Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32332d3233203d3e20323635323431.roa
File:                     3137302e37382e32382e302f32332d3233203d3e20323635323431.roa (raw, json)
Hash identifier:          dslEmO0veCDZd+u6aXgvNkEyVzYGlTUbfgE0KBHWkcU=
Subject key identifier:   5B:4C:25:BE:EC:52:F3:B7:6D:6D:CA:91:81:33:E5:53:58:E6:F5:01
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       342B776980AB45823DB6D142D746AC9F1A8135C4
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32332d3233203d3e20323635323431.roa
Signing time:             Tue 17 May 2022 23:48:07 +0000
ROA not before:           Tue 17 May 2022 23:43:07 +0000
ROA not after:            Tue 16 May 2023 23:48:07 +0000
asID:                     265241
IP address blocks:        170.78.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2b:77:69:80:ab:45:82:3d:b6:d1:42:d7:46:ac:9f:1a:81:35:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: May 17 23:43:07 2022 GMT
            Not After : May 16 23:48:07 2023 GMT
        Subject: CN=5B4C25BEEC52F3B76D6DCA918133E55358E6F501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:b5:d7:30:1a:9d:53:6d:f2:ee:31:22:2d:
                    f2:05:54:83:1e:2c:78:ff:16:a3:f3:fa:81:41:7f:
                    78:59:5c:e0:7a:e2:14:3a:73:25:20:a9:71:df:d3:
                    36:f8:45:a9:ff:e3:68:3e:37:78:7c:f9:9e:69:6c:
                    76:a2:56:58:f0:43:32:10:cd:09:b8:90:bb:44:54:
                    3f:9e:29:cd:6e:b3:6c:26:05:ed:9f:48:25:45:4a:
                    79:7b:2e:bc:e3:96:c7:d1:b2:20:41:63:8c:73:49:
                    84:f3:2a:65:d2:e0:43:74:9d:08:a2:7f:81:1d:92:
                    95:71:3f:e2:9b:ef:86:35:f5:ce:77:63:3d:97:35:
                    13:54:f8:65:8d:6b:7e:b3:0b:50:a2:f9:10:8a:20:
                    0e:2d:d1:55:3b:bb:10:d8:df:ca:29:10:d1:57:f2:
                    5b:f6:b4:6f:dc:b1:18:e6:c5:d4:3c:04:6f:20:07:
                    ee:b8:16:ec:52:95:c8:0b:2b:8a:3a:60:3f:35:63:
                    1b:5a:44:75:6a:96:0e:25:51:fb:f6:91:12:6a:9c:
                    ab:d2:1d:bd:c7:06:3b:cb:ce:4d:81:b4:9c:df:20:
                    9f:ed:4b:3b:42:50:07:02:da:bb:86:40:1d:5c:6d:
                    c7:45:f8:ff:8b:f2:1f:1e:85:63:ef:f9:80:e6:51:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4C:25:BE:EC:52:F3:B7:6D:6D:CA:91:81:33:E5:53:58:E6:F5:01
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32332d3233203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:7c:26:b2:38:da:e5:f3:04:bc:c8:77:9c:51:b0:e5:be:
         c9:4e:9f:9c:e3:bd:da:36:6b:74:bf:42:47:3d:5e:1f:af:ad:
         98:c0:6a:5d:22:00:fa:79:ff:60:62:01:7c:ec:8a:40:22:ec:
         0d:3f:46:51:8e:d0:75:bc:d1:76:3b:ed:57:17:fb:cd:88:68:
         80:74:37:3a:97:03:09:ce:d6:ef:65:2d:62:40:12:59:f5:91:
         29:b8:b1:cb:17:81:97:3d:e1:8f:32:ea:89:91:a8:02:52:78:
         09:e7:9c:5e:a1:93:45:ed:6e:30:83:0e:05:29:7e:a8:33:b6:
         4c:97:24:dd:c7:94:6f:a9:db:f6:e9:d9:c1:d6:ef:2d:08:48:
         4a:2d:4e:9a:16:be:ba:6b:1c:74:85:d5:fd:4a:eb:66:b0:a4:
         98:f4:a2:eb:ca:fe:7b:73:08:2d:11:8d:d5:b1:47:04:2a:84:
         92:89:a2:3a:39:95:a8:17:1a:d6:fd:fa:10:ff:b2:49:cb:ab:
         18:2b:4f:e1:c8:ed:c1:40:c7:a3:fc:22:c7:3c:cd:b4:3c:b5:
         ff:b9:4d:f4:b8:a5:dd:21:e1:d2:d1:aa:0f:ed:0c:37:71:26:
         0f:8e:fa:d3:6d:09:7b:97:eb:a7:7c:49:1a:e7:45:0b:0c:c3:
         30:b2:7a:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNCt3aYCrRYI9ttFC10asnxqBNcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCMDhBNjFEMEFDNTU5Rjg2Qjk4NzgwRkJGQjNFRUI3
Njk5QjJFQjAeFw0yMjA1MTcyMzQzMDdaFw0yMzA1MTYyMzQ4MDdaMDMxMTAvBgNV
BAMTKDVCNEMyNUJFRUM1MkYzQjc2RDZEQ0E5MTgxMzNFNTUzNThFNkY1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFbXXMBqdU23y7jEiLfIFVIMe
LHj/FqPz+oFBf3hZXOB64hQ6cyUgqXHf0zb4Ran/42g+N3h8+Z5pbHaiVljwQzIQ
zQm4kLtEVD+eKc1us2wmBe2fSCVFSnl7LrzjlsfRsiBBY4xzSYTzKmXS4EN0nQii
f4EdkpVxP+Kb74Y19c53Yz2XNRNU+GWNa36zC1Ci+RCKIA4t0VU7uxDY38opENFX
8lv2tG/csRjmxdQ8BG8gB+64FuxSlcgLK4o6YD81YxtaRHVqlg4lUfv2kRJqnKvS
Hb3HBjvLzk2BtJzfIJ/tSztCUAcC2ruGQB1cbcdF+P+L8h8ehWPv+YDmUR9bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUW0wlvuxS87dtbcqRgTPlU1jm9QEwHwYDVR0j
BBgwFoAUWbCKYdCsVZ+GuYeA+/s+63aZsuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMC81OUIwOEE2MUQwQUM1NTlGODZCOTg3ODBGQkZCM0VFQjc2OTlCMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5QjA4QTYxRDBBQzU1OUY4
NkI5ODc4MEZCRkIzRUVCNzY5OUIyRUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzAv
MzEzNzMwMmUzNzM4MmUzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzIzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqk4cMA0GCSqGSIb3DQEBCwUAA4IBAQCEK3wmsjja
5fMEvMh3nFGw5b7JTp+c473aNmt0v0JHPV4fr62YwGpdIgD6ef9gYgF87IpAIuwN
P0ZRjtB1vNF2O+1XF/vNiGiAdDc6lwMJztbvZS1iQBJZ9ZEpuLHLF4GXPeGPMuqJ
kagCUngJ55xeoZNF7W4wgw4FKX6oM7ZMlyTdx5Rvqdv26dnB1u8tCEhKLU6aFr66
axx0hdX9SutmsKSY9KLryv57cwgtEY3VsUcEKoSSiaI6OZWoFxrW/foQ/7JJy6sY
K0/hyO3BQMej/CLHPM20PLX/uU30uKXdIeHS0aoP7Qw3cSYPjvrTbQl7l+unfEka
50ULDMMwsnpR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org