Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          GtewcV1vEFaBfha4DujVuDD+9HKRYbRrn56UmAypZAo=
Subject key identifier:   C6:C0:07:87:70:90:04:4B:CC:00:44:F7:13:43:7E:06:FD:DE:CF:B8
Certificate issuer:       /CN=B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0
Certificate serial:       4517844013F888E905C2402FECFA84E41015D66A
Authority key identifier: B1:BE:7E:2D:9D:CD:70:7E:1A:54:86:1A:2C:C8:81:00:84:DF:55:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
Signing time:             Thu 27 Jun 2024 20:46:59 +0000
ROA not before:           Thu 27 Jun 2024 20:41:59 +0000
ROA not after:            Thu 26 Jun 2025 20:46:59 +0000
asID:                     265300
IP address blocks:        168.121.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:17:84:40:13:f8:88:e9:05:c2:40:2f:ec:fa:84:e4:10:15:d6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0
        Validity
            Not Before: Jun 27 20:41:59 2024 GMT
            Not After : Jun 26 20:46:59 2025 GMT
        Subject: CN=C6C007877090044BCC0044F713437E06FDDECFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:60:68:25:f4:f4:0e:34:d2:e6:2c:8e:56:
                    f4:38:1a:7a:f6:db:9f:71:eb:d6:c1:13:2f:39:79:
                    9b:df:b2:79:f8:4b:85:b6:6d:ba:32:f1:e7:f4:99:
                    f8:b6:de:44:ce:90:19:e8:55:32:30:f0:80:01:02:
                    a4:38:6a:24:db:8d:51:cd:f6:3b:81:95:92:e9:56:
                    39:ec:2a:2e:01:aa:db:8a:18:b1:92:99:1a:f0:b6:
                    be:e4:52:e0:15:a0:cf:89:86:19:23:44:67:e2:54:
                    e0:95:a9:ac:15:b4:8b:a2:c1:52:b6:39:d3:d4:7c:
                    3c:04:a5:8c:d1:39:bd:8a:62:55:8f:a5:e0:fb:61:
                    a5:c9:d2:63:7d:38:6f:b0:c3:ba:06:66:fd:fc:3b:
                    1c:89:d7:fd:dd:80:a0:2d:76:89:4d:13:2b:6e:48:
                    e3:8a:d4:3a:2b:b0:2b:f6:e7:92:ce:4a:51:6a:19:
                    c7:8d:6b:d2:cf:fd:2d:8d:cd:91:a6:2b:c7:1e:cb:
                    2c:c5:d9:a8:6e:d4:bf:e5:4a:85:c5:61:b1:70:dd:
                    46:49:b5:a8:64:8e:9e:65:d9:ba:f7:40:28:71:0c:
                    ea:61:f6:14:40:eb:7b:cd:e0:47:bd:c6:4f:91:b7:
                    da:80:e1:17:64:09:4a:68:37:13:f2:02:1a:3a:0c:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:07:87:70:90:04:4B:CC:00:44:F7:13:43:7E:06:FD:DE:CF:B8
            X509v3 Authority Key Identifier:
                keyid:B1:BE:7E:2D:9D:CD:70:7E:1A:54:86:1A:2C:C8:81:00:84:DF:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:c3:58:09:16:cf:22:f1:3a:65:0a:a4:1e:41:ae:9d:ef:
         5b:6a:40:53:72:76:b7:5f:50:65:0f:33:a9:a3:a1:24:7a:1a:
         3a:d1:a3:da:8e:73:7b:e8:97:06:e5:20:6a:42:4e:7b:6c:3b:
         48:00:01:e2:0a:7d:82:ed:cd:10:37:dd:38:e4:b3:49:f2:e6:
         0e:17:bc:20:af:bb:04:8f:50:a0:d3:49:d3:40:55:49:a1:ff:
         fe:c3:6c:05:4b:d1:49:9d:f1:3e:96:23:a5:7b:fb:98:e2:ce:
         3e:29:c0:3d:69:34:e8:69:92:2a:c5:53:8d:7a:db:51:d4:e6:
         2a:6e:c7:e3:a8:0d:81:dd:78:5d:6c:af:22:5c:04:f1:dc:a9:
         ff:ab:e3:6a:b0:55:fa:c1:29:d0:33:34:e1:a5:6b:b4:a1:b0:
         e6:e0:7b:12:82:d2:be:96:b7:4d:3a:09:ef:24:db:bb:fa:4d:
         54:10:11:18:f1:ce:ed:35:b1:53:5e:a3:b4:5b:1d:11:a3:6b:
         6c:22:d6:47:25:07:01:d5:47:55:f7:f0:14:e0:4a:d1:17:6f:
         11:7b:7a:42:ff:1f:01:f7:f2:f9:fc:3a:9b:e0:09:e4:37:76:
         22:f3:e9:f6:c8:f1:62:fa:cc:da:ea:33:44:e9:94:56:13:fa:
         91:e1:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 22:38:44 2024 by rpki-client on console-ams.rpki-client.org