Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
File:                     3136382e3132312e35352e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          Zx7KsmMb1x08svRCsstdOcro8waw5esr8PFOR4w+z9w=
Subject key identifier:   23:EA:BF:E5:6C:96:63:EF:A0:93:E4:DD:0D:F0:83:50:94:54:84:20
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       06B94EFD89CB6D30091A5B8D5213F976735C6848
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:05 +0000
ROA not before:           Mon 08 Apr 2024 20:02:05 +0000
ROA not after:            Mon 07 Apr 2025 20:07:05 +0000
asID:                     28270
IP address blocks:        168.121.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b9:4e:fd:89:cb:6d:30:09:1a:5b:8d:52:13:f9:76:73:5c:68:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:05 2024 GMT
            Not After : Apr  7 20:07:05 2025 GMT
        Subject: CN=23EABFE56C9663EFA093E4DD0DF0835094548420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:49:c0:a3:06:de:9d:63:4b:f0:24:de:f2:
                    83:d0:6e:cc:a1:10:bc:be:f9:18:1a:fb:0c:08:77:
                    0d:04:b2:16:fd:bf:34:01:79:94:79:0a:eb:a8:f6:
                    9d:25:01:ab:b2:8b:29:da:13:ab:6b:44:88:4f:f5:
                    29:5f:f5:e8:2f:e4:63:b9:1f:f2:27:dc:c7:a7:a4:
                    86:17:fa:fc:94:f0:96:b2:b6:d3:45:60:17:01:52:
                    a2:f3:ab:f3:65:5b:78:66:a0:66:9b:04:a3:e4:e1:
                    f0:2d:23:e3:d1:c6:ad:79:93:cd:9a:10:fd:42:b2:
                    be:72:e0:46:67:8a:93:11:34:c7:67:85:30:b9:ac:
                    5f:45:75:12:81:2a:12:bd:98:bc:55:0e:8a:64:dc:
                    34:94:9b:62:f3:e8:63:9f:0b:1d:12:2c:e0:63:a4:
                    f7:5c:da:0f:71:23:ba:53:47:31:f0:b1:c0:e2:2d:
                    a0:de:f3:eb:cd:83:65:59:9c:84:eb:0e:45:9e:4d:
                    73:81:7a:1e:a0:cb:ae:75:6b:79:99:96:95:0b:0c:
                    cd:4d:a0:16:12:49:16:a6:fd:87:21:06:0b:f8:8e:
                    f1:0d:94:fe:c8:d1:2b:de:b8:e3:9b:cc:11:f1:82:
                    68:81:6d:34:ff:5f:03:15:88:62:96:4a:1a:2a:30:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EA:BF:E5:6C:96:63:EF:A0:93:E4:DD:0D:F0:83:50:94:54:84:20
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:29:41:73:73:3f:c8:a7:92:14:48:67:c1:ce:29:32:fb:5e:
         43:83:be:93:53:65:6f:c9:21:13:84:73:45:38:b0:76:83:a6:
         73:7f:cf:59:bd:76:02:46:1e:90:0d:db:65:14:b6:f1:bb:f4:
         18:4b:b2:13:7e:10:25:6e:05:49:2e:fb:4a:6a:6a:9a:17:9f:
         5d:5a:42:04:f3:52:98:75:1a:c2:b5:99:dd:0d:ad:22:73:91:
         77:83:c6:f3:0b:a6:cd:77:9a:4c:b5:89:11:f8:8d:fb:3f:02:
         9d:97:75:63:8c:28:35:14:34:08:5a:cc:38:6f:87:41:5e:12:
         0d:d0:cd:fb:19:d3:c1:8a:b7:24:e2:75:0c:40:cc:5d:43:82:
         33:89:f0:af:ea:20:c6:48:72:74:95:bd:a5:1d:c6:3d:9c:8a:
         f4:c0:79:bc:57:15:7e:8c:76:5e:27:79:98:2c:8d:6c:f4:c9:
         11:57:66:df:2b:be:f6:b5:41:e5:96:41:0f:8b:de:dd:0c:8e:
         ad:cf:97:b6:b0:01:e5:f3:7e:a7:89:81:da:e7:61:8c:65:9d:
         99:09:7c:ab:ca:cd:0c:bb:6e:3c:02:9e:4a:a9:b9:83:51:66:
         83:44:85:d9:e9:fd:fb:4a:d5:44:5b:a2:48:da:af:80:00:64:
         de:93:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org