Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134382e302f32342d3234203d3e20323636323732.roa
File:                     3137302e37382e3134382e302f32342d3234203d3e20323636323732.roa (raw, json)
Hash identifier:          euywZ3pLKge8Bx1Dbas5XMcj8gWBBZrN1ClnbuRFP0A=
Subject key identifier:   E7:45:4C:F9:B3:8E:5A:09:D3:F3:B2:F3:89:E5:D6:03:13:88:18:57
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       1D54F414303108576D31452E781A4FC9C61EA233
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134382e302f32342d3234203d3e20323636323732.roa
Signing time:             Tue 12 Mar 2024 14:58:00 +0000
ROA not before:           Tue 12 Mar 2024 14:53:00 +0000
ROA not after:            Tue 11 Mar 2025 14:58:00 +0000
asID:                     266272
IP address blocks:        170.78.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:54:f4:14:30:31:08:57:6d:31:45:2e:78:1a:4f:c9:c6:1e:a2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Mar 12 14:53:00 2024 GMT
            Not After : Mar 11 14:58:00 2025 GMT
        Subject: CN=3082010A0282010100A493A98BACE2E68C4C1436EA06D12D7F2CE7A3F8EEC9827C60668CD46A386EFE674914BBC8920B1FD76052C7E11DA7AB83ED3148A28A7C0ED93DC3EE2986917B47AFFE305CA7D711CBD156C1D1F8A36403C25030C43AC14DC01B1A97CF5D51971DDFED5D6A14FB6653D922B879147828842841BA1F40D5491F660124DADACCA28E241CD5B2FAA8810C2DDBA351E6B359D412B88E3D9AC1CC48021F42E86D407632344D4BA403C1F4437AA07D83185308B09C189FA9E3A194A32B1873525B6FD78C9FB06FD2CE16E06B8533CDC3B748E3CE1F43C0308C985F62EBAA61AFA4C63689F04F6C301CB1889F029A66B05446A1B5CC8C346B76E7B40A873DE5786E50E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:a9:8b:ac:e2:e6:8c:4c:14:36:ea:06:d1:
                    2d:7f:2c:e7:a3:f8:ee:c9:82:7c:60:66:8c:d4:6a:
                    38:6e:fe:67:49:14:bb:c8:92:0b:1f:d7:60:52:c7:
                    e1:1d:a7:ab:83:ed:31:48:a2:8a:7c:0e:d9:3d:c3:
                    ee:29:86:91:7b:47:af:fe:30:5c:a7:d7:11:cb:d1:
                    56:c1:d1:f8:a3:64:03:c2:50:30:c4:3a:c1:4d:c0:
                    1b:1a:97:cf:5d:51:97:1d:df:ed:5d:6a:14:fb:66:
                    53:d9:22:b8:79:14:78:28:84:28:41:ba:1f:40:d5:
                    49:1f:66:01:24:da:da:cc:a2:8e:24:1c:d5:b2:fa:
                    a8:81:0c:2d:db:a3:51:e6:b3:59:d4:12:b8:8e:3d:
                    9a:c1:cc:48:02:1f:42:e8:6d:40:76:32:34:4d:4b:
                    a4:03:c1:f4:43:7a:a0:7d:83:18:53:08:b0:9c:18:
                    9f:a9:e3:a1:94:a3:2b:18:73:52:5b:6f:d7:8c:9f:
                    b0:6f:d2:ce:16:e0:6b:85:33:cd:c3:b7:48:e3:ce:
                    1f:43:c0:30:8c:98:5f:62:eb:aa:61:af:a4:c6:36:
                    89:f0:4f:6c:30:1c:b1:88:9f:02:9a:66:b0:54:46:
                    a1:b5:cc:8c:34:6b:76:e7:b4:0a:87:3d:e5:78:6e:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:45:4C:F9:B3:8E:5A:09:D3:F3:B2:F3:89:E5:D6:03:13:88:18:57
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134382e302f32342d3234203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fd:b4:5a:0f:37:97:a0:b5:4d:0f:02:22:75:c2:bb:e0:f0:
         c6:2a:a9:ce:e0:9e:83:11:67:9c:e0:a2:2e:fe:a9:3d:13:af:
         ae:c8:fe:42:5e:dc:62:62:dc:16:c3:8f:d2:60:9b:6d:93:dc:
         4c:40:7b:c1:31:62:44:1c:2b:af:15:9e:5c:0b:2a:c3:dc:77:
         a0:2f:4a:f7:63:0d:f4:32:f2:e3:1b:83:63:59:57:21:45:ed:
         ba:ba:51:f3:c8:ed:c5:4f:2e:24:49:57:a4:30:1d:5a:d1:7e:
         9e:1f:d9:60:fd:f9:8e:c0:4a:2b:a9:fa:67:a9:a6:ac:d1:33:
         1f:b3:81:c5:39:5d:23:12:c8:f1:d0:0d:66:3a:63:1e:ec:ef:
         06:cc:b0:cd:eb:04:2d:b1:50:3d:93:dc:46:f3:1f:e3:d2:34:
         91:40:c5:90:93:e4:32:28:97:a5:45:04:aa:85:ba:e4:84:3d:
         d1:2e:82:82:31:4c:fb:fa:3c:bf:bd:fe:b6:ff:3f:f5:84:2a:
         fc:61:86:df:12:52:92:68:94:03:44:02:49:64:b7:db:11:8c:
         a8:76:5e:f0:3e:fb:31:bc:73:f2:e0:d7:5e:8e:1b:2c:dd:66:
         01:e8:27:10:5d:a1:12:42:23:43:a5:14:e7:d2:69:d9:d2:4f:
         29:80:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org