Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa
File:                     3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          WIArbImTL5wrmwomnR0e1GVWRGWzeQ5+EMpLusA1UZc=
Subject key identifier:   2F:56:C9:BF:AA:1D:1E:2F:85:62:4F:09:12:A1:50:E6:3B:24:AB:54
Certificate issuer:       /CN=E66153261DF76D7AF85F0116373381AC74E0188B
Certificate serial:       3B6A27AD6E6F0805F4E977D6257B22857809FED9
Authority key identifier: E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa
Signing time:             Tue 06 Jun 2023 13:10:26 +0000
ROA not before:           Tue 06 Jun 2023 13:05:26 +0000
ROA not after:            Tue 04 Jun 2024 13:10:26 +0000
asID:                     263544
IP address blocks:        170.78.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6a:27:ad:6e:6f:08:05:f4:e9:77:d6:25:7b:22:85:78:09:fe:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66153261DF76D7AF85F0116373381AC74E0188B
        Validity
            Not Before: Jun  6 13:05:26 2023 GMT
            Not After : Jun  4 13:10:26 2024 GMT
        Subject: CN=2F56C9BFAA1D1E2F85624F0912A150E63B24AB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:cc:5e:3e:81:e0:d2:31:9f:4d:2a:e8:3e:
                    81:cc:73:3f:ca:23:50:74:30:74:4b:f4:67:26:ff:
                    60:57:8e:fd:e6:8a:d8:ea:cb:28:02:87:9e:2f:19:
                    1f:84:5c:17:5e:e8:62:eb:b8:3b:4e:70:26:22:aa:
                    49:cf:83:ac:40:62:17:07:bc:37:e5:69:c5:2a:8b:
                    48:e8:50:81:0c:c1:81:3b:cb:7a:86:d6:c5:d4:3e:
                    30:c5:0c:31:fa:aa:98:02:91:a8:43:b3:82:4d:b3:
                    29:19:10:c6:15:26:4e:a9:54:15:d6:a9:cf:14:fb:
                    d0:91:9c:f6:43:18:65:62:ba:83:f7:3a:71:13:a5:
                    b5:de:c5:38:c1:91:93:5a:09:7e:b6:1d:d0:f8:6c:
                    f2:9f:c2:1d:c1:50:8f:71:91:51:f8:a1:f6:a9:ed:
                    1a:fb:93:cf:5e:25:5b:05:ea:15:17:e0:bb:e1:ce:
                    5d:44:3d:20:57:d0:3f:0c:45:4e:74:52:81:5a:a1:
                    30:06:4a:41:a8:59:d8:51:a0:01:71:3a:34:ef:a8:
                    e8:4f:99:4f:de:e9:5a:14:d5:ef:4d:f8:d8:4a:8f:
                    cf:ec:d3:10:cb:56:10:a8:ff:01:5c:4d:7b:00:4a:
                    49:ad:60:04:cf:2c:03:57:f5:a2:24:3e:ce:eb:9e:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:C9:BF:AA:1D:1E:2F:85:62:4F:09:12:A1:50:E6:3B:24:AB:54
            X509v3 Authority Key Identifier:
                keyid:E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E66153261DF76D7AF85F0116373381AC74E0188B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:d3:c7:1c:ea:16:5e:5e:31:e5:d6:c3:f3:f8:82:50:38:c8:
         ad:84:e6:34:80:45:a9:10:27:24:e9:28:21:14:fb:07:97:4a:
         95:a3:c7:fa:38:cd:e7:f2:84:85:6c:b3:8e:ef:6a:23:cd:7d:
         dd:61:7d:69:1a:f3:bd:bd:5d:85:26:fb:75:a2:58:f2:b3:01:
         d6:b6:87:aa:b2:57:4c:ad:82:45:97:3f:29:80:25:d9:29:f2:
         d3:74:23:01:18:8b:90:1c:15:63:7d:ba:e6:d7:22:78:94:97:
         ac:f6:6f:64:e3:9e:87:0d:4b:ea:09:e7:92:8b:20:a1:88:04:
         b4:16:f1:c8:59:b9:42:81:09:29:44:90:f7:67:1d:9a:bf:5a:
         2d:24:54:61:1b:93:66:51:79:1e:7c:d7:f4:f0:77:0e:ec:df:
         87:89:f4:3a:c6:1b:47:5a:be:df:6e:91:58:0a:3c:3c:f9:63:
         c7:b4:97:bf:82:d4:89:6a:bb:4d:69:44:60:a0:26:ad:e5:a2:
         c6:e8:5c:5e:3f:41:27:56:8d:a9:8f:1b:f2:1d:94:f0:c9:68:
         1b:7e:ec:5a:43:50:92:25:79:96:8b:2b:68:ea:6e:c8:00:69:
         1d:a0:08:b0:bb:52:46:d5:3d:83:0b:23:60:a5:1f:09:97:96:
         e9:ca:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org