Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32342e302f32342d3234203d3e20323635323934.roa
File:                     3136382e3132312e32342e302f32342d3234203d3e20323635323934.roa (raw, json)
Hash identifier:          WvXYwVewM6i4r5gYiORpdamK9VCvHz94cEPoX6Fz+qc=
Subject key identifier:   79:68:76:9A:A9:69:C0:52:8B:39:CF:59:EA:43:59:F7:30:52:26:B2
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       6EEB07F131605F964F72906137E28BF8BD337BCC
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32342e302f32342d3234203d3e20323635323934.roa
Signing time:             Thu 16 Mar 2023 18:00:01 +0000
ROA not before:           Thu 16 Mar 2023 17:55:01 +0000
ROA not after:            Thu 14 Mar 2024 18:00:01 +0000
asID:                     265294
IP address blocks:        168.121.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:eb:07:f1:31:60:5f:96:4f:72:90:61:37:e2:8b:f8:bd:33:7b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Mar 16 17:55:01 2023 GMT
            Not After : Mar 14 18:00:01 2024 GMT
        Subject: CN=7968769AA969C0528B39CF59EA4359F7305226B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:f8:d8:3e:02:01:20:55:49:6d:a3:05:89:
                    70:42:2b:9f:bd:d1:01:00:30:e1:fc:57:da:8e:18:
                    19:c0:2d:ab:4e:f5:3d:f3:30:cc:03:d2:19:f9:29:
                    48:db:c4:cd:7a:8c:e2:3b:30:01:a5:4b:4e:eb:b1:
                    d7:cb:c9:1d:98:30:91:07:9e:c7:11:28:5e:dc:d2:
                    20:24:9b:b2:49:68:4f:e2:53:5a:e3:e4:03:bd:97:
                    9d:36:65:7d:1e:3f:ae:34:af:82:2e:33:ce:a4:f5:
                    22:a4:e1:f3:dd:6c:40:d1:78:74:7b:c1:7c:f7:0e:
                    20:e7:bd:bb:0f:6a:6d:c8:40:a2:de:f3:a0:e3:18:
                    bf:79:99:03:66:99:82:e2:14:d3:61:7f:52:9e:79:
                    aa:e0:66:51:81:ee:89:67:25:32:1d:e1:ea:cc:55:
                    cd:01:38:ee:b6:a9:1d:b7:4d:7d:a8:43:1a:b8:f3:
                    1f:34:19:db:c1:56:f3:97:c1:8b:59:df:2d:3d:dc:
                    74:37:c2:a8:7e:c8:f2:73:19:19:54:c6:f6:a3:0a:
                    ba:a0:ab:90:16:ac:71:04:bb:d5:ad:f2:ec:e1:8f:
                    dc:db:48:89:46:a8:88:75:07:85:b6:b1:7c:ab:d3:
                    ed:12:04:39:bd:c2:02:c3:4f:82:1a:6b:d6:1a:45:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:68:76:9A:A9:69:C0:52:8B:39:CF:59:EA:43:59:F7:30:52:26:B2
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32342e302f32342d3234203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:b9:20:5e:51:1f:af:34:93:66:79:6a:a0:a4:41:ef:3b:
         6a:45:7f:f1:29:6b:b5:7d:a9:79:ea:7b:ca:11:1b:10:ec:d3:
         85:e7:87:8c:5b:ae:c1:78:c1:fb:2e:2a:59:d9:5e:0b:96:47:
         1a:57:99:f2:06:64:0f:b9:e1:b1:1e:bb:90:1a:a0:7d:1a:49:
         b3:8b:b9:57:bf:84:04:36:00:2f:74:5c:f1:fb:32:fa:22:ea:
         17:2a:d5:76:ac:f8:e2:60:4c:22:05:82:8e:21:91:e6:2e:12:
         f7:33:02:2e:6e:e9:91:7a:de:02:b3:11:01:f1:70:8f:57:5e:
         76:b1:fd:f4:11:1e:f7:42:47:4a:f2:6e:c4:1a:17:cc:de:49:
         4f:70:a6:35:ce:30:24:aa:d2:c2:23:c2:90:a5:e6:6b:1d:a8:
         88:24:0f:4d:73:22:82:11:f8:a2:69:82:f8:40:84:31:fa:ce:
         9f:cb:08:9a:d5:17:2b:1f:6f:6a:cd:1b:8c:5f:e0:d4:f1:c1:
         90:31:d4:cc:54:81:72:66:3e:c6:34:73:38:be:54:1a:99:9f:
         ca:f9:fd:eb:73:fa:ca:40:b0:d2:bf:84:ce:3b:e3:f9:1f:f3:
         dc:43:d0:c6:a4:2c:ca:57:df:49:dc:bf:94:4c:49:2b:63:04:
         0d:11:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org