Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          cGkBm4gaUZ3eUELQySmAAKrlD8qW8owUxbNLhw2b0I8=
Subject key identifier:   BB:8E:50:A9:15:DD:CB:E3:A4:04:FB:6C:B5:80:43:63:2B:1B:87:23
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       0586AF78E9CD54E4ED9ED6CD4FA6B9B0D9A637D4
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:07 +0000
ROA not before:           Wed 18 Dec 2024 04:06:07 +0000
ROA not after:            Wed 17 Dec 2025 04:11:07 +0000
asID:                     265300
IP address blocks:        168.121.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:af:78:e9:cd:54:e4:ed:9e:d6:cd:4f:a6:b9:b0:d9:a6:37:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:07 2024 GMT
            Not After : Dec 17 04:11:07 2025 GMT
        Subject: CN=BB8E50A915DDCBE3A404FB6CB58043632B1B8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:7e:73:e7:ed:07:7a:d5:6c:e5:d7:44:01:
                    d4:37:2f:e2:39:5b:95:31:f0:de:20:30:9e:a4:33:
                    ed:b2:ab:f2:30:03:b9:ec:8d:a5:53:4c:62:d9:cf:
                    60:6d:1f:f9:b9:44:33:14:13:76:2f:b5:52:69:64:
                    c9:8c:14:f8:1f:09:67:de:d3:4b:55:ce:b4:04:4c:
                    57:87:97:7a:86:f2:bf:8e:99:df:15:c4:b8:0b:30:
                    79:ca:39:b1:0b:b1:28:5b:7e:ee:8f:fe:4a:99:99:
                    a3:70:7f:49:79:bc:90:8d:e4:f8:2a:5b:90:c9:4c:
                    a7:b7:a1:f7:c2:c2:00:5b:b0:88:9b:3b:66:73:9f:
                    cd:57:83:dd:ff:27:1c:fc:9a:6b:c1:61:b2:4b:33:
                    eb:96:cc:d5:23:a9:07:e2:9d:e3:fb:05:57:06:29:
                    38:d9:38:77:7e:47:2d:f8:42:a1:bd:2a:89:18:9b:
                    9f:43:3a:ae:5e:62:3e:1b:e0:57:76:89:03:1e:71:
                    73:b9:d9:0a:2a:a3:58:55:3f:90:66:1f:27:b8:ac:
                    a4:c5:b5:d4:0c:1e:71:4c:c7:e3:12:2d:5c:6d:96:
                    22:d2:68:36:56:d6:82:4c:98:03:6f:38:dd:ba:72:
                    d0:ee:77:8a:10:52:cf:80:ec:26:3b:c6:a4:b3:b3:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8E:50:A9:15:DD:CB:E3:A4:04:FB:6C:B5:80:43:63:2B:1B:87:23
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:c7:a9:00:e9:e0:72:80:f0:c8:d4:08:06:b1:b3:0c:92:
         6b:d6:b3:c1:f6:65:a7:13:dc:45:7b:75:e1:e5:b2:1d:04:a4:
         c9:c9:dd:c4:b0:25:f4:c7:ae:d0:a8:75:72:49:93:1f:c1:24:
         ec:c4:27:44:61:be:6b:17:b0:41:5b:b3:2e:c9:09:67:87:29:
         c1:0c:45:8b:60:48:5a:6d:da:3d:e7:92:8e:18:72:1f:06:97:
         13:8d:56:d8:7e:44:ed:ad:93:9b:4c:45:9d:e6:8e:48:6e:93:
         f4:70:75:a7:31:f7:4d:8f:cd:77:99:3c:dd:8b:69:68:ab:08:
         51:c9:70:56:f7:a8:95:4c:89:45:7c:4b:18:05:61:ac:0b:7d:
         50:21:94:8a:a0:b9:3c:f6:83:4d:11:5f:90:58:8d:40:9b:28:
         53:b8:46:e3:b2:60:93:79:64:c1:f9:86:71:65:e0:84:74:02:
         d4:76:ec:a0:10:1a:96:06:da:f1:91:ab:ef:ed:a1:bd:43:90:
         0b:9f:13:7e:37:3c:66:e6:41:b2:9d:e1:f3:05:4c:7b:12:28:
         71:be:e4:20:e7:58:0e:55:87:4f:02:c6:f5:0b:06:27:66:1c:
         7f:b9:d7:77:ce:b1:84:fd:e5:41:76:a7:70:98:ae:44:dc:65:
         a6:94:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:46:15 2025 by rpki-client