Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130322e302f32342d3234203d3e20323632343638.roa
File:                     3136382e3132312e3130322e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          9A0HI5mdZRoNb0xcvAE0sbkLEA+fIKeZ24WPm1oLwYY=
Subject key identifier:   F7:9F:20:2C:09:9B:FF:BD:F8:2E:4A:C5:15:F3:06:30:EE:EA:06:98
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       6A1391FFE0DDC27F77ED37599092D49592580F59
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130322e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:57 +0000
ROA not before:           Tue 20 Dec 2022 15:04:57 +0000
ROA not after:            Tue 19 Dec 2023 15:09:57 +0000
asID:                     262468
IP address blocks:        168.121.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:13:91:ff:e0:dd:c2:7f:77:ed:37:59:90:92:d4:95:92:58:0f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:57 2022 GMT
            Not After : Dec 19 15:09:57 2023 GMT
        Subject: CN=F79F202C099BFFBDF82E4AC515F30630EEEA0698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:04:49:c8:f1:44:69:04:73:91:44:60:34:
                    71:f0:a9:f6:21:4e:7a:dd:7f:16:21:18:67:06:04:
                    6e:15:90:a9:1f:c9:64:de:bb:da:a1:f2:4e:db:83:
                    34:60:bb:b7:4b:a2:6e:d1:de:d4:94:e1:3b:58:51:
                    78:e5:55:a7:e0:89:31:5f:ef:69:db:f1:8f:53:8b:
                    1b:99:44:fb:fa:9c:ff:5a:56:20:49:fc:7c:2e:f1:
                    0d:04:e0:8c:e3:53:aa:66:ba:e9:1b:f5:96:f7:d5:
                    4c:d0:35:b0:97:3f:46:d4:ed:e4:87:5e:be:3c:83:
                    2b:bc:f9:21:f7:59:70:76:d8:1b:28:d8:9d:7f:12:
                    55:e3:02:2e:96:01:2b:e8:09:77:1c:09:db:1c:b5:
                    71:91:97:55:8b:11:ad:1f:3a:1b:ca:4f:39:87:bc:
                    b7:e4:67:0f:f6:d2:18:ac:b3:5b:32:5e:dd:1b:f5:
                    77:08:f1:55:66:fa:d1:f8:4b:55:67:89:04:ad:e6:
                    65:5b:a0:eb:a7:24:d6:db:91:eb:aa:21:89:d5:da:
                    bc:7e:ee:d0:97:95:6e:af:c8:1c:f0:17:5a:96:6e:
                    53:2e:9c:fb:e2:f9:03:0f:33:03:07:e8:0b:6e:5f:
                    96:ad:58:76:8b:52:db:6a:fe:4b:31:9e:f3:08:77:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:20:2C:09:9B:FF:BD:F8:2E:4A:C5:15:F3:06:30:EE:EA:06:98
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130322e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:de:c4:11:ca:76:f3:6a:f4:8a:15:ec:bc:37:af:a4:42:
         fb:76:e9:02:73:66:91:46:db:e8:e9:97:cd:e4:d9:af:40:1d:
         1f:6a:3e:f6:08:c1:25:82:69:6e:9d:53:62:ff:34:6f:33:66:
         21:68:31:b8:a4:2a:ce:6d:79:b1:65:35:d1:94:fb:8d:67:42:
         24:aa:b1:23:aa:68:8d:ad:3e:f9:83:93:d7:15:ec:59:d5:2a:
         06:61:8d:99:dc:ac:ab:f0:13:c8:4e:98:b7:e9:dc:dc:3d:b7:
         fd:12:23:16:92:c4:4c:89:01:ac:26:22:af:47:90:f1:f5:ea:
         46:7f:8d:d3:e5:41:66:c1:60:20:cb:fa:3d:76:14:81:50:7b:
         bc:8f:d3:c4:1b:ef:7a:1e:58:ae:ee:28:8b:07:b2:2d:86:ef:
         7a:1e:d2:53:68:f8:4b:68:53:d3:38:47:59:bd:f8:b0:3a:e5:
         29:3f:36:20:db:6a:8f:3f:2d:41:dd:ee:28:cd:fc:8c:05:72:
         3f:55:c9:ce:ea:ec:69:36:7b:f2:2f:82:11:41:f6:62:c3:2c:
         a6:6d:d4:e8:92:9c:88:ef:83:c0:bf:2b:a3:71:65:75:7d:f5:
         01:f5:44:5c:46:4e:8e:42:cf:1c:90:6e:23:fd:4c:2e:bd:13:
         e4:34:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org