Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32322d3234203d3e20323636323639.roa
File:                     3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (raw, json)
Hash identifier:          2nXddYuoARKsFsMEnqUotLTRK/D+tGkAM2A2BY6KYp0=
Subject key identifier:   52:EA:56:ED:27:36:9E:09:BE:75:65:A9:F7:B6:2B:92:5A:8B:FE:47
Certificate issuer:       /CN=C44C699620672708688027C85518ECECB68936EF
Certificate serial:       331E72C2A43505F98636AC807DF0976F33CB93B3
Authority key identifier: C4:4C:69:96:20:67:27:08:68:80:27:C8:55:18:EC:EC:B6:89:36:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44C699620672708688027C85518ECECB68936EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32322d3234203d3e20323636323639.roa
Signing time:             Tue 26 Sep 2023 03:08:17 +0000
ROA not before:           Tue 26 Sep 2023 03:03:17 +0000
ROA not after:            Tue 24 Sep 2024 03:08:17 +0000
asID:                     266269
IP address blocks:        170.78.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:72:c2:a4:35:05:f9:86:36:ac:80:7d:f0:97:6f:33:cb:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44C699620672708688027C85518ECECB68936EF
        Validity
            Not Before: Sep 26 03:03:17 2023 GMT
            Not After : Sep 24 03:08:17 2024 GMT
        Subject: CN=52EA56ED27369E09BE7565A9F7B62B925A8BFE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:01:b8:eb:4d:c9:5c:94:ac:70:50:b2:0f:
                    99:33:bf:30:df:3f:89:86:57:15:7c:a7:48:c9:c0:
                    e8:cd:cd:c0:d4:5d:ce:1e:98:bc:ca:40:e6:14:0c:
                    39:ec:fb:2b:bd:64:35:fc:05:b9:ba:b2:b8:7f:81:
                    19:6f:df:6f:88:c4:92:5e:a6:b6:94:b5:86:88:8e:
                    e9:b7:40:10:21:a3:86:32:78:37:1a:19:10:a9:9f:
                    e4:90:ea:dc:47:0e:60:de:e1:f0:f2:9e:03:81:7e:
                    91:52:0c:72:86:b0:cc:64:9c:05:27:93:71:5c:e6:
                    2f:07:fd:e1:65:3f:da:a4:32:42:2d:5d:70:7f:1e:
                    ca:d6:a7:55:9e:ab:10:d3:76:dd:fd:33:42:15:94:
                    5e:85:08:15:8d:3f:dd:95:82:f9:ec:1b:ef:59:78:
                    75:ae:32:24:ed:e0:e1:6e:b4:a6:6d:bc:19:be:32:
                    de:ca:d2:63:24:3d:ab:7b:19:19:b4:46:9e:f8:c3:
                    29:18:89:cf:71:32:ed:0b:3f:c5:ba:ba:63:8d:7a:
                    50:59:45:56:82:fa:06:13:2d:cd:9e:58:32:f5:aa:
                    92:cb:6b:71:54:36:99:fb:2d:ae:10:3d:64:ff:b7:
                    87:de:8b:9c:15:85:e7:21:01:0c:d8:af:f5:19:6a:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:56:ED:27:36:9E:09:BE:75:65:A9:F7:B6:2B:92:5A:8B:FE:47
            X509v3 Authority Key Identifier:
                keyid:C4:4C:69:96:20:67:27:08:68:80:27:C8:55:18:EC:EC:B6:89:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/C44C699620672708688027C85518ECECB68936EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44C699620672708688027C85518ECECB68936EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32322d3234203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:ac:a0:42:8a:ba:31:48:5a:e5:0b:d3:ab:73:6e:b7:49:
         3a:6e:5b:8a:c9:cd:60:a9:26:9a:22:14:55:53:2f:a3:2a:56:
         1b:5a:e1:94:4f:27:be:5b:e1:b1:8e:bf:39:e2:5f:13:57:f8:
         af:52:5a:1b:13:ef:a0:e0:65:8e:64:11:32:90:78:0e:69:a8:
         a7:b8:a9:af:23:e0:30:3e:e1:98:55:e0:f7:fd:a2:c5:3a:aa:
         5b:12:51:c5:2c:8d:e1:48:df:f2:60:a4:ce:b0:2a:05:f6:1f:
         83:d5:08:e6:fa:b9:7e:e6:d2:b2:ef:db:fe:97:c4:f4:b8:0f:
         f3:1b:f7:49:45:25:30:64:b8:35:53:94:50:8c:c1:ad:82:b3:
         58:b4:97:61:23:92:60:44:16:e1:7a:0d:0f:bc:6e:58:9d:b3:
         fc:b0:f0:09:fc:c0:8c:a8:39:fa:e7:f9:bd:fb:21:66:38:71:
         ec:d2:df:99:ae:31:96:b9:b1:c3:f7:2e:69:06:99:79:20:45:
         10:10:a3:97:41:8d:b5:5e:68:0d:45:e0:11:a6:b0:2b:4a:27:
         3e:15:ad:46:56:44:a7:b5:70:e2:55:fd:d6:12:9f:c1:e0:70:
         d8:37:e8:07:67:8f:cc:5f:0e:ca:b8:ed:b0:67:b1:e2:95:4e:
         9d:3d:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org