85:1b:91:3b:74:95:f2:81:33:71:ed:2f:e4:4a:f5:0d:5b:47:
         e8:29:19:c5:2a:22:cc:8a:b7:d5:90:05:dd:f2:47:1a:7b:13:
         51:3f:d1:e8:8e:d6:e6:44:02:da:55:7c:88:b7:8b:b7:00:f3:
         1d:2b:01:80:60:f6:ae:c9:03:9c:43:1e:f7:eb:24:61:98:ed:
         0a:c7:e9:da:4c:fb:85:a0:0f:0f:32:cf:95:16:0a:9d:df:63:
         bb:dc:21:c9:a7:de:80:d0:9d:6a:df:98:e2:09:b6:d0:34:a2:
         e2:ff:44:e5:a3:03:7d:15:3f:6a:d2:a3:a1:22:3c:45:dd:91:
         20:df:8d:f0:d3:2e:27:28:97:70:70:37:36:f9:2f:d2:99:41:
         28:2a:64:d6:2e:76:5b:c9:10:1d:d7:9f:22:b3:dc:dc:e5:90:
         ee:bc:c0:e6:62:06:d6:09:45:51:d8:e3:16:38:fa:8a:d5:78:
         b2:17:c9:b7:8e:03:38:ee:03:eb:87:e9:c5:c5:04:e9:b4:1e:
         ee:56:92:b8:e0:25:b8:4a:8b:d2:a0:4d:fe:37:21:50:d3:c6:
         ab:a2:6d:58:8f:ac:98:0f:7a:da:2c:df:21:f6:37:2a:38:ee:
         b1:ba:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org