Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39392e302f32342d3234203d3e20323636323639.roa
File:                     3137302e37382e39392e302f32342d3234203d3e20323636323639.roa (raw, json)
Hash identifier:          oDXVAQEbMtNL5eqjpcUHadxmgnwIMSBVFiuUp18A9aU=
Subject key identifier:   FF:E6:AD:75:7C:EE:30:C7:31:4A:FD:3D:5B:D1:8B:6A:4D:F3:A9:BE
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       63C905C1AC030CA5B6E94E4470E6BF6A119E3208
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39392e302f32342d3234203d3e20323636323639.roa
Signing time:             Mon 13 Feb 2023 15:35:12 +0000
ROA not before:           Mon 13 Feb 2023 15:30:12 +0000
ROA not after:            Mon 12 Feb 2024 15:35:12 +0000
asID:                     266269
IP address blocks:        170.78.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c9:05:c1:ac:03:0c:a5:b6:e9:4e:44:70:e6:bf:6a:11:9e:32:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Feb 13 15:30:12 2023 GMT
            Not After : Feb 12 15:35:12 2024 GMT
        Subject: CN=FFE6AD757CEE30C7314AFD3D5BD18B6A4DF3A9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:31:f2:12:b6:13:2e:e2:d3:72:7b:75:3e:
                    a6:9a:d6:63:eb:cf:7f:dc:86:2c:b4:75:08:a0:38:
                    54:f2:57:f7:24:95:c9:2b:60:a8:ec:70:a9:fa:47:
                    86:5d:cd:f8:64:65:d8:04:11:17:ad:66:28:93:5b:
                    7a:a7:14:c7:db:17:07:68:01:18:bb:45:3e:f3:11:
                    67:9c:97:13:a4:97:4f:c4:6f:04:ce:36:24:43:f9:
                    24:73:8f:5a:30:13:93:d8:8b:80:12:5b:0b:52:5d:
                    94:ea:b0:4f:f6:6e:67:32:7c:5c:02:87:1a:df:ab:
                    5d:b7:88:4b:12:8f:6b:ce:0d:7f:9c:98:fe:e4:bf:
                    9a:56:00:c8:7b:2f:5d:39:43:12:e5:e4:1b:bb:81:
                    df:5a:79:51:db:4b:54:88:61:28:a0:f9:e2:b8:16:
                    85:0d:4d:d8:88:b2:d6:4e:c8:3a:ed:48:c8:55:23:
                    51:b9:41:c6:cd:ab:71:3d:f8:3a:3f:73:3d:a1:1b:
                    3a:f7:34:4b:6e:47:c0:8b:4c:ec:4d:94:af:de:b1:
                    3d:cb:9d:42:6f:09:ce:e0:7e:d2:d5:54:83:06:e5:
                    ab:a0:7c:b0:1f:9d:75:75:af:0c:d9:87:38:a7:de:
                    db:b1:69:99:a0:16:84:a8:44:17:17:c4:a0:e2:54:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:AD:75:7C:EE:30:C7:31:4A:FD:3D:5B:D1:8B:6A:4D:F3:A9:BE
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/3137302e37382e39392e302f32342d3234203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:27:6c:84:fd:a4:ce:2c:13:b6:f7:28:79:fc:c1:05:07:e5:
         10:65:cf:89:38:fb:44:7b:15:c1:51:7d:9f:1d:56:44:e7:db:
         4a:0a:96:ea:48:ba:91:fc:22:14:4f:d3:b5:4f:4c:ee:dd:e9:
         42:21:d6:69:65:62:d0:43:4c:38:c4:44:a7:de:08:28:0a:a9:
         97:86:2c:4f:75:32:c2:ff:ad:80:29:4c:54:5f:28:89:fa:cd:
         cf:1c:67:95:56:5c:14:c0:b6:65:37:c6:0a:9c:23:eb:fc:01:
         37:c7:df:04:ac:7f:5f:95:8c:5f:25:42:74:1f:7c:62:a3:cf:
         a5:a8:09:7b:21:cf:82:c7:6e:de:0b:a2:67:50:dd:11:69:12:
         03:a6:66:d6:dd:8c:09:71:e9:ad:cd:b0:4a:03:d3:17:2e:fd:
         01:3b:4a:5c:33:dc:f4:18:83:00:97:52:6e:01:b9:5a:f8:9b:
         cb:0b:6f:cb:c2:a8:e9:73:c2:ec:37:8a:89:3f:2c:1d:c1:ef:
         b6:b4:e5:03:2b:ba:02:bf:f1:25:70:04:6e:f7:c8:0f:4f:bd:
         b9:ec:18:49:32:ef:43:20:7d:bd:be:2d:2c:5f:c5:a0:7c:f1:
         94:b1:3e:6d:0a:84:e9:25:3e:c2:aa:ba:a5:2b:2d:82:bc:c6:
         e0:77:4a:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY8kFwawDDKW26U5EcOa/ahGeMggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZFM0E0NEM2Mjk2NkQ2Qjg2NTExODZCQjA4NzdCMTU3
RDAyNUE4MDAeFw0yMzAyMTMxNTMwMTJaFw0yNDAyMTIxNTM1MTJaMDMxMTAvBgNV
BAMTKEZGRTZBRDc1N0NFRTMwQzczMTRBRkQzRDVCRDE4QjZBNERGM0E5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kTHyErYTLuLTcnt1Pqaa1mPr
z3/chiy0dQigOFTyV/cklckrYKjscKn6R4ZdzfhkZdgEERetZiiTW3qnFMfbFwdo
ARi7RT7zEWeclxOkl0/EbwTONiRD+SRzj1owE5PYi4ASWwtSXZTqsE/2bmcyfFwC
hxrfq123iEsSj2vODX+cmP7kv5pWAMh7L105QxLl5Bu7gd9aeVHbS1SIYSig+eK4
FoUNTdiIstZOyDrtSMhVI1G5QcbNq3E9+Do/cz2hGzr3NEtuR8CLTOxNlK/esT3L
nUJvCc7gftLVVIMG5augfLAfnXV1rwzZhzin3tuxaZmgFoSoRBcXxKDiVAfxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/+atdXzuMMcxSv09W9GLak3zqb4wHwYDVR0j
BBgwFoAURuOkTGKWbWuGURhrsId7FX0CWoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjc0cmFBNHJQRWRiR2t4YzNxcmFOVExIbW1peTNRQmFrUlV3RVVEdW1L
YlAvMC80NkUzQTQ0QzYyOTY2RDZCODY1MTE4NkJCMDg3N0IxNTdEMDI1QTgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2RTNBNDRDNjI5NjZENkI4
NjUxMTg2QkIwODc3QjE1N0QwMjVBODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI3NHJhQTRyUEVkYkdreGMzcXJhTlRMSG1taXkzUUJha1JVd0VVRHVtS2JQLzAv
MzEzNzMwMmUzNzM4MmUzOTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5jMA0GCSqGSIb3DQEBCwUAA4IBAQCbJ2yE/aTO
LBO29yh5/MEFB+UQZc+JOPtEexXBUX2fHVZE59tKCpbqSLqR/CIUT9O1T0zu3elC
IdZpZWLQQ0w4xESn3ggoCqmXhixPdTLC/62AKUxUXyiJ+s3PHGeVVlwUwLZlN8YK
nCPr/AE3x98ErH9flYxfJUJ0H3xio8+lqAl7Ic+Cx27eC6JnUN0RaRIDpmbW3YwJ
cemtzbBKA9MXLv0BO0pcM9z0GIMAl1JuAbla+JvLC2/Lwqjpc8LsN4qJPywdwe+2
tOUDK7oCv/ElcARu98gPT7257BhJMu9DIH29vi0sX8WgfPGUsT5tCoTpJT7Cqrql
Ky2CvMbgd0pT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org