Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132302e302f32342d3234203d3e20323731303038.roa
File:                     3137302e3235342e3132302e302f32342d3234203d3e20323731303038.roa (raw, json)
Hash identifier:          gmHkmrI2d3vJFcd6aLX1/4hcobQuETh4oVmE17huMKk=
Subject key identifier:   3B:C1:96:F8:E1:F4:7D:DE:25:6A:FD:3F:67:1C:14:F3:E3:17:17:F8
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       43839BFBED3EC79A52A30A0C76ECDC18A989F845
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132302e302f32342d3234203d3e20323731303038.roa
Signing time:             Fri 27 Oct 2023 18:45:22 +0000
ROA not before:           Fri 27 Oct 2023 18:40:22 +0000
ROA not after:            Fri 25 Oct 2024 18:45:22 +0000
asID:                     271008
IP address blocks:        170.254.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:83:9b:fb:ed:3e:c7:9a:52:a3:0a:0c:76:ec:dc:18:a9:89:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Oct 27 18:40:22 2023 GMT
            Not After : Oct 25 18:45:22 2024 GMT
        Subject: CN=3BC196F8E1F47DDE256AFD3F671C14F3E31717F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:7e:aa:4f:d5:6d:fe:50:7c:25:e6:15:0f:
                    62:c6:43:bb:d5:1d:04:94:b9:b7:ef:39:a2:a9:8a:
                    35:e3:ec:42:76:56:69:d5:a4:24:5d:28:4b:97:5a:
                    9c:44:74:cd:2f:a2:c4:99:00:2d:20:7d:08:6c:f3:
                    92:57:97:d1:fa:42:6f:a8:f3:8b:97:8b:da:38:c7:
                    aa:78:5e:76:67:99:6c:4d:28:a7:32:d0:8a:ac:bd:
                    f2:6f:c9:81:b9:c1:76:d6:dd:2e:9c:a7:39:61:54:
                    95:65:a0:a9:7f:98:6e:56:25:01:5c:65:b5:8f:11:
                    54:2d:cf:f1:12:37:35:1e:29:88:ce:9e:6a:0c:a4:
                    51:db:34:a9:cd:1b:98:ff:57:cd:44:b9:42:d3:e7:
                    14:cf:b7:96:a8:d7:f2:d0:8f:e8:0c:95:98:1a:14:
                    2e:63:1c:97:d9:b7:2e:6d:cb:a9:d4:0b:de:c6:c5:
                    f7:53:c0:0d:7a:ae:1d:71:dc:16:fc:d1:6e:1c:a3:
                    50:6c:ac:3c:28:d3:c5:ce:d0:24:d7:1c:cb:6c:9b:
                    31:98:8c:d5:8f:ad:cf:50:35:d9:20:14:23:0e:4c:
                    27:99:8e:9a:82:f7:72:74:d2:50:73:62:81:8f:8f:
                    c8:80:2f:fc:76:9d:b3:5a:bc:23:b8:3d:5b:b7:ce:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C1:96:F8:E1:F4:7D:DE:25:6A:FD:3F:67:1C:14:F3:E3:17:17:F8
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132302e302f32342d3234203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:09:61:bc:23:27:67:84:a1:e6:39:2b:b7:ee:2f:85:e8:
         01:ff:ac:35:0c:3f:a8:fa:39:b8:16:a6:60:64:e5:6b:a5:62:
         a6:ea:14:4d:eb:f1:2d:18:ed:f9:50:77:93:96:73:b4:f9:3b:
         f4:a7:75:4d:d7:0c:03:cc:96:50:02:da:b9:72:8e:fb:c4:9b:
         53:67:34:7b:cd:b7:62:db:31:96:25:54:9e:4e:5f:50:d1:87:
         4e:f8:bb:36:4d:30:18:35:a6:85:96:22:37:1e:70:24:b8:02:
         3e:80:19:8a:5a:5e:8c:72:f5:d9:83:4e:f8:25:b3:13:7d:94:
         ba:7a:90:0d:ba:d5:5d:f7:e3:48:83:b8:70:ec:c8:8f:94:48:
         a8:4e:03:13:1a:29:09:23:bd:24:b1:20:c1:ee:14:2a:37:d8:
         fa:13:a1:04:2e:91:8f:ba:36:2b:11:11:6f:f1:2c:3e:ab:85:
         78:3b:9d:77:f7:7e:9e:71:a9:1e:58:75:60:be:61:b3:bb:cb:
         0a:13:c9:da:f8:45:8e:f0:4e:5d:7d:95:61:17:0e:24:dc:d1:
         a3:01:8d:b7:f1:f8:3e:fb:01:67:9b:64:d2:02:74:2a:db:ce:
         b6:44:dd:90:e6:72:93:32:3e:fa:1a:fc:c6:c8:52:12:dc:f7:
         c3:f3:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org