Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32322d3232203d3e20323636323639.roa
File:                     3137302e37382e39362e302f32322d3232203d3e20323636323639.roa (raw, json)
Hash identifier:          f6cMQEyAv8+nH1wlqk6INiMxTa8wn378R3PWgPQ+In8=
Subject key identifier:   D9:51:6C:EB:A0:37:5E:FE:3A:C4:8C:EC:39:56:C9:5E:15:30:A3:07
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       349C0862FE53F44F527F8C09239EDD327F9D2FBF
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32322d3232203d3e20323636323639.roa
Signing time:             Sat 14 Jan 2023 14:23:13 +0000
ROA not before:           Sat 14 Jan 2023 14:18:13 +0000
ROA not after:            Sat 13 Jan 2024 14:23:13 +0000
asID:                     266269
IP address blocks:        170.78.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9c:08:62:fe:53:f4:4f:52:7f:8c:09:23:9e:dd:32:7f:9d:2f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Jan 14 14:18:13 2023 GMT
            Not After : Jan 13 14:23:13 2024 GMT
        Subject: CN=D9516CEBA0375EFE3AC48CEC3956C95E1530A307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:8a:0d:75:8f:0c:c2:5a:6f:e2:52:23:43:
                    bf:b2:8c:ce:1a:71:00:ce:8a:6f:e0:50:e0:f8:2b:
                    72:26:27:87:f8:eb:47:70:af:3c:f0:1e:9c:59:e6:
                    68:b9:f7:4c:cd:51:b1:c4:5c:e8:17:5e:d6:e0:34:
                    f9:05:e4:24:5b:ac:40:da:3e:64:11:fe:dd:56:03:
                    b1:a5:e5:f7:77:63:76:b2:70:b4:f3:e2:37:61:49:
                    b1:cc:75:3f:05:30:78:14:d2:af:99:ff:f3:4a:4a:
                    9c:d4:18:33:8e:28:35:12:d9:67:b1:00:c8:e6:40:
                    1b:10:fb:fc:ed:64:0f:83:1e:f5:84:a7:55:b6:be:
                    2c:3b:5e:2e:d9:f5:ed:e0:12:51:8e:ea:e5:fc:b8:
                    aa:d6:64:b9:52:fb:cc:5d:ab:9d:de:93:a0:59:f2:
                    32:91:dc:0c:7d:96:db:97:04:ca:73:3e:44:73:c4:
                    7e:b4:30:b1:10:cb:81:22:41:ed:9a:97:9e:88:44:
                    97:4f:fc:e2:6b:49:75:61:cc:09:90:b2:1b:b6:e7:
                    0e:98:fe:b3:10:92:9b:f8:5d:cf:0d:77:c1:17:30:
                    b8:6b:95:82:f8:f0:7c:49:ea:40:44:59:31:72:63:
                    b3:ce:22:be:c1:3b:b8:7c:b7:93:b1:d8:79:4c:d3:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:6C:EB:A0:37:5E:FE:3A:C4:8C:EC:39:56:C9:5E:15:30:A3:07
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32322d3232203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:a5:79:69:f8:f8:53:14:39:28:93:f1:1e:29:44:55:18:
         02:fe:4a:6d:89:6c:56:79:d1:d1:0e:96:ee:28:5e:89:59:c9:
         47:ca:23:96:a5:a5:91:5c:f8:0e:95:2e:30:13:88:c4:6b:b7:
         fb:97:6b:0a:1c:ba:aa:a1:a8:f2:d2:28:a6:d2:5b:a3:93:f1:
         1a:2f:c9:7d:c1:06:b5:bc:57:6d:10:ef:66:54:42:b0:89:ff:
         93:4e:27:f2:5d:45:ce:b9:a0:ea:ac:d1:86:e4:04:10:a7:1a:
         10:78:21:50:2c:b9:33:02:2a:a0:5d:fa:3d:cf:21:b0:34:3c:
         a1:1c:28:79:2d:8f:24:e2:79:14:e0:a2:39:0d:25:79:14:b4:
         23:1b:d8:8c:25:60:59:ad:f3:6f:a5:02:74:7c:26:2d:2b:f4:
         09:28:aa:b1:2e:bf:a9:cf:65:65:80:ef:49:66:76:22:00:75:
         c3:6b:4a:24:65:a6:57:6c:a2:5f:25:98:f4:28:0a:8a:a3:98:
         ea:b4:84:6a:f2:d8:8a:26:c0:3b:a3:c9:36:c3:19:ed:00:9d:
         86:a3:2e:6e:37:84:91:3d:8d:2d:aa:f5:ac:33:b5:6a:bb:72:
         25:05:3e:40:73:48:0b:c9:3b:77:ca:4e:ca:bf:38:04:62:46:
         d7:9a:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org