Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3232203d3e20323634303039.roa
File:                     3137302e37382e3132302e302f32322d3232203d3e20323634303039.roa (raw, json)
Hash identifier:          JhRE4RiOXg4UpcDB8Hox6Fa94jMBjuYsd3guMm+zIsg=
Subject key identifier:   E1:25:7A:7E:B4:0C:89:65:61:DC:5D:CD:43:54:D1:1B:BD:DB:4D:F6
Certificate issuer:       /CN=E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F
Certificate serial:       32D22E22C3720A4463D3B595E3533E8AFE0EEDDC
Authority key identifier: E2:6E:C6:7B:22:DE:C9:50:EE:3F:C2:2B:A1:28:E6:FA:5C:91:EF:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3232203d3e20323634303039.roa
Signing time:             Tue 11 Apr 2023 10:33:14 +0000
ROA not before:           Tue 11 Apr 2023 10:28:14 +0000
ROA not after:            Tue 09 Apr 2024 10:33:14 +0000
asID:                     264009
IP address blocks:        170.78.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:2e:22:c3:72:0a:44:63:d3:b5:95:e3:53:3e:8a:fe:0e:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F
        Validity
            Not Before: Apr 11 10:28:14 2023 GMT
            Not After : Apr  9 10:33:14 2024 GMT
        Subject: CN=E1257A7EB40C896561DC5DCD4354D11BBDDB4DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:18:10:42:81:be:b3:0d:ff:34:be:13:7e:
                    6c:1a:eb:88:db:1d:a0:d4:bf:f1:bf:f2:11:17:4b:
                    43:f5:4c:b9:50:00:5e:62:96:9b:30:49:46:f0:cc:
                    10:3f:02:a4:3a:3f:8c:e9:50:2e:7d:b3:6e:63:bd:
                    4a:ae:17:c4:c1:a4:1c:ce:8c:7d:8b:f6:58:87:9a:
                    47:a2:51:55:41:3c:d8:b7:af:f4:87:b7:b7:18:c5:
                    e4:7b:d1:46:cb:ad:ba:6f:7a:59:f1:48:51:5e:9d:
                    24:63:eb:c5:2f:e0:82:54:c0:ae:a3:08:07:00:3d:
                    04:c5:e4:67:38:e2:a5:53:a6:81:e2:d7:13:c7:08:
                    65:56:ae:b3:ea:cb:00:6c:d4:c2:2b:2b:9d:a4:39:
                    f0:8d:86:c0:11:3f:33:49:23:d3:01:95:ce:30:f9:
                    68:9e:0a:c6:08:35:28:90:1e:fd:bc:ed:1f:1b:79:
                    ef:6a:fd:9f:5c:14:0f:21:15:3e:11:a1:87:c3:9b:
                    53:5e:bc:e4:51:e7:ea:41:76:d6:25:fb:18:da:68:
                    37:25:9d:6b:34:3a:3a:8f:86:9f:8f:44:75:ae:98:
                    e1:2a:b3:32:3e:50:d1:a1:62:ff:9d:77:16:12:fe:
                    80:c4:3e:72:47:8a:cf:ec:c9:5a:b3:84:f0:a4:38:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:7A:7E:B4:0C:89:65:61:DC:5D:CD:43:54:D1:1B:BD:DB:4D:F6
            X509v3 Authority Key Identifier:
                keyid:E2:6E:C6:7B:22:DE:C9:50:EE:3F:C2:2B:A1:28:E6:FA:5C:91:EF:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3232203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:8a:fc:4d:cc:b3:f5:ff:90:88:d6:38:6a:61:c1:6a:0b:bb:
         a3:de:98:c6:6f:ea:40:96:56:df:67:9f:a5:ba:0d:78:e2:61:
         c8:81:f4:1f:ed:1a:3a:c9:4a:1f:66:e2:22:36:29:cb:7e:8d:
         54:f7:d2:8a:1a:79:9b:76:ee:da:73:3c:7a:f7:17:fc:31:01:
         53:d0:bc:8b:4b:d5:14:83:ca:41:03:12:1b:ed:d3:f5:96:08:
         b9:88:09:ed:d0:61:39:cc:a9:0d:4d:cb:4b:53:24:c8:53:44:
         ff:8f:b2:94:73:b2:ec:78:b4:bd:64:65:d4:45:5f:5e:39:21:
         99:f1:ef:78:79:1f:e4:4d:d0:50:77:88:34:49:62:71:d7:83:
         00:2c:f0:2b:76:7a:15:fb:ed:23:7c:6d:a1:77:dc:d8:0e:6a:
         b3:e2:b2:1c:1e:d4:f2:eb:d8:57:94:58:dc:44:bc:7f:b0:91:
         50:75:fc:a0:86:1b:af:79:96:d2:7a:ae:ac:b1:79:7f:c1:59:
         c4:60:22:7c:77:25:2f:bc:a3:29:f5:8e:aa:e4:a2:ad:7f:bd:
         fe:3e:f4:02:09:80:f3:01:7b:55:2b:6d:4b:fe:6f:46:81:62:
         d8:99:90:82:5b:f5:2b:6d:32:da:a3:b0:06:3d:c5:45:82:2e:
         41:c3:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org