Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          5AQEKTY/vmQrW92eSw7fylk/DaOYQ8vza260UbRPpRY=
Subject key identifier:   AF:BD:EF:0D:EE:44:B8:95:01:9E:87:B4:3C:8A:6C:61:1A:65:C5:F5
Certificate issuer:       /CN=2ED5EFD424482750CB944AD164CEA0A8060BBCDE
Certificate serial:       12548B9AA4BDF6614FB45DE181A50C65CD8502D6
Authority key identifier: 2E:D5:EF:D4:24:48:27:50:CB:94:4A:D1:64:CE:A0:A8:06:0B:BC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
Signing time:             Fri 15 Mar 2024 22:35:27 +0000
ROA not before:           Fri 15 Mar 2024 22:30:27 +0000
ROA not after:            Fri 14 Mar 2025 22:35:27 +0000
asID:                     265300
IP address blocks:        168.121.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:54:8b:9a:a4:bd:f6:61:4f:b4:5d:e1:81:a5:0c:65:cd:85:02:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5EFD424482750CB944AD164CEA0A8060BBCDE
        Validity
            Not Before: Mar 15 22:30:27 2024 GMT
            Not After : Mar 14 22:35:27 2025 GMT
        Subject: CN=AFBDEF0DEE44B895019E87B43C8A6C611A65C5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:62:42:f2:cf:21:69:76:6e:3a:43:b1:d7:
                    08:43:b9:70:5f:9e:be:c2:36:d5:cc:72:64:0e:f8:
                    ee:9a:f1:48:d0:cc:6a:82:6b:88:30:ee:29:8d:ad:
                    7b:7c:fd:27:03:e6:67:f3:92:2a:d9:2a:7a:01:4f:
                    fe:47:63:15:92:77:e6:12:b7:4b:94:17:7d:b4:86:
                    b3:a3:00:6b:c5:aa:59:31:72:49:c5:35:0f:2c:46:
                    8c:4e:bf:99:68:a7:e3:1a:cb:dd:7b:1e:b6:32:69:
                    50:51:c1:7d:29:b6:03:92:18:8c:37:15:2d:c7:a1:
                    2c:75:db:89:51:00:06:5f:4d:e7:88:bd:be:85:48:
                    d0:b5:2d:43:93:8e:10:b8:3b:4b:c4:05:fb:ed:50:
                    c9:6c:0e:7c:7f:ba:ff:2e:9f:e7:08:03:44:db:d3:
                    0c:0d:d9:c3:c0:91:59:ff:84:c0:44:67:08:51:c2:
                    57:39:90:e7:95:d7:23:c2:4a:53:d9:e8:13:77:fd:
                    1d:0e:14:4c:af:01:be:3b:0e:c8:52:51:7b:94:d6:
                    50:fd:61:61:02:65:cb:67:de:27:75:22:1b:ab:59:
                    6f:ae:95:e0:6b:21:44:aa:69:08:b7:50:d9:49:94:
                    c4:3e:31:5e:65:7e:3c:c4:b9:9b:4d:2c:3d:cd:47:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:EF:0D:EE:44:B8:95:01:9E:87:B4:3C:8A:6C:61:1A:65:C5:F5
            X509v3 Authority Key Identifier:
                keyid:2E:D5:EF:D4:24:48:27:50:CB:94:4A:D1:64:CE:A0:A8:06:0B:BC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:15:60:ec:84:c5:4b:e8:c1:b8:59:6d:00:77:8a:38:2f:30:
         24:97:be:39:53:e5:ce:e9:c8:4f:74:31:a0:c6:e4:4b:55:0d:
         74:9a:ba:7a:56:4f:7b:67:c7:b9:9b:b1:96:dd:d9:e9:77:bd:
         75:b6:cf:46:c9:a0:c5:48:12:e9:64:f7:d5:19:58:3c:50:86:
         7a:e5:f8:1c:b8:05:83:eb:35:f6:93:60:55:4f:76:d3:bc:ae:
         c6:f9:66:0d:de:04:4c:b1:67:77:ef:7b:11:9c:e7:ef:96:f2:
         6c:e2:c5:12:70:52:2b:b1:57:49:b9:ef:1a:85:9e:2e:dd:a7:
         48:e8:7c:64:13:32:98:2a:0c:d2:41:7a:09:95:d3:6f:0f:4d:
         32:21:c1:30:94:c6:90:2c:63:26:a9:21:34:13:89:81:a2:75:
         37:7b:f1:a1:c7:6f:e6:6e:dc:7c:39:d6:bf:54:42:fa:ef:96:
         cb:a1:68:d1:70:33:10:75:53:f0:ce:7c:39:7e:d6:89:e2:bd:
         35:86:a9:d5:bf:cc:a0:59:38:6a:ef:0f:ea:90:e5:4e:b3:f4:
         b1:e2:8d:e6:ee:2e:b4:de:a1:0c:a9:45:0f:44:13:34:91:7a:
         08:9f:56:21:d4:80:24:56:cc:78:84:6e:bf:04:cc:f5:9c:60:
         6c:1f:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org