Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32332d3233203d3e203236333338.roa
File:                     3137302e37382e3234342e302f32332d3233203d3e203236333338.roa (raw, json)
Hash identifier:          O/bLIFuoPpdTc4hBOZ2EfMTbtr2B3bLOtHW9E5m9NGY=
Subject key identifier:   0D:CA:72:0B:C3:83:69:AB:44:CD:29:9D:AC:05:F4:AA:5E:3C:3B:4B
Certificate issuer:       /CN=4126EB8E39609934BAF771E0446F32532CC72D88
Certificate serial:       3D0E0CE4E72FD3B353106E87A16E37C9CB994EE2
Authority key identifier: 41:26:EB:8E:39:60:99:34:BA:F7:71:E0:44:6F:32:53:2C:C7:2D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4126EB8E39609934BAF771E0446F32532CC72D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32332d3233203d3e203236333338.roa
Signing time:             Mon 22 Apr 2024 14:35:22 +0000
ROA not before:           Mon 22 Apr 2024 14:30:22 +0000
ROA not after:            Mon 21 Apr 2025 14:35:22 +0000
asID:                     26338
IP address blocks:        170.78.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:0c:e4:e7:2f:d3:b3:53:10:6e:87:a1:6e:37:c9:cb:99:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4126EB8E39609934BAF771E0446F32532CC72D88
        Validity
            Not Before: Apr 22 14:30:22 2024 GMT
            Not After : Apr 21 14:35:22 2025 GMT
        Subject: CN=0DCA720BC38369AB44CD299DAC05F4AA5E3C3B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:13:e8:35:06:78:e6:26:71:10:14:7e:d8:
                    59:e7:a6:76:3a:54:11:12:e4:29:7d:f1:dd:84:5c:
                    60:50:55:cc:2b:93:42:43:75:bc:96:a1:a0:94:13:
                    dd:7a:fa:e0:34:db:85:73:3c:3c:0e:03:6c:51:91:
                    b7:21:50:6a:b0:5e:6f:b9:5b:b7:0d:dd:15:fa:20:
                    33:0a:86:50:5c:46:98:6c:0b:30:af:7f:d9:e0:7f:
                    ed:59:0f:02:5c:a9:e4:95:b8:bd:28:1a:db:e0:a2:
                    b0:cc:e3:24:0a:a2:b5:3b:07:91:7b:c5:07:e3:33:
                    7e:66:f2:79:88:c2:37:36:61:98:fd:cd:a5:16:98:
                    c4:c2:aa:74:59:15:7b:be:cc:77:ce:6a:c1:62:0f:
                    9c:65:95:2c:63:90:6b:ba:67:27:73:a2:c1:3c:0a:
                    4a:5a:e4:96:ce:d4:68:6d:70:1e:9d:f0:17:01:d3:
                    9a:c3:54:5f:d7:64:4a:ab:a4:6a:c7:67:9b:88:0e:
                    0b:6b:18:7c:b8:cc:d3:a7:ab:d3:db:2d:fb:ff:18:
                    26:72:74:c1:90:43:1a:47:ef:8b:ad:a9:4c:e0:21:
                    d8:df:ad:98:1f:cd:36:65:c0:1f:a1:ad:a3:f2:74:
                    f6:22:85:3b:07:59:9d:41:e9:39:bb:e8:bc:7a:dc:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:72:0B:C3:83:69:AB:44:CD:29:9D:AC:05:F4:AA:5E:3C:3B:4B
            X509v3 Authority Key Identifier:
                keyid:41:26:EB:8E:39:60:99:34:BA:F7:71:E0:44:6F:32:53:2C:C7:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/4126EB8E39609934BAF771E0446F32532CC72D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4126EB8E39609934BAF771E0446F32532CC72D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32332d3233203d3e203236333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:51:73:76:f2:c7:0b:b3:70:30:01:13:b8:3e:31:81:63:
         85:c3:69:b0:60:77:99:89:ea:26:f2:53:29:60:b5:7b:b5:04:
         4e:c2:cb:a4:8f:67:e3:f2:3b:53:72:8c:67:80:f9:be:46:61:
         d1:ad:5a:e9:38:d4:53:d3:14:d5:7f:bd:d1:00:5e:32:fb:74:
         6b:7f:8c:25:a4:29:11:fd:da:7c:39:64:a5:40:c0:79:c4:68:
         1e:ae:19:bc:11:0c:a4:93:01:39:c8:85:dd:6e:96:93:48:25:
         53:a2:51:27:87:98:af:01:2f:d1:84:10:d7:50:4c:0c:4e:81:
         af:c8:d2:4a:82:cf:f3:50:db:77:c9:04:94:ae:41:94:3c:81:
         71:c6:b0:74:09:4a:2c:d6:e0:4d:03:f5:a2:3c:b2:ad:4c:e1:
         37:dd:63:2a:d5:d9:bc:59:8e:c8:0f:81:c6:d3:ac:85:f0:31:
         e8:ec:a6:58:bd:f9:9a:6a:f7:18:a4:fe:62:6d:4e:9a:50:bc:
         f2:a3:60:e3:d2:8e:05:d6:9a:49:70:ae:8e:fb:5e:82:b3:d1:
         e8:14:95:4e:a1:c4:87:bc:14:a3:ab:d9:88:a0:ba:ec:ad:d3:
         92:26:56:b1:99:6a:fe:b9:d9:1e:10:53:0b:dd:af:9d:f4:ed:
         4a:2a:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 14:27:33 2024 by rpki-client on console-ams.rpki-client.org