Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32342d3234203d3e20323636323639.roa
File:                     3137302e37382e39362e302f32342d3234203d3e20323636323639.roa (raw, json)
Hash identifier:          RipL2NmrcRHMOE+Q28hD2xANQhe3J9/g06Owa34KGlg=
Subject key identifier:   29:36:74:23:50:1F:0B:F5:9E:20:9C:B7:8F:1B:84:2F:F3:54:76:5E
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       1A776AEF784C72141B9BBEE23896D81E7F5034F5
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32342d3234203d3e20323636323639.roa
Signing time:             Mon 13 Feb 2023 15:35:40 +0000
ROA not before:           Mon 13 Feb 2023 15:30:40 +0000
ROA not after:            Mon 12 Feb 2024 15:35:40 +0000
asID:                     266269
IP address blocks:        170.78.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:77:6a:ef:78:4c:72:14:1b:9b:be:e2:38:96:d8:1e:7f:50:34:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Feb 13 15:30:40 2023 GMT
            Not After : Feb 12 15:35:40 2024 GMT
        Subject: CN=29367423501F0BF59E209CB78F1B842FF354765E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:bf:10:16:ec:51:c2:13:9b:cb:75:19:da:
                    5c:55:0d:13:c5:82:f0:3a:ba:0e:f1:55:f9:65:b9:
                    fe:dd:bd:4c:c8:5f:a2:f1:95:5a:71:f3:7a:31:d5:
                    66:7d:7b:c2:eb:d8:00:20:75:a5:ed:bd:3a:c1:9d:
                    c3:db:9b:b7:b8:a3:ec:b4:f3:e3:04:0a:f5:e0:7b:
                    f2:82:12:a2:86:3b:23:6e:ba:49:1f:57:80:86:09:
                    1d:6a:f7:04:3d:c8:5d:83:7d:62:db:a6:bd:e1:8f:
                    42:f6:95:66:55:50:e6:56:ce:b0:fa:a9:0e:ca:ee:
                    7e:32:3b:af:76:c6:7c:80:03:e3:77:f0:71:45:25:
                    4c:70:d5:d9:a0:b7:59:3d:e9:50:06:c7:a8:cf:25:
                    4b:e8:4a:97:2a:de:93:6c:e0:0a:dc:7c:93:2a:0a:
                    b4:95:c0:99:14:51:7a:fa:3b:03:88:f8:13:53:2e:
                    ca:a8:10:8f:7b:a3:99:e0:bf:82:cc:fa:1f:81:93:
                    cb:69:6b:d5:6a:3e:3b:da:c4:10:2a:f8:c5:57:1c:
                    98:cb:d6:2c:37:e9:08:74:4e:8b:c8:b5:da:0e:34:
                    39:ab:65:b5:0d:73:8a:dc:b2:9f:74:50:d0:bf:dc:
                    3c:ac:b1:73:7a:7a:a7:f8:47:75:ac:a4:5e:bf:b8:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:36:74:23:50:1F:0B:F5:9E:20:9C:B7:8F:1B:84:2F:F3:54:76:5E
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39362e302f32342d3234203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:86:15:38:f0:31:6a:97:4a:32:a1:fc:c2:6d:ee:12:98:
         9d:83:5d:dd:73:db:f8:02:dd:dd:60:8a:96:06:77:e9:52:d4:
         45:3e:b4:7f:4e:ca:96:b5:47:83:da:3f:d4:17:97:bb:43:d7:
         9e:dc:60:d8:59:2f:d9:f9:96:ca:b1:ea:e5:af:6c:91:7c:cf:
         e5:3f:0a:c6:ea:a3:e2:ad:87:84:f1:b1:89:66:90:f2:88:17:
         e2:4e:52:91:d7:6d:56:9e:16:a3:0f:5d:70:a8:ec:39:d5:32:
         f0:7d:f0:7b:d8:18:65:f9:86:ae:80:66:37:18:83:80:6e:ad:
         d3:92:10:a5:0b:dc:54:76:1b:dd:cb:77:2c:a5:1f:e9:79:c0:
         3b:0d:93:43:4e:cd:65:10:62:91:99:7b:88:06:5a:6c:f4:88:
         34:d3:5b:50:dd:c4:f3:19:33:4c:b3:08:08:48:59:8c:ad:56:
         c2:d8:ad:f0:3f:64:8c:4a:8c:82:bd:30:73:58:3a:11:26:ef:
         e8:58:5b:9b:95:a4:bf:45:dc:05:6d:b2:7e:c8:d0:25:ac:7b:
         b2:05:c9:9a:ea:75:f6:1d:bf:82:66:c0:d8:9d:91:1d:26:42:
         aa:15:7a:b5:b3:4c:a8:e1:74:0f:22:2f:67:24:7d:b0:11:6e:
         49:c0:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org