Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32332d3233203d3e20323636323639.roa
File:                     3137302e37382e39362e302f32332d3233203d3e20323636323639.roa (raw, json)
Hash identifier:          9MjfFqMdOl9ZMIeiduwWNmFOmKgJP9+y8rxdSQOqDQY=
Subject key identifier:   E8:03:43:66:33:7F:8E:8E:D8:69:D8:06:67:D9:07:3A:67:1B:E9:D0
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       5DFA2EFB9B90D6173899490DEDCBE003C6A2670A
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32332d3233203d3e20323636323639.roa
Signing time:             Sat 14 Jan 2023 14:23:19 +0000
ROA not before:           Sat 14 Jan 2023 14:18:19 +0000
ROA not after:            Sat 13 Jan 2024 14:23:19 +0000
asID:                     266269
IP address blocks:        170.78.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fa:2e:fb:9b:90:d6:17:38:99:49:0d:ed:cb:e0:03:c6:a2:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Jan 14 14:18:19 2023 GMT
            Not After : Jan 13 14:23:19 2024 GMT
        Subject: CN=E8034366337F8E8ED869D80667D9073A671BE9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:52:96:07:a4:f2:38:b3:02:1a:54:15:00:
                    7b:71:5c:3d:c7:72:a9:8e:a9:ea:a2:43:52:43:8e:
                    8a:b9:8e:7c:05:ed:dc:2b:a2:c9:67:31:36:20:67:
                    96:83:38:15:81:c7:d9:5a:4f:2a:45:aa:59:71:00:
                    f6:60:2c:1c:6b:d1:39:9b:71:71:92:51:48:10:46:
                    d5:ce:16:51:ad:99:76:c9:bb:c0:dc:64:f3:76:e8:
                    78:b9:11:c7:3f:86:a3:8c:c8:90:da:f2:92:2f:84:
                    e3:cc:f7:a5:71:48:d4:70:4f:f1:2c:f7:1e:a8:89:
                    36:2d:0c:33:78:87:c1:ed:78:a2:f4:4c:ed:d1:0a:
                    47:29:84:c7:47:3d:b8:1a:cd:3e:b2:ab:ec:72:72:
                    c4:7c:54:ed:9e:94:a8:60:c4:ca:ec:e4:5d:24:c4:
                    c3:3c:64:db:45:e1:b7:31:f8:c9:df:db:b4:fd:ea:
                    5f:83:80:34:6b:3c:d1:1d:dc:1c:99:21:36:c1:47:
                    cc:aa:56:2d:20:96:89:07:24:e5:89:b3:91:6a:3d:
                    da:40:e5:a8:b1:23:45:1d:cb:f9:ca:6b:7d:48:a5:
                    db:81:ab:48:22:c5:0d:c8:d8:d8:3c:7f:ae:fa:0f:
                    15:7d:60:01:f4:0f:45:a6:e1:1f:d1:a0:d1:d0:bc:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:43:66:33:7F:8E:8E:D8:69:D8:06:67:D9:07:3A:67:1B:E9:D0
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32332d3233203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:63:3c:85:96:d2:fd:e2:c2:16:15:e3:78:bd:88:ae:d6:82:
         80:1d:46:49:9e:f7:37:32:40:0e:33:05:b6:3b:9e:55:9b:3e:
         ee:c9:78:d5:16:5d:da:5c:17:c7:2a:6a:05:a0:1c:97:96:e2:
         b0:4d:6d:8c:2b:35:ad:db:53:50:01:95:e4:f3:04:9b:09:ce:
         fe:87:04:e4:37:17:80:77:af:c1:a1:55:fe:9a:b7:26:63:9f:
         b6:45:32:85:2f:2f:60:ed:95:84:6f:7e:1a:32:7d:fc:41:75:
         29:8c:d5:aa:c2:04:8c:5e:f5:1d:83:4a:0d:02:e4:eb:47:4c:
         d6:30:cc:f3:17:5a:95:36:96:1e:22:6c:08:ae:41:4f:26:26:
         5f:e0:62:cb:07:c7:e5:19:10:3f:ca:cd:5f:53:2e:93:d3:b3:
         ef:3b:44:95:e4:22:8a:7b:71:eb:7e:2f:ee:2e:d0:44:78:e7:
         df:2b:4f:e2:f7:79:09:87:79:a1:d9:14:b5:3d:22:ed:2f:a0:
         bf:0e:49:2e:1f:e6:97:60:6b:ec:9e:05:55:13:00:e8:41:5c:
         a5:78:bc:69:d8:a6:2b:be:87:ef:f1:9b:4b:c3:de:cb:ad:bd:
         6f:86:f6:b1:de:96:ae:c2:18:b8:f0:99:8b:26:e5:2d:43:c6:
         52:e2:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org