Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          Yo3OXNBrj2GeMzGpAw9KJ97crzhWJbfoiDPIMUlwuXw=
Subject key identifier:   B4:C1:76:12:BA:3F:0A:E4:60:4E:57:E8:4A:14:08:E9:06:CD:6F:F1
Certificate issuer:       /CN=BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15
Certificate serial:       3BE23060D30D262780CFD4067DFFFBAF6366EBEB
Authority key identifier: BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa
Signing time:             Thu 16 Dec 2021 14:37:59 +0000
ROA not before:           Thu 16 Dec 2021 14:32:59 +0000
ROA not after:            Thu 15 Dec 2022 14:37:59 +0000
asID:                     265300
IP address blocks:        168.121.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e2:30:60:d3:0d:26:27:80:cf:d4:06:7d:ff:fb:af:63:66:eb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15
        Validity
            Not Before: Dec 16 14:32:59 2021 GMT
            Not After : Dec 15 14:37:59 2022 GMT
        Subject: CN=B4C17612BA3F0AE4604E57E84A1408E906CD6FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:95:e7:14:89:ae:66:9f:db:d0:93:f6:2e:
                    4b:93:79:b6:dd:58:e4:c8:99:0a:cc:ee:24:a2:f0:
                    6f:ef:15:20:7f:16:4e:ec:84:cb:a6:d8:75:ce:f3:
                    e1:4e:e5:10:a1:66:7e:33:4c:13:2c:9e:17:13:93:
                    0d:1b:b6:32:be:48:2d:07:82:9d:49:27:ab:57:dc:
                    c5:01:6a:66:13:ce:8e:5d:6c:8c:db:2e:17:32:8f:
                    10:05:66:69:b1:05:6d:8f:4d:5d:1a:1c:b6:a3:e8:
                    a7:2a:81:94:eb:27:ea:8a:88:bd:6a:d8:1d:d3:26:
                    ec:80:61:b5:11:dd:ac:3e:f2:a8:02:fc:26:24:f6:
                    8d:b3:90:5d:b5:72:41:3f:59:4b:58:60:86:d7:19:
                    58:b9:85:82:94:78:5a:81:e9:14:2f:d9:0d:d0:1c:
                    81:9b:40:1e:58:04:2c:27:77:66:e4:cc:f1:97:6d:
                    58:68:4c:d4:43:41:29:ff:f1:7f:08:a0:51:f9:c7:
                    c9:1b:38:f7:5d:e5:f5:74:59:2c:97:10:b9:42:da:
                    9f:28:1b:cf:54:5f:2b:a9:93:4b:8a:a1:e4:ac:e9:
                    1d:ef:7d:9d:a5:18:12:1e:5e:b7:d9:4d:e8:ee:ce:
                    24:b6:14:db:a1:77:8e:ac:d0:6e:24:52:d9:49:d1:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C1:76:12:BA:3F:0A:E4:60:4E:57:E8:4A:14:08:E9:06:CD:6F:F1
            X509v3 Authority Key Identifier:
                keyid:BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:ad:d7:a0:6a:70:6b:7b:a8:95:f9:eb:dd:98:20:bc:76:
         8e:fc:b2:8b:48:55:a3:be:13:c1:18:6d:92:82:f2:fc:8b:bf:
         e9:cd:cc:de:9d:c8:d2:c2:ec:a4:dd:db:3f:ee:71:08:47:af:
         5d:e7:e2:e9:39:ac:b7:3c:6d:4b:3c:bc:1e:a7:8a:40:e4:90:
         bc:d1:c6:57:13:81:63:8f:4e:57:90:47:64:e2:25:e8:f7:4f:
         81:bb:93:c9:3c:71:9f:ce:3a:07:e9:2b:49:d6:eb:b5:b2:85:
         1c:c0:e7:7d:9f:15:3b:cf:7e:f4:7f:f8:3d:77:f5:09:6d:8c:
         1a:d5:89:4f:85:fb:f5:34:3b:25:79:01:3a:c9:6d:73:7b:a4:
         f9:66:f5:76:e3:27:77:6b:cb:a1:a3:78:21:e9:2e:c1:b1:fc:
         0e:fa:2c:9b:eb:ea:35:1a:3d:52:4b:d4:a9:23:9d:96:7a:d0:
         52:f4:71:38:59:29:89:d9:7c:e1:d3:5a:36:81:c1:a3:fb:87:
         2c:05:39:97:6e:e7:4f:6e:a3:a5:9e:80:50:c2:18:de:86:7c:
         66:72:5a:dc:a1:91:66:50:65:4c:60:78:f1:83:19:ba:0d:ea:
         d4:33:3c:58:f7:20:54:49:4d:2f:b7:98:a4:b7:49:48:fb:7b:
         36:5f:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org