Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132312e302f32342d3234203d3e20323731303038.roa
File:                     3137302e3235342e3132312e302f32342d3234203d3e20323731303038.roa (raw, json)
Hash identifier:          UbMe9W1xWYZoIpJWg+YGUJl9Mdqp4mYjoa0Q6eNquSY=
Subject key identifier:   BC:AC:D8:9E:F3:1C:1B:9A:8F:1D:7A:D2:1B:C7:8F:30:37:DD:E3:05
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       59AE1F03A28F3E9084DD9916515B7F5C4670BD89
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132312e302f32342d3234203d3e20323731303038.roa
Signing time:             Fri 27 Oct 2023 18:45:22 +0000
ROA not before:           Fri 27 Oct 2023 18:40:22 +0000
ROA not after:            Fri 25 Oct 2024 18:45:22 +0000
asID:                     271008
IP address blocks:        170.254.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ae:1f:03:a2:8f:3e:90:84:dd:99:16:51:5b:7f:5c:46:70:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Oct 27 18:40:22 2023 GMT
            Not After : Oct 25 18:45:22 2024 GMT
        Subject: CN=BCACD89EF31C1B9A8F1D7AD21BC78F3037DDE305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:20:9b:6e:06:2e:a3:0e:c4:3e:b7:1c:2f:25:
                    03:ad:1b:e9:c6:af:62:e2:ff:f9:35:2a:b8:6b:82:
                    4f:bf:4d:34:e2:84:98:8d:df:72:07:79:ae:de:b9:
                    08:97:92:eb:e4:2d:ad:ea:dc:b5:cd:9a:48:57:3c:
                    4d:40:8b:80:b2:60:d7:cc:a7:0e:59:69:cb:42:ce:
                    76:7b:08:cd:e0:f0:ee:89:58:08:a4:09:11:b7:f9:
                    9d:7c:48:dc:95:85:52:86:af:e9:09:2a:46:66:99:
                    c2:0a:8e:05:8e:b0:e4:65:89:7e:5a:f6:03:0d:81:
                    35:6c:66:c8:3a:80:86:0b:ea:14:d6:cd:69:a4:42:
                    89:c6:93:b6:64:8d:4b:6f:f7:90:31:d6:28:80:13:
                    8b:b8:57:74:fb:1c:93:2a:00:f8:96:80:9d:d9:57:
                    e1:6d:3f:d1:5f:f8:5d:db:1a:4d:78:c3:5f:f0:8c:
                    03:b7:82:03:0b:63:c4:eb:ce:95:30:62:33:09:88:
                    f7:92:e0:79:54:c7:66:03:bb:2c:d4:e3:1f:c9:c1:
                    38:31:07:35:f1:6f:08:c1:e3:22:cd:d2:66:99:8f:
                    56:6d:2b:41:cb:22:08:14:93:4c:e7:bb:d0:8a:73:
                    bb:ec:7e:1a:25:da:05:86:00:98:ee:66:ed:1b:eb:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:D8:9E:F3:1C:1B:9A:8F:1D:7A:D2:1B:C7:8F:30:37:DD:E3:05
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132312e302f32342d3234203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:99:58:21:25:c8:de:3b:51:b1:7e:f0:2c:eb:1d:78:21:23:
         78:cf:9d:ba:cb:2b:a1:d8:b4:d8:6d:0d:1b:98:c5:4c:0c:63:
         2e:94:ef:23:6a:9b:50:13:3e:a1:36:98:a0:53:95:ae:bc:7b:
         9b:de:24:db:f9:76:89:ef:68:11:4a:33:36:38:bd:59:e3:41:
         20:81:09:12:e4:41:8a:40:05:e2:35:82:35:f9:8a:d2:a8:c4:
         98:25:85:48:f3:aa:83:2e:d7:06:94:5b:6c:fb:ff:7c:9d:ad:
         03:4b:95:ec:e7:69:15:a1:da:26:97:45:bc:ac:4a:26:ad:2d:
         da:ea:c4:2f:b8:b1:c4:17:c7:14:c2:a3:10:27:00:b4:90:12:
         68:12:0e:49:be:11:63:a8:10:0b:46:ce:90:03:99:fe:d4:e1:
         a4:5a:42:04:49:de:34:30:49:64:a2:16:54:83:df:83:63:7f:
         cc:79:64:f8:07:a0:cc:84:70:49:be:35:98:26:60:ac:a9:43:
         87:9f:f1:f4:df:5b:90:89:9e:03:6c:b1:27:ba:2f:bf:67:07:
         fc:72:e1:6b:90:c9:c7:6b:18:bc:b3:b5:54:e5:40:cf:63:4f:
         4d:3f:3a:c0:3c:9f:de:7d:45:6d:32:e1:89:d3:d5:98:ef:d0:
         15:1c:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org