Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32352e302f32342d3234203d3e20323635323934.roa
File:                     3136382e3132312e32352e302f32342d3234203d3e20323635323934.roa (raw, json)
Hash identifier:          VqeRg0q1VqbBpKIZMflbcGAj/nxzHQ8nFuwZ5Q03ps0=
Subject key identifier:   C4:87:23:00:35:93:94:68:4E:90:60:49:AB:AD:7D:33:DB:BF:F4:14
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       0E09C4E0DCE6B899A3189E3C609A9A6CD9288B4E
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32352e302f32342d3234203d3e20323635323934.roa
Signing time:             Thu 16 Mar 2023 18:00:00 +0000
ROA not before:           Thu 16 Mar 2023 17:55:00 +0000
ROA not after:            Thu 14 Mar 2024 18:00:00 +0000
asID:                     265294
IP address blocks:        168.121.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:09:c4:e0:dc:e6:b8:99:a3:18:9e:3c:60:9a:9a:6c:d9:28:8b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Mar 16 17:55:00 2023 GMT
            Not After : Mar 14 18:00:00 2024 GMT
        Subject: CN=C4872300359394684E906049ABAD7D33DBBFF414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:ae:87:a9:84:ec:7d:34:f8:a1:3b:d5:65:
                    09:e4:a0:52:81:94:51:1f:e0:85:c6:a5:a8:df:01:
                    89:27:30:e5:7a:64:d0:75:72:81:9c:d5:8d:be:e1:
                    71:07:73:7e:36:f8:48:8e:4d:dc:be:11:df:60:e7:
                    91:ec:91:0e:b5:36:e0:5d:0a:b0:45:f1:7f:30:98:
                    6c:2c:06:ca:2f:df:0a:df:e5:ad:d9:f7:d2:9b:a4:
                    b1:6d:92:af:1a:60:43:74:69:12:2a:ed:05:ec:f7:
                    1a:c2:fc:b9:4d:d7:01:3f:00:f1:cc:7c:27:58:ae:
                    29:33:be:18:eb:99:36:a0:19:d9:1f:57:79:59:98:
                    6e:4d:1c:9a:42:d0:f7:ce:c4:ff:13:d2:02:b6:8c:
                    ff:bd:87:9d:d6:78:1f:79:ad:2b:ba:c8:6e:7f:e8:
                    c4:c6:3c:29:55:80:27:a7:97:df:34:dd:bc:45:40:
                    a8:91:9f:de:98:1c:b2:ae:2f:b8:5f:af:7e:8e:64:
                    de:19:6f:ce:64:89:1b:4a:be:d7:08:15:70:3f:50:
                    45:49:34:7a:a7:4b:01:c6:d3:f3:6a:7e:e1:24:da:
                    32:7e:c6:2e:34:32:8e:23:ea:f5:f5:74:5f:cd:df:
                    00:33:66:07:a5:00:06:70:cf:ef:df:ab:40:24:82:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:23:00:35:93:94:68:4E:90:60:49:AB:AD:7D:33:DB:BF:F4:14
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32352e302f32342d3234203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d1:51:4d:8d:60:56:a0:45:ca:97:11:92:57:dd:0d:b2:51:
         24:11:d0:5c:eb:08:c8:a8:c0:b9:3f:26:2f:15:de:9e:be:c6:
         e0:59:48:90:02:db:67:54:4a:f6:1c:9b:27:a0:74:28:93:6e:
         7f:01:98:a8:e9:07:3e:e0:6e:ba:78:62:09:8d:6f:47:66:5f:
         f8:7e:3d:aa:1d:df:d5:6b:7b:30:e3:d6:cc:ab:fb:d6:7e:b6:
         d2:54:eb:83:46:ea:09:72:24:2b:74:e1:dd:5d:8c:bc:7b:b8:
         86:ca:62:cd:c5:59:f8:25:2b:29:09:dd:6e:a2:81:03:9f:91:
         39:ab:1d:f4:3c:57:50:cd:70:6e:5c:ac:c9:b0:aa:80:5f:a4:
         63:96:74:7a:6d:a2:66:ee:ca:24:d8:16:9f:9d:bb:7f:f3:04:
         3e:12:e4:cb:0b:37:b7:02:7b:a0:b8:7a:c9:49:84:0d:4d:34:
         12:e6:c3:52:94:c1:37:45:77:82:30:9b:14:41:a6:9c:51:cf:
         70:52:35:2d:f2:2f:86:c1:93:82:f2:2b:31:b8:ea:e1:e1:57:
         dc:3b:c2:44:e0:b6:b1:bf:61:59:9a:f7:f8:c0:8e:19:cb:e5:
         53:e4:e8:3c:ba:92:40:74:1b:6c:fe:34:25:c9:5c:bf:62:56:
         55:4e:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org