Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135302e302f32342d3234203d3e20323636323732.roa
File:                     3137302e37382e3135302e302f32342d3234203d3e20323636323732.roa (raw, json)
Hash identifier:          MLg6wkfrgyeOqend+jOVeGjRtsm5ME8E4SUMkJsWaAI=
Subject key identifier:   7D:41:E2:C8:F8:AB:68:36:E2:43:1B:25:11:C0:87:93:0C:A2:3F:19
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       7144DB9F93FDA24DEAF70B5DF440776855C94BDB
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135302e302f32342d3234203d3e20323636323732.roa
Signing time:             Tue 12 Mar 2024 14:58:00 +0000
ROA not before:           Tue 12 Mar 2024 14:53:00 +0000
ROA not after:            Tue 11 Mar 2025 14:58:00 +0000
asID:                     266272
IP address blocks:        170.78.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:44:db:9f:93:fd:a2:4d:ea:f7:0b:5d:f4:40:77:68:55:c9:4b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Mar 12 14:53:00 2024 GMT
            Not After : Mar 11 14:58:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:98:7b:a7:4f:4b:5f:95:bd:a6:a6:cd:83:
                    e5:65:c1:f7:a2:49:c1:9a:fd:0b:36:3e:26:71:bb:
                    a0:e6:d7:00:c8:c4:2d:7a:af:5d:68:a8:50:64:ce:
                    0b:3c:a6:e1:46:7b:b1:47:c8:97:87:a3:b7:23:77:
                    69:c8:51:28:e8:23:65:47:44:9b:3a:d3:c5:df:f8:
                    fb:10:3e:73:14:ea:38:73:c0:8a:78:30:70:8d:ee:
                    8e:7c:ce:90:ae:e8:7b:d0:e4:1f:ec:66:de:9c:92:
                    07:fe:17:7d:de:24:98:1d:55:2d:88:ce:87:e1:d4:
                    57:8d:5e:cc:da:c7:f7:47:41:fe:42:1e:3d:e7:e0:
                    c9:af:7d:01:ac:3b:67:3e:dc:11:43:ae:0a:73:af:
                    33:38:77:31:0f:cc:98:51:a3:23:15:18:02:94:67:
                    22:a4:59:30:e5:61:2f:40:f9:d9:f1:4c:9a:fb:9a:
                    00:cf:cf:ca:d1:23:dc:b1:97:20:02:c5:6b:2b:49:
                    ff:6b:45:b3:2b:8b:9f:c7:dd:d2:d1:a3:39:5b:0e:
                    2e:36:5b:bc:9e:3e:d4:05:76:8c:af:2d:35:51:9c:
                    51:4a:30:ee:8c:22:2d:10:4b:89:57:01:47:f5:f5:
                    bb:8f:7f:01:4a:31:7e:49:0c:01:3c:95:36:44:03:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:E2:C8:F8:AB:68:36:E2:43:1B:25:11:C0:87:93:0C:A2:3F:19
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135302e302f32342d3234203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:af:11:fa:09:fa:6f:7c:c9:73:c7:85:de:33:46:1b:66:04:
         12:c2:94:0e:2b:65:a6:7e:e6:a6:1c:3c:72:3c:a4:27:64:c2:
         0d:3b:86:bc:9c:e4:39:10:66:64:90:c6:ab:4b:64:4e:2b:65:
         73:69:30:dc:4d:fd:6c:b9:16:be:c4:89:ff:5e:b9:30:70:db:
         2c:64:14:20:ec:e5:43:b5:a7:23:d0:0e:2b:62:7a:56:92:c0:
         10:e4:d1:98:66:36:c6:4d:e5:75:0b:3f:cf:7b:3b:96:2d:93:
         23:e9:cf:b6:ee:d6:24:71:1b:e4:07:4e:29:4c:8a:6c:8f:3f:
         ff:56:c0:70:9b:02:97:b3:46:f5:e0:6a:59:2c:69:e2:48:f0:
         16:7c:56:10:ab:81:34:31:20:1a:a8:20:9c:97:7a:64:00:a7:
         ed:d4:67:69:c0:7d:0d:89:3c:7a:ff:bd:72:f0:30:ec:a9:14:
         4b:3d:3b:f0:d0:ee:00:09:0e:97:9d:33:55:fc:94:03:fb:b1:
         69:e1:f0:f4:b2:06:b0:a1:d5:68:f9:19:2c:e7:8a:e2:9e:06:
         0b:bc:1c:f8:22:51:5f:a7:82:43:01:37:23:e8:02:e2:d8:b1:
         eb:bb:17:34:f9:3b:c7:83:ac:c2:53:e1:d4:2b:66:3c:40:79:
         54:2f:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org