Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134382e302f32332d3233203d3e20323636323732.roa
File:                     3137302e37382e3134382e302f32332d3233203d3e20323636323732.roa (raw, json)
Hash identifier:          3/ffPZxUvhKm5rFwPCliHfhCQcyXP53zdruXfwPssbw=
Subject key identifier:   F2:C3:18:D2:33:0A:6C:A6:93:16:28:88:42:28:0B:93:2D:E2:26:86
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       108B9B015114CC62D5776A422F43051B80AD58B5
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134382e302f32332d3233203d3e20323636323732.roa
Signing time:             Tue 12 Mar 2024 14:58:00 +0000
ROA not before:           Tue 12 Mar 2024 14:53:00 +0000
ROA not after:            Tue 11 Mar 2025 14:58:00 +0000
asID:                     266272
IP address blocks:        170.78.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8b:9b:01:51:14:cc:62:d5:77:6a:42:2f:43:05:1b:80:ad:58:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Mar 12 14:53:00 2024 GMT
            Not After : Mar 11 14:58:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:cb:33:b5:aa:a2:86:7a:ad:8f:d6:51:13:
                    0e:5b:a0:a3:cc:56:66:b6:d0:da:22:03:bd:84:6e:
                    36:d8:e8:79:f3:84:2c:09:2e:19:ac:a3:c4:d6:be:
                    19:e5:d4:5c:2d:1d:14:ed:aa:8f:c5:c3:c0:4b:4a:
                    ef:d7:36:06:21:63:5f:53:5b:6d:9a:90:77:2d:2a:
                    d4:93:12:9c:7d:5e:83:2c:dd:32:9b:1b:82:22:36:
                    8c:61:99:e8:31:44:6f:8c:1c:e7:06:ea:5e:59:c0:
                    a4:b9:66:d3:27:6b:a3:ab:73:5e:59:e0:ce:40:b0:
                    f3:16:6a:aa:ad:43:3e:31:f2:42:b2:d9:9e:74:ed:
                    37:5e:4a:25:91:38:41:59:20:99:1f:eb:cc:2f:ce:
                    16:a5:14:15:d1:82:27:c1:81:10:1d:dc:b7:b5:3b:
                    f6:3a:c5:0a:ff:5f:c5:b3:2a:cf:20:13:05:b8:ea:
                    26:1a:9e:33:91:6a:76:35:23:46:94:8f:c9:c7:c9:
                    cc:6e:44:b1:72:a1:cb:46:f1:56:29:10:54:0f:4a:
                    40:de:7b:9a:79:cc:a4:80:fd:50:6d:33:f8:c0:03:
                    32:c8:13:58:2a:c9:c9:cb:e3:55:a9:b5:fb:30:d4:
                    7c:e3:1d:dd:b3:76:1e:a0:ad:2c:81:33:4d:b2:ea:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C3:18:D2:33:0A:6C:A6:93:16:28:88:42:28:0B:93:2D:E2:26:86
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134382e302f32332d3233203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:76:33:f5:11:f4:d6:cd:da:59:6e:0e:9b:c7:b3:56:06:
         9e:b7:ff:7e:00:db:1c:2c:be:ad:cb:0c:5a:9b:05:cc:1c:c0:
         19:a7:9c:92:60:1b:26:e3:ab:f9:14:4c:b7:ca:d6:40:c6:f4:
         b7:48:c4:57:b5:78:24:a8:a7:2e:ac:d7:5c:93:87:84:d1:9b:
         9a:b1:c2:0b:14:75:96:b6:f7:3f:28:3e:44:5f:ac:cf:83:e6:
         99:9a:68:0c:e4:fc:e7:3a:ac:c0:4c:53:5f:66:a4:17:1f:1e:
         90:fa:4b:22:20:0c:2c:09:16:9d:ad:67:6e:d4:fb:d0:f5:f8:
         4d:51:23:92:7f:69:8b:34:10:37:16:27:21:aa:fd:25:cf:f6:
         5e:3a:fb:c5:13:15:31:81:30:c3:3c:93:12:ea:7d:65:f1:f8:
         4d:d1:8f:72:2a:bd:55:07:74:5b:d8:18:92:87:ee:d9:49:ee:
         08:4d:62:61:43:08:82:ae:db:15:4a:19:3e:96:af:91:37:9d:
         88:fa:78:aa:84:f4:a8:46:20:8c:e4:cb:71:dc:95:12:66:9b:
         44:6b:08:b7:a8:2f:ab:3b:1a:ad:cc:e2:5d:bc:91:8f:5a:91:
         23:c1:d5:ca:16:9e:ee:ea:9b:e1:95:76:7f:7c:bb:e9:9b:b6:
         1a:75:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org