Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          WgipAABcRj/a5AAJdnljwIR93dgGHuawWR94D+qY+EA=
Subject key identifier:   11:1A:E2:9E:26:BD:14:08:2F:A7:77:B2:BA:EE:41:A3:44:1E:7E:0D
Certificate issuer:       /CN=2ED5EFD424482750CB944AD164CEA0A8060BBCDE
Certificate serial:       09B5F05EF657AC87E35F8CBD6F545BA2C584FFD0
Authority key identifier: 2E:D5:EF:D4:24:48:27:50:CB:94:4A:D1:64:CE:A0:A8:06:0B:BC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
Signing time:             Fri 15 Mar 2024 22:35:27 +0000
ROA not before:           Fri 15 Mar 2024 22:30:27 +0000
ROA not after:            Fri 14 Mar 2025 22:35:27 +0000
asID:                     265300
IP address blocks:        168.121.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:f0:5e:f6:57:ac:87:e3:5f:8c:bd:6f:54:5b:a2:c5:84:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5EFD424482750CB944AD164CEA0A8060BBCDE
        Validity
            Not Before: Mar 15 22:30:27 2024 GMT
            Not After : Mar 14 22:35:27 2025 GMT
        Subject: CN=111AE29E26BD14082FA777B2BAEE41A3441E7E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:6a:16:72:65:22:7b:1f:1a:81:73:8f:c1:
                    38:05:4a:c7:8d:f5:64:eb:17:f5:8f:60:32:9e:74:
                    cd:9e:86:ee:51:67:ef:ff:5a:ca:a6:32:a7:f2:71:
                    31:94:eb:56:ca:11:e5:02:51:93:fe:7b:cf:d1:18:
                    c4:a5:2b:bb:11:fe:a9:7e:95:07:5f:f6:20:4e:93:
                    18:6e:0d:f1:bf:14:a1:70:2d:cc:86:33:38:4f:d5:
                    1a:61:86:72:44:9e:87:01:47:82:d2:06:99:89:36:
                    3d:13:ec:ab:4e:f9:a3:16:96:75:0c:ab:b6:a6:5b:
                    71:27:00:b0:5d:e1:98:ae:32:76:4e:89:a7:75:d0:
                    02:0c:8c:d6:57:0f:ed:fe:ba:44:f7:f9:95:43:38:
                    5b:4d:ae:69:cb:9f:51:af:68:34:bb:05:dd:8a:05:
                    ae:74:f2:bf:0c:1c:60:b9:a6:d5:0c:6a:6e:e6:54:
                    33:88:13:24:57:56:80:eb:c2:37:4e:7a:b7:48:9f:
                    ad:d2:2b:42:b4:50:2c:5c:81:f9:54:e9:0c:be:48:
                    25:55:82:66:33:c8:55:57:51:4e:19:5c:ec:ab:cf:
                    2e:f8:5e:d0:c1:b2:4e:ef:66:47:52:89:07:37:82:
                    f0:b0:be:9a:d5:2a:44:b3:25:50:43:4b:41:11:eb:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1A:E2:9E:26:BD:14:08:2F:A7:77:B2:BA:EE:41:A3:44:1E:7E:0D
            X509v3 Authority Key Identifier:
                keyid:2E:D5:EF:D4:24:48:27:50:CB:94:4A:D1:64:CE:A0:A8:06:0B:BC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:26:e7:fe:ba:3f:11:e8:22:7d:20:31:fd:67:10:73:c1:1e:
         0f:b9:31:0d:b2:67:37:60:79:5b:9e:e8:f0:0f:4f:b0:22:64:
         91:89:b7:52:cd:b6:a4:b3:92:af:ee:71:4b:43:ea:78:0e:70:
         ec:36:6b:61:a9:ac:92:e1:1c:b3:dd:8f:bc:ac:59:ba:a6:48:
         c2:60:b7:d8:f4:a8:b2:78:4b:3b:62:43:43:fb:b4:fd:97:43:
         55:8c:da:3b:c2:64:a7:cd:23:61:5c:7d:22:ee:ce:07:4b:0c:
         84:40:8c:c6:66:9e:c5:f8:30:37:6d:60:2d:ad:bc:41:76:9c:
         01:96:d1:6e:4c:c1:97:05:36:0d:20:25:ba:73:5b:5a:53:b3:
         32:3b:3d:d4:c0:47:37:05:f5:f4:e1:96:f2:7d:3a:98:81:c9:
         d0:f6:3e:0e:2e:f9:b6:f9:5d:f1:b2:91:71:e1:a5:e6:8e:e4:
         ca:4d:d8:87:a1:04:87:70:03:d3:52:4b:cc:78:f8:45:8e:63:
         d3:b9:6f:67:a6:c6:c9:aa:8c:c1:ee:b2:9e:a6:f9:45:c1:aa:
         b1:15:84:a1:41:83:07:e9:c6:31:9a:05:02:3b:c5:a3:5f:0e:
         e5:5e:2f:b1:e9:d5:a0:1b:86:72:7d:9d:5b:31:17:94:88:47:
         61:db:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org