Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
File:                     3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          NPlXFB4LYFFQCm5UYwa9NnIWvmhSrXthExxS4eR+0oU=
Subject key identifier:   C1:D5:5F:F7:C5:BD:AE:F6:3C:95:6D:E3:3C:FB:A8:1D:A4:18:C7:7F
Certificate issuer:       /CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Certificate serial:       24B9BF3B5686837C235FD72E854ABC87FCCD7F8D
Authority key identifier: 17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
Signing time:             Wed 07 Aug 2024 17:24:14 +0000
ROA not before:           Wed 07 Aug 2024 17:19:14 +0000
ROA not after:            Wed 06 Aug 2025 17:24:14 +0000
asID:                     264009
IP address blocks:        170.78.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b9:bf:3b:56:86:83:7c:23:5f:d7:2e:85:4a:bc:87:fc:cd:7f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
        Validity
            Not Before: Aug  7 17:19:14 2024 GMT
            Not After : Aug  6 17:24:14 2025 GMT
        Subject: CN=C1D55FF7C5BDAEF63C956DE33CFBA81DA418C77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:5e:29:e0:bc:73:5b:3a:11:73:9a:33:f6:
                    8a:d7:47:81:28:aa:f6:9a:e9:2d:26:6a:63:4b:86:
                    f6:e5:96:6e:37:a9:7d:1d:8c:1e:41:e8:fc:e1:f6:
                    68:f8:f1:0f:fd:cb:53:0b:92:b6:83:5c:f6:89:23:
                    f6:fe:d7:73:e5:ef:ca:42:b8:13:ee:02:70:cb:67:
                    49:04:90:ed:54:7d:7a:8e:c2:25:94:27:c5:b5:e7:
                    78:08:62:e6:67:71:3a:38:e9:75:44:e6:f2:ef:93:
                    9a:e3:60:07:9b:00:7d:89:46:18:15:89:24:e5:09:
                    4e:c8:d8:be:d9:b7:c2:b2:75:e4:52:68:4c:93:b5:
                    ab:a2:fd:21:ea:a5:22:7b:8a:95:e9:aa:a2:52:c6:
                    9e:e3:dd:05:c4:41:0f:a4:36:a7:28:e5:2b:9f:4f:
                    ed:8e:12:50:46:b9:29:90:58:b0:da:fb:1b:90:2f:
                    fc:59:cc:99:2d:87:55:35:22:a1:7d:08:b7:87:22:
                    4d:b7:48:8b:9c:67:ab:92:af:7d:c9:4e:bd:30:11:
                    c6:b2:52:29:56:a3:8e:a1:d9:53:85:80:92:53:5f:
                    56:0d:5a:49:f5:9c:a5:0a:2a:3f:57:39:5e:93:f8:
                    d8:98:4a:2c:0a:29:0f:26:ef:40:f9:28:08:3e:17:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:5F:F7:C5:BD:AE:F6:3C:95:6D:E3:3C:FB:A8:1D:A4:18:C7:7F
            X509v3 Authority Key Identifier:
                keyid:17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:df:cf:44:41:35:eb:32:16:cb:7f:a8:68:8a:1a:2d:ce:95:
         c2:58:80:85:ed:37:e6:f1:a5:e2:d7:b9:46:d6:1d:f9:ac:a0:
         41:ad:1b:43:b5:5e:ae:91:b1:de:0c:5c:01:00:4b:5b:7e:3f:
         dd:33:89:48:48:01:a3:02:48:60:40:6e:7f:68:81:7d:60:5c:
         ae:e9:f2:c4:ce:a3:9c:b9:c9:d8:81:f7:2f:be:ae:69:09:d6:
         5c:75:e6:a8:11:0e:4f:9e:5e:3a:1c:7b:86:5a:8d:ed:6a:15:
         e6:7e:90:37:3e:75:81:88:bc:f4:a1:41:fc:08:05:c9:7a:c8:
         03:de:b4:ef:f9:75:e2:7e:b8:04:49:52:26:a4:66:e2:82:c5:
         a2:35:fb:65:96:38:d7:a2:06:ae:28:ab:fb:b9:a2:39:c8:34:
         53:18:64:91:a5:d4:9d:88:65:86:40:aa:cf:71:74:5c:91:34:
         42:81:7d:47:d4:c4:66:2a:0c:f9:18:a4:92:ae:72:d5:cd:4b:
         d7:71:b0:09:e5:3b:0e:bb:81:ce:08:ae:9b:9c:a3:ee:ee:2d:
         af:fc:4d:90:1c:46:3b:da:28:ae:63:6a:39:54:4d:d5:de:82:
         f2:84:85:be:9a:7f:f4:a1:4e:5c:a8:bd:c1:b8:66:a6:83:9b:
         d7:5d:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:31 2025 by rpki-client