Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135312e302f32342d3234203d3e20323636323732.roa
File:                     3137302e37382e3135312e302f32342d3234203d3e20323636323732.roa (raw, json)
Hash identifier:          O25dRW63rrnxCwyAeI+7HR7aUj0nryK075OpYyCBtlY=
Subject key identifier:   63:0F:0B:EE:FB:96:FA:A1:9D:91:32:9B:AE:91:CC:13:BA:67:B7:76
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       467B2DBEFC1B9F577BCD93A472A7B2A90CDB991D
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135312e302f32342d3234203d3e20323636323732.roa
Signing time:             Tue 12 Mar 2024 14:58:00 +0000
ROA not before:           Tue 12 Mar 2024 14:53:00 +0000
ROA not after:            Tue 11 Mar 2025 14:58:00 +0000
asID:                     266272
IP address blocks:        170.78.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7b:2d:be:fc:1b:9f:57:7b:cd:93:a4:72:a7:b2:a9:0c:db:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Mar 12 14:53:00 2024 GMT
            Not After : Mar 11 14:58:00 2025 GMT
        Subject: CN=3082010A0282010100C9CB9D9A6A33DF89BDABEBF6F303EF89903A4D00033FB03A179E5A32928B1EEA6DD250B9AC23B620FC920AED3E84389C1A8D070C375ECCF24ACCD33239BBBFAFC46A8A519D9BF7ACDF97DC6B706A2112E68A14A1F934D65E35533B8E7D490D669A1E8B08A7BCEFACBFC5EBECFBB982123C2F8318878409A25C99B225E0CAFA7BB5C9999E66C8C8A471B168D0B1000C6FFD238B23830FA06DB9DA87DAE9F0B6789E41C1A9ED64E52891EF4E3E54DA0AF330E7AA5600A3AA8521BF7C841219B507C13B7C5BDEBCBB839DF960549FC58415DDA961656CB43DF0553B77B58B42065CB728A9612636F41AD8E30AD40CA30C4C9C62B6A89302FEA82134337B4865A5130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:9d:9a:6a:33:df:89:bd:ab:eb:f6:f3:03:
                    ef:89:90:3a:4d:00:03:3f:b0:3a:17:9e:5a:32:92:
                    8b:1e:ea:6d:d2:50:b9:ac:23:b6:20:fc:92:0a:ed:
                    3e:84:38:9c:1a:8d:07:0c:37:5e:cc:f2:4a:cc:d3:
                    32:39:bb:bf:af:c4:6a:8a:51:9d:9b:f7:ac:df:97:
                    dc:6b:70:6a:21:12:e6:8a:14:a1:f9:34:d6:5e:35:
                    53:3b:8e:7d:49:0d:66:9a:1e:8b:08:a7:bc:ef:ac:
                    bf:c5:eb:ec:fb:b9:82:12:3c:2f:83:18:87:84:09:
                    a2:5c:99:b2:25:e0:ca:fa:7b:b5:c9:99:9e:66:c8:
                    c8:a4:71:b1:68:d0:b1:00:0c:6f:fd:23:8b:23:83:
                    0f:a0:6d:b9:da:87:da:e9:f0:b6:78:9e:41:c1:a9:
                    ed:64:e5:28:91:ef:4e:3e:54:da:0a:f3:30:e7:aa:
                    56:00:a3:aa:85:21:bf:7c:84:12:19:b5:07:c1:3b:
                    7c:5b:de:bc:bb:83:9d:f9:60:54:9f:c5:84:15:dd:
                    a9:61:65:6c:b4:3d:f0:55:3b:77:b5:8b:42:06:5c:
                    b7:28:a9:61:26:36:f4:1a:d8:e3:0a:d4:0c:a3:0c:
                    4c:9c:62:b6:a8:93:02:fe:a8:21:34:33:7b:48:65:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0F:0B:EE:FB:96:FA:A1:9D:91:32:9B:AE:91:CC:13:BA:67:B7:76
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135312e302f32342d3234203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:a9:0b:0e:47:83:5c:e5:ad:d2:45:b6:b6:01:08:5a:e2:
         3b:52:93:5c:4e:62:fc:1d:ac:f0:f6:bd:9a:12:b8:77:65:08:
         9b:86:4a:27:2e:0e:b3:20:75:51:ad:9d:c6:ed:17:48:9f:57:
         3d:03:c2:d9:4f:a1:02:bc:fb:50:bf:83:32:4e:df:57:cb:de:
         af:e6:30:f2:4c:27:86:a7:98:33:d5:d7:77:62:ee:26:1e:a2:
         3d:7d:d3:d5:c9:bd:b8:9c:2a:f0:cb:f6:93:8c:48:3f:de:dc:
         10:ae:a0:57:a6:7e:a7:66:8a:f2:be:53:43:b6:e2:f1:5d:4b:
         b5:87:49:0d:52:44:bc:29:39:79:4b:2d:b2:cc:fa:b0:36:46:
         f6:7f:33:c2:d3:50:33:4e:45:72:55:f0:f7:12:35:a8:11:bf:
         82:37:ad:e3:9b:52:c8:d3:eb:c4:fc:71:b3:d1:96:a7:49:ac:
         d8:3e:11:42:e6:40:73:4c:c5:51:e1:c0:84:f1:ab:b2:14:e4:
         25:ca:68:4e:da:54:2d:cc:e0:e9:d8:bf:a3:0f:75:07:15:18:
         f3:f1:ee:d8:29:1c:5a:c3:e4:70:14:ce:2f:27:a0:fa:24:95:
         72:aa:79:fe:dc:79:d0:dc:d7:ce:ba:c4:c2:fe:de:39:1c:1a:
         e1:e2:f1:2a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIURnstvvwbn1d7zZOkcqeyqQzbmR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQxNUQ3NUE5RDdGM0IwQ0UxRTE1QzIzODlCMjAzQTI5
NDREOUM4QjAeFw0yNDAzMTIxNDUzMDBaFw0yNTAzMTExNDU4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlDQjlEOUE2QTMzREY4OUJE
QUJFQkY2RjMwM0VGODk5MDNBNEQwMDAzM0ZCMDNBMTc5RTVBMzI5MjhCMUVFQTZE
RDI1MEI5QUMyM0I2MjBGQzkyMEFFRDNFODQzODlDMUE4RDA3MEMzNzVFQ0NGMjRB
Q0NEMzMyMzlCQkJGQUZDNDZBOEE1MTlEOUJGN0FDREY5N0RDNkI3MDZBMjExMkU2
OEExNEExRjkzNEQ2NUUzNTUzM0I4RTdENDkwRDY2OUExRThCMDhBN0JDRUZBQ0JG
QzVFQkVDRkJCOTgyMTIzQzJGODMxODg3ODQwOUEyNUM5OUIyMjVFMENBRkE3QkI1
Qzk5OTlFNjZDOEM4QTQ3MUIxNjhEMEIxMDAwQzZGRkQyMzhCMjM4MzBGQTA2REI5
REE4N0RBRTlGMEI2Nzg5RTQxQzFBOUVENjRFNTI4OTFFRjRFM0U1NERBMEFGMzMw
RTdBQTU2MDBBM0FBODUyMUJGN0M4NDEyMTlCNTA3QzEzQjdDNUJERUJDQkI4MzlE
Rjk2MDU0OUZDNTg0MTVEREE5NjE2NTZDQjQzREYwNTUzQjc3QjU4QjQyMDY1Q0I3
MjhBOTYxMjYzNkY0MUFEOEUzMEFENDBDQTMwQzRDOUM2MkI2QTg5MzAyRkVBODIx
MzQzMzdCNDg2NUE1MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAycudmmoz34m9q+v28wPviZA6TQADP7A6F55aMpKLHupt0lC5rCO2
IPySCu0+hDicGo0HDDdezPJKzNMyObu/r8RqilGdm/es35fca3BqIRLmihSh+TTW
XjVTO459SQ1mmh6LCKe876y/xevs+7mCEjwvgxiHhAmiXJmyJeDK+nu1yZmeZsjI
pHGxaNCxAAxv/SOLI4MPoG252ofa6fC2eJ5BwantZOUoke9OPlTaCvMw56pWAKOq
hSG/fIQSGbUHwTt8W968u4Od+WBUn8WEFd2pYWVstD3wVTt3tYtCBly3KKlhJjb0
GtjjCtQMowxMnGK2qJMC/qghNDN7SGWlEwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGMPC+77lvqhnZEym66RzBO6Z7d2MB8GA1UdIwQYMBaAFNQV11qdfzsM4eFcI4my
A6KUTZyLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JrOE12ZmlIZmNHRzcz
N0RQVWZKWERSbjlyeXFtczN5QXljRHdlNEJQcnBWLzAvRDQxNUQ3NUE5RDdGM0Iw
Q0UxRTE1QzIzODlCMjAzQTI5NDREOUM4Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENDE1RDc1QTlEN0YzQjBDRTFFMTVDMjM4OUIyMDNBMjk0NEQ5
QzhCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CazhNdmZpSGZjR0c3MzdEUFVm
SlhEUm45cnlxbXMzeUF5Y0R3ZTRCUHJwVi8wLzMxMzczMDJlMzczODJlMzEzNTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzIzNzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qk6XMA0GCSqGSIb3DQEBCwUAA4IBAQAfMqkLDkeDXOWt0kW2tgEIWuI7UpNcTmL8
Hazw9r2aErh3ZQibhkonLg6zIHVRrZ3G7RdIn1c9A8LZT6ECvPtQv4MyTt9Xy96v
5jDyTCeGp5gz1dd3Yu4mHqI9fdPVyb24nCrwy/aTjEg/3twQrqBXpn6nZoryvlND
tuLxXUu1h0kNUkS8KTl5Sy2yzPqwNkb2fzPC01AzTkVyVfD3EjWoEb+CN63jm1LI
0+vE/HGz0ZanSazYPhFC5kBzTMVR4cCE8auyFOQlymhO2lQtzODp2L+jD3UHFRjz
8e7YKRxaw+RwFM4vJ6D6JJVyqnn+3HnQ3NfOusTC/t45HBrh4vEq
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org