Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          UBtz9RPK1an1rnJd6tUebTJti2YNIRUCHEKWcRzDJD8=
Subject key identifier:   0E:E5:39:95:4A:D9:4D:4D:C0:2B:8E:60:F1:2D:4B:3F:89:B5:BD:83
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       74D00D748DCBCFBBB360398E9234A4C462CB25CA
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:58:10 +0000
ROA not before:           Sat 27 Apr 2024 14:53:10 +0000
ROA not after:            Sat 26 Apr 2025 14:58:10 +0000
asID:                     265300
IP address blocks:        168.121.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:0d:74:8d:cb:cf:bb:b3:60:39:8e:92:34:a4:c4:62:cb:25:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:53:10 2024 GMT
            Not After : Apr 26 14:58:10 2025 GMT
        Subject: CN=0EE539954AD94D4DC02B8E60F12D4B3F89B5BD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:7f:97:1d:cb:d0:09:e6:eb:1a:7c:93:11:
                    10:a2:ae:a9:12:64:1e:84:d3:2c:18:f6:9b:86:ea:
                    d7:0a:17:9d:7d:9a:30:2f:55:0e:c5:d8:15:55:c7:
                    e7:de:9e:e3:ee:a9:6c:b5:f4:03:a2:f4:45:40:c9:
                    8e:c9:a5:48:68:50:be:ef:5d:c1:75:92:db:47:50:
                    cd:dc:74:e8:4b:b1:9f:a5:5a:1a:1b:cd:94:ce:8d:
                    48:e1:7f:8a:2a:95:6a:b5:93:b2:24:fc:26:93:68:
                    e5:b4:5a:ce:1d:32:23:59:1f:17:19:8f:68:06:f6:
                    20:7f:9e:6e:14:73:7f:d4:a3:09:f9:2c:f2:9b:2f:
                    11:25:db:77:27:82:28:97:04:e4:7d:87:ba:b9:7a:
                    f1:e5:24:03:8b:b6:32:67:f8:aa:94:43:ca:1c:be:
                    7d:de:e2:5d:23:65:db:1b:88:58:e9:45:5b:19:27:
                    08:9e:f5:a5:5b:d7:ea:28:62:70:23:d3:7b:ec:92:
                    23:92:26:02:78:47:78:3a:87:7f:44:c7:3b:25:68:
                    2f:f3:10:01:53:26:1f:87:1a:58:81:98:7c:1d:9b:
                    3b:91:77:2d:34:99:38:7f:8a:ca:85:82:21:f7:df:
                    5c:40:d9:b1:a3:30:20:0d:a9:74:cd:cd:f6:74:27:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:39:95:4A:D9:4D:4D:C0:2B:8E:60:F1:2D:4B:3F:89:B5:BD:83
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:51:95:d6:6f:86:0a:47:17:05:93:b5:83:8f:a4:35:01:eb:
         e0:26:ae:9a:92:01:93:09:66:1b:a1:e3:a3:fd:da:34:40:61:
         b5:23:f2:92:12:db:f3:26:38:47:b1:0f:90:81:b7:28:e0:e5:
         13:51:58:46:55:2f:c2:43:5e:8f:54:08:4f:09:9c:35:e5:23:
         60:41:1a:85:3c:40:43:a7:13:3e:02:e6:c3:a4:53:28:f1:1d:
         4c:60:90:aa:c4:cc:22:38:91:64:58:ce:73:97:f9:3d:55:9f:
         d4:6c:e7:e4:e3:1b:82:53:16:22:04:c0:7d:5d:51:55:5c:be:
         5a:ee:6b:4e:df:2e:3f:6e:0b:f8:e9:bf:d6:96:c7:53:d7:4b:
         11:4a:b0:fb:89:75:13:9c:49:cd:d6:1c:b3:f6:ed:2a:50:bb:
         64:7f:e8:4e:2c:6d:da:5d:34:e9:02:9e:d8:35:54:66:db:b4:
         3d:ee:98:02:38:49:2c:c5:3e:26:0e:f1:6c:a7:fd:97:b3:a0:
         81:9a:f2:97:3d:f4:71:cc:4e:cd:81:4d:a8:bc:a8:51:06:d5:
         8e:fe:18:80:bf:70:4a:f6:c4:3e:51:99:7d:f8:42:8e:59:06:
         ff:0b:83:e4:ca:7c:73:45:1a:a3:5d:8c:52:14:12:12:12:9c:
         bb:50:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org