Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e32382e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          M7xm2eyW0Etv93l7nXi+Ul85bB2NjGuiDSbun0EtEMg=
Subject key identifier:   9E:6C:59:7A:0C:EB:2F:AD:9B:8A:50:C1:88:49:A3:78:DD:B4:89:6A
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       28A354D24D2E3F3557EB5E960873FF86B3EACEE0
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32342d3234203d3e20323635323431.roa
Signing time:             Wed 08 Nov 2023 14:00:28 +0000
ROA not before:           Wed 08 Nov 2023 13:55:28 +0000
ROA not after:            Wed 06 Nov 2024 14:00:28 +0000
asID:                     265241
IP address blocks:        170.78.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a3:54:d2:4d:2e:3f:35:57:eb:5e:96:08:73:ff:86:b3:ea:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Nov  8 13:55:28 2023 GMT
            Not After : Nov  6 14:00:28 2024 GMT
        Subject: CN=9E6C597A0CEB2FAD9B8A50C18849A378DDB4896A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:7d:15:e6:5f:41:b4:e0:0a:80:55:bf:f2:
                    08:ae:b4:14:65:cd:72:13:6a:75:a1:91:ac:a9:da:
                    d5:b5:6e:8e:81:41:23:d7:29:a9:4c:b8:70:d8:34:
                    1c:47:f1:64:3e:64:65:a7:22:f3:08:b4:51:a5:7e:
                    2f:1f:4a:19:1a:e8:d9:8c:4f:27:ec:11:47:6d:0f:
                    43:fa:0a:67:f7:9f:77:61:ce:45:d4:d2:46:43:75:
                    36:cf:ee:75:72:16:0d:74:05:a6:68:d7:96:ab:24:
                    cc:71:2a:41:e3:bb:61:f6:13:6d:f3:59:59:59:4f:
                    93:68:6c:6e:90:b5:5f:74:05:a4:a4:ad:62:60:68:
                    a8:9f:c3:60:82:af:93:c9:b6:a9:64:17:d3:64:54:
                    e2:f0:7b:d8:cb:14:a2:78:2a:c5:5a:11:5b:5e:7b:
                    db:85:2f:87:c9:b2:01:e4:75:a1:2f:de:6f:8e:06:
                    35:59:0f:92:b9:bf:02:62:8f:84:43:e8:43:f7:d7:
                    27:16:50:8e:a6:a9:02:6a:81:77:2f:3f:12:b6:0d:
                    33:85:6d:60:59:99:94:26:33:ff:ca:04:54:4d:ce:
                    4b:a6:67:0e:62:6a:2f:8c:2e:fb:d9:ae:dc:0a:47:
                    5c:62:d5:9e:fd:01:c9:6c:96:ad:cc:4b:3e:45:fb:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6C:59:7A:0C:EB:2F:AD:9B:8A:50:C1:88:49:A3:78:DD:B4:89:6A
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32382e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:23:75:df:e4:f5:82:78:22:13:85:b8:18:34:a8:a3:8b:
         c3:57:c1:e2:52:94:5f:47:62:38:1f:3e:26:46:ac:6f:11:31:
         41:8a:c1:d6:0d:3a:ec:42:a0:7d:16:2e:56:28:3d:6f:66:2d:
         73:a2:75:25:f8:e6:69:1b:25:8c:37:40:d4:b0:0e:6f:5c:39:
         1b:06:8e:13:b6:f6:fa:ae:b3:ae:a5:c2:97:46:3d:ca:f0:2b:
         31:2c:4c:a5:d2:c2:89:f5:4a:13:19:06:ec:6b:1c:85:c8:e1:
         54:cd:6a:a5:d5:61:06:a4:ff:20:d1:3d:b3:67:67:1d:dd:8e:
         2b:70:a1:21:08:98:04:47:fe:70:0d:c3:41:88:82:c9:46:e9:
         1a:07:80:f9:cd:52:96:20:3f:9c:34:ff:db:e6:94:ec:3d:43:
         82:db:2a:be:e4:0f:2b:c8:78:0c:51:8a:4b:ba:d2:76:c0:12:
         61:01:6c:ad:22:51:79:e3:92:cc:5f:79:77:29:3b:a4:3c:1d:
         b2:5d:c2:4f:64:d9:0e:44:ff:58:ea:0b:75:a9:76:ab:98:ad:
         a4:55:23:90:81:40:be:d0:b8:95:bf:3d:5a:06:5e:40:c0:a9:
         fb:59:fa:89:0c:9a:43:f0:cd:3a:fc:ce:6e:24:e8:27:e5:c4:
         a4:ad:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org