Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39372e302f32342d3234203d3e20323636323639.roa
File:                     3137302e37382e39372e302f32342d3234203d3e20323636323639.roa (raw, json)
Hash identifier:          74EPa0rKUc2T/VU6DhAco58mQqUryNxsZ6/avl6Z1TY=
Subject key identifier:   F2:CA:28:A9:35:41:4D:31:78:6A:B1:62:D9:1E:8B:A2:BB:7B:0A:F7
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       1CD80AD0637CDB4D8566EC68DA6F9D9B6DB18922
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39372e302f32342d3234203d3e20323636323639.roa
Signing time:             Sat 14 Jan 2023 14:23:22 +0000
ROA not before:           Sat 14 Jan 2023 14:18:22 +0000
ROA not after:            Sat 13 Jan 2024 14:23:22 +0000
asID:                     266269
IP address blocks:        170.78.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d8:0a:d0:63:7c:db:4d:85:66:ec:68:da:6f:9d:9b:6d:b1:89:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Jan 14 14:18:22 2023 GMT
            Not After : Jan 13 14:23:22 2024 GMT
        Subject: CN=F2CA28A935414D31786AB162D91E8BA2BB7B0AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:9a:74:e2:24:c2:1d:3b:74:3a:48:51:3d:
                    a6:0e:11:b4:66:49:93:84:15:32:69:32:ee:21:0d:
                    b3:73:0c:3e:43:1b:c2:ef:7d:c5:c8:6b:07:7a:a1:
                    e4:03:26:4b:73:b8:88:21:a2:3e:b4:53:85:af:30:
                    db:31:bb:66:12:34:45:e2:d9:79:70:73:be:1a:0d:
                    c7:4b:f6:03:56:ef:78:b4:21:49:59:58:eb:9c:76:
                    27:61:70:28:f9:d3:fb:4e:f3:7e:5b:8d:11:b2:e7:
                    c8:ed:75:83:58:7d:c7:ed:a8:54:35:4c:06:39:0b:
                    9c:b0:f0:5f:c8:26:92:2c:2b:5a:29:0b:37:82:1a:
                    52:6d:0e:c0:fe:a8:80:47:8a:61:fd:1b:b7:af:c9:
                    92:8e:9f:5d:b3:4d:52:41:c1:34:b9:0e:24:bc:56:
                    77:77:ce:52:c5:72:cb:c6:df:40:32:12:09:9a:b0:
                    62:89:a0:67:b3:21:84:35:97:84:ab:d5:56:02:00:
                    f8:ba:b4:4b:62:73:8e:11:ce:3f:72:b9:d6:01:a4:
                    74:b3:5c:1e:00:4c:0a:7c:ed:b6:a0:64:18:cd:a1:
                    2a:2e:04:99:50:39:18:98:aa:bb:d8:00:e9:8f:f6:
                    19:5e:b9:71:10:3f:69:87:4b:7a:78:65:8b:39:9f:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:28:A9:35:41:4D:31:78:6A:B1:62:D9:1E:8B:A2:BB:7B:0A:F7
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39372e302f32342d3234203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:93:5d:68:2f:b8:25:d2:a9:59:15:be:81:c4:fe:32:f0:fc:
         7a:83:81:82:be:9b:bf:e8:27:d5:8a:67:29:5e:1f:81:33:ee:
         56:cc:8b:de:3d:78:78:2a:74:f5:aa:90:4a:ba:e6:ac:6e:40:
         b1:ae:aa:7d:07:ce:91:c4:3a:9a:02:6e:41:85:f9:9b:04:eb:
         86:a1:b8:a1:21:6f:08:b8:9b:bb:0e:f4:41:15:3d:24:9f:29:
         62:67:37:2f:37:7c:db:fc:c8:93:7b:a7:12:0a:04:81:f5:66:
         24:3c:55:db:60:85:fa:f6:af:dc:a0:3d:64:63:9d:10:e5:4a:
         16:eb:36:9b:20:bc:20:aa:30:75:aa:e1:07:46:ac:c4:c3:ef:
         51:8f:b0:f0:b9:07:62:40:32:06:1a:c5:ad:69:d4:0a:8a:42:
         1e:19:e1:4d:f2:10:75:bd:24:12:b1:dd:4d:e3:bd:32:d1:9c:
         69:af:61:66:6f:fe:4b:e6:58:04:20:85:cb:60:2a:29:46:54:
         f8:5e:2a:1a:35:7d:c4:78:80:cd:9c:66:86:67:47:7f:8c:0c:
         c6:5d:9f:e7:a5:42:f4:40:91:94:b0:bb:7e:3c:08:18:ea:25:
         f6:67:98:59:13:55:e7:fd:73:43:4f:ec:59:e1:9e:ad:66:6d:
         c6:ba:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org