Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39382e302f32332d3233203d3e20323636323639.roa
File:                     3137302e37382e39382e302f32332d3233203d3e20323636323639.roa (raw, json)
Hash identifier:          9HsEWXsfDYSWaJVKvU9w8r5WJk1mJeO+SkgJE/DN8p4=
Subject key identifier:   34:7E:70:B4:F8:9D:48:78:5A:B9:BE:70:6E:9C:1C:9C:DC:ED:84:D9
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       6A51A3FF5F3C148A14609E38CBDCDC6DCB4B3BCD
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39382e302f32332d3233203d3e20323636323639.roa
Signing time:             Sat 14 Jan 2023 14:23:25 +0000
ROA not before:           Sat 14 Jan 2023 14:18:25 +0000
ROA not after:            Sat 13 Jan 2024 14:23:25 +0000
asID:                     266269
IP address blocks:        170.78.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:51:a3:ff:5f:3c:14:8a:14:60:9e:38:cb:dc:dc:6d:cb:4b:3b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Jan 14 14:18:25 2023 GMT
            Not After : Jan 13 14:23:25 2024 GMT
        Subject: CN=347E70B4F89D48785AB9BE706E9C1C9CDCED84D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:79:31:0b:c4:df:7e:52:89:78:cc:37:6e:
                    2d:58:5f:1b:46:5e:9f:b1:70:b0:df:b2:b0:53:a5:
                    80:f2:7a:ed:d4:e6:14:1e:78:fb:e6:48:5b:d8:e8:
                    f0:f7:8a:68:2b:e9:e4:89:e1:a5:2e:89:03:7d:53:
                    9d:54:c8:8f:b2:6f:50:d7:29:5a:43:b8:d2:9c:fa:
                    46:c5:ac:32:a5:8f:1f:10:da:dc:f6:79:1d:f5:e2:
                    7e:d2:29:7e:37:c3:5e:1e:2a:bc:e7:97:52:b2:6e:
                    b2:a8:ad:8d:08:d6:cb:68:72:50:ae:ca:9a:7b:36:
                    a6:12:aa:52:6c:95:d2:98:1a:09:99:4c:da:54:ba:
                    05:e6:d2:f6:1f:32:eb:8c:cc:dc:62:bc:64:62:65:
                    83:b3:3b:eb:91:4b:77:29:b7:4b:94:7a:c1:cc:c5:
                    42:1b:99:02:76:64:ef:72:4c:ae:44:ba:33:26:ee:
                    b9:d6:e2:b5:53:5a:61:55:2d:83:8c:01:4d:0a:89:
                    c8:05:01:f0:fa:bf:63:f2:be:98:3e:64:ab:a5:bd:
                    b6:23:c5:49:b4:d7:6e:a8:9d:ff:da:1a:c7:f9:e2:
                    8c:e5:12:fb:d7:ed:e2:17:f1:b9:01:42:07:2d:53:
                    30:be:67:df:66:bf:5d:af:10:7a:bc:54:f8:00:2c:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:70:B4:F8:9D:48:78:5A:B9:BE:70:6E:9C:1C:9C:DC:ED:84:D9
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39382e302f32332d3233203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:71:66:11:18:2c:43:fe:fc:48:39:f5:be:96:3e:5c:8c:94:
         31:e0:73:8d:a6:3b:4d:3e:5f:91:65:89:86:cc:5a:08:7d:64:
         40:63:44:e8:ee:3f:40:8f:ef:e7:c5:ba:3a:9d:8b:7c:c5:70:
         2d:1a:eb:29:62:e9:f8:03:a4:d0:b1:56:0d:dd:3f:16:99:1f:
         a9:df:79:89:4f:8b:38:9e:8c:28:64:52:b0:e4:69:05:2b:16:
         51:5b:d2:af:db:f6:a0:b9:e9:d0:05:e9:8d:70:21:e8:7f:4c:
         7b:43:b8:a3:ed:f6:76:c3:66:e1:b3:37:b7:72:95:4c:d2:4c:
         54:93:f7:31:61:59:9e:09:6b:d1:27:fa:ac:53:c5:e6:48:9a:
         08:2f:c8:b3:c1:15:37:d9:f0:fb:a0:e7:c5:b4:42:a8:ce:3e:
         f6:2a:30:fc:f0:46:be:ad:18:62:dd:a3:ed:dd:36:fe:16:b2:
         34:cc:70:30:f1:b1:4e:e9:99:66:22:40:ec:cd:1a:0b:a8:28:
         16:e3:6a:67:fb:bd:fb:a4:86:1b:04:f3:e1:c2:36:d7:c3:c6:
         80:7f:a6:97:10:74:9f:87:3a:37:7b:2b:e3:ec:b3:36:11:4a:
         6b:05:c9:fc:1f:77:18:c0:ec:8a:de:07:83:52:bd:fa:bd:cc:
         ff:d4:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org