Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32322d3234203d3e20323635323431.roa
File:                     3137302e37382e32382e302f32322d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          +GLI81RcsRo/tBEldodDqz5IVBfNbkvDSq11iy+ta1k=
Subject key identifier:   84:63:C1:73:5F:2D:2B:0C:0A:9C:9A:D4:04:47:A6:98:10:7C:B5:D6
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       08A942248A3705DCA3DA3E9EBC1EE6CAA50D2C71
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32322d3234203d3e20323635323431.roa
Signing time:             Wed 08 Nov 2023 14:05:32 +0000
ROA not before:           Wed 08 Nov 2023 14:00:32 +0000
ROA not after:            Wed 06 Nov 2024 14:05:32 +0000
asID:                     265241
IP address blocks:        170.78.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a9:42:24:8a:37:05:dc:a3:da:3e:9e:bc:1e:e6:ca:a5:0d:2c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Nov  8 14:00:32 2023 GMT
            Not After : Nov  6 14:05:32 2024 GMT
        Subject: CN=8463C1735F2D2B0C0A9C9AD40447A698107CB5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:d1:ff:7e:be:73:05:61:18:e2:cd:d1:43:
                    3a:be:48:ce:2f:43:19:8c:50:c5:47:a5:fb:fe:3b:
                    88:57:07:68:77:3e:37:4c:9a:50:6c:50:b1:a2:46:
                    11:b8:a9:6f:d8:de:8a:f0:e3:9d:17:9b:dc:c5:07:
                    36:7d:c1:e5:40:15:19:88:83:c1:ba:73:bc:c9:9b:
                    56:27:89:18:c1:97:79:ea:42:37:71:48:b4:3e:55:
                    4d:de:cd:99:d5:fb:ca:17:52:db:f0:7d:59:32:89:
                    53:a9:78:a7:4a:c7:a5:50:be:bf:e2:0a:4e:a3:32:
                    fc:e2:5c:22:37:e8:4a:e2:0d:41:58:d4:93:15:fd:
                    a5:4f:99:5b:ef:97:09:8d:de:f4:14:c7:b4:d7:8a:
                    6a:12:96:96:1c:c2:6e:1c:b3:67:fa:65:8e:0b:01:
                    84:77:9b:02:4e:3a:7b:8a:22:7f:55:21:6c:98:02:
                    91:40:d1:62:6e:68:8c:7b:4a:27:9e:1b:f8:23:01:
                    92:e1:40:8c:9c:42:a1:f1:1b:91:8a:bd:fa:01:2f:
                    af:96:3b:bf:8a:68:b0:7c:7c:a2:61:8c:01:90:72:
                    81:a3:63:b8:a5:15:be:44:16:a0:21:05:1c:16:df:
                    df:08:7b:86:93:ac:b7:57:0e:cb:33:51:64:04:f7:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:C1:73:5F:2D:2B:0C:0A:9C:9A:D4:04:47:A6:98:10:7C:B5:D6
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32322d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:7f:c5:e4:86:ce:d8:c7:6f:b8:bd:ed:7a:8b:0a:3b:37:
         2c:08:3f:0f:c7:b8:af:41:c2:77:16:2b:cc:7e:cd:fc:d5:69:
         87:bb:49:35:df:7c:c2:4f:23:51:98:58:bd:f4:ff:1d:5d:8b:
         f9:0c:6a:d9:8a:81:a1:34:b5:33:be:9c:bc:5b:8f:f6:f8:b5:
         b7:f0:3a:6d:82:b3:9f:2c:9a:c7:55:6b:5d:a3:60:63:c1:0d:
         8d:1a:28:e0:19:2d:1d:a4:ad:24:e5:bf:ca:59:62:f2:67:11:
         70:c5:a8:41:de:4a:89:b5:c8:0b:59:e4:71:d7:a5:63:9c:b3:
         36:73:75:42:ec:c3:85:6a:92:62:6e:7c:35:66:f8:0b:4a:8c:
         de:02:14:34:b3:76:34:f5:c6:c2:ec:fb:55:47:48:45:32:fe:
         9d:a5:13:37:96:4c:86:6f:b7:05:de:d1:c4:c7:37:9f:d8:64:
         89:60:48:4d:7c:9d:70:36:52:d3:a5:9d:01:6e:29:e2:12:6c:
         9f:a2:ef:07:e4:56:c1:5d:1a:db:e7:fc:76:5e:62:31:b8:64:
         0a:55:3f:85:d8:43:49:55:b6:8e:04:21:16:31:f7:0d:f0:55:
         07:e9:c7:cd:70:7a:0e:62:6a:ff:7c:9c:0a:3b:12:22:7b:38:
         98:d9:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org