Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32392e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e32392e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          2msRTnYjwwDhlyXOzSP6h228/yPQO8nS1pdss5YbBLo=
Subject key identifier:   DF:5B:F7:62:67:2C:AD:36:54:E1:71:B8:42:67:43:42:E2:0D:21:DE
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       295B7CEBAEDCD6AC6C25D3A59380FC0C36EFBB85
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32392e302f32342d3234203d3e20323635323431.roa
Signing time:             Wed 08 Nov 2023 13:27:18 +0000
ROA not before:           Wed 08 Nov 2023 13:22:18 +0000
ROA not after:            Wed 06 Nov 2024 13:27:18 +0000
asID:                     265241
IP address blocks:        170.78.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:7c:eb:ae:dc:d6:ac:6c:25:d3:a5:93:80:fc:0c:36:ef:bb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Nov  8 13:22:18 2023 GMT
            Not After : Nov  6 13:27:18 2024 GMT
        Subject: CN=DF5BF762672CAD3654E171B842674342E20D21DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:b0:86:7f:8d:6f:f5:fc:43:4d:36:dd:00:
                    15:7a:51:1d:c7:7a:cd:54:97:f0:df:00:64:04:e0:
                    d0:79:ef:a3:6f:73:1d:82:68:f3:89:9c:be:0e:ba:
                    47:77:e2:c4:7a:4b:2d:f7:f0:83:c4:64:0c:78:49:
                    ba:12:41:22:f4:41:fd:48:df:f9:fc:6a:a2:98:e2:
                    87:8b:c5:ae:51:73:41:8a:06:46:cb:a3:59:eb:53:
                    6b:11:84:ec:ba:ad:71:58:c9:35:b5:c5:cf:0a:ed:
                    28:83:20:d7:f1:30:f1:3b:08:4f:e2:55:4a:a4:dd:
                    4f:c4:c6:49:34:91:62:04:f2:a1:27:e7:fc:2d:c8:
                    72:ac:7c:b4:48:10:5a:d3:de:c0:97:f4:6a:da:07:
                    a1:d8:4a:6c:de:50:72:d8:24:e6:16:ed:e5:d4:30:
                    e9:63:45:35:38:93:f3:a3:97:d6:65:8c:3c:ce:1e:
                    64:c0:9b:5b:96:55:23:36:77:38:ff:72:f6:d5:91:
                    11:60:77:7f:57:9e:8e:77:7d:33:29:38:40:b6:d9:
                    e2:db:65:e2:c0:46:ef:89:0c:f9:2d:df:fc:b7:1e:
                    a9:07:bb:f4:f2:86:aa:61:d5:3a:9a:24:25:41:37:
                    f3:f4:16:bd:2e:fc:9c:c8:89:67:a2:6b:b0:2f:5d:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:F7:62:67:2C:AD:36:54:E1:71:B8:42:67:43:42:E2:0D:21:DE
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e32392e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a0:f6:4a:36:86:b6:38:5b:79:45:21:8d:6f:91:ce:84:fa:
         18:00:99:c0:b6:31:7a:fc:6e:94:69:75:05:eb:57:c0:48:82:
         77:c9:25:5d:5b:2b:e3:25:6e:89:04:93:1f:f3:78:6e:84:ae:
         91:30:c4:9f:5c:c9:a5:a1:65:52:97:b2:c1:a6:4f:c8:8d:60:
         1b:ac:27:68:26:8a:ee:22:1a:a4:cf:9e:e7:cd:f5:0a:c6:06:
         ac:de:9f:2b:7c:df:70:5f:97:49:f5:b0:2f:4f:d6:84:56:30:
         8b:01:35:de:ee:69:b3:15:5c:3a:aa:a7:43:30:e8:c4:5c:68:
         cb:44:d3:d6:d8:5a:87:88:68:e3:2d:7f:a9:a9:54:22:08:9d:
         e8:b9:29:ad:ce:0c:b1:20:6e:e2:5c:60:b1:03:da:9d:9f:28:
         b8:1c:61:2c:0a:ed:60:ca:d3:68:8b:54:3b:05:fd:29:d3:7c:
         78:8e:73:a3:72:5e:87:d8:45:f6:39:68:8d:26:2a:c4:dc:3e:
         43:6a:49:97:93:8a:9c:20:e7:d9:c4:aa:e7:f1:74:63:6f:a4:
         71:a1:d8:a0:13:d6:d4:4d:b4:29:62:02:87:a4:7b:6c:21:22:
         69:b1:3f:c1:c4:a9:a1:32:06:60:13:73:b0:99:c9:29:8f:17:
         d7:b7:de:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKVt8667c1qxsJdOlk4D8DDbvu4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2QUE3NEY4QzlFNjU2MDVGQTlBM0M2OTcwREFFMTVD
RkM0ODAxNjAeFw0yMzExMDgxMzIyMThaFw0yNDExMDYxMzI3MThaMDMxMTAvBgNV
BAMTKERGNUJGNzYyNjcyQ0FEMzY1NEUxNzFCODQyNjc0MzQyRTIwRDIxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIabCGf41v9fxDTTbdABV6UR3H
es1Ul/DfAGQE4NB576Nvcx2CaPOJnL4Oukd34sR6Sy338IPEZAx4SboSQSL0Qf1I
3/n8aqKY4oeLxa5Rc0GKBkbLo1nrU2sRhOy6rXFYyTW1xc8K7SiDINfxMPE7CE/i
VUqk3U/Exkk0kWIE8qEn5/wtyHKsfLRIEFrT3sCX9GraB6HYSmzeUHLYJOYW7eXU
MOljRTU4k/Ojl9ZljDzOHmTAm1uWVSM2dzj/cvbVkRFgd39Xno53fTMpOEC22eLb
ZeLARu+JDPkt3/y3HqkHu/Tyhqph1TqaJCVBN/P0Fr0u/JzIiWeia7AvXaUJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU31v3YmcsrTZU4XG4QmdDQuINId4wHwYDVR0j
BBgwFoAUIGqnT4yeZWBfqaPGlw2uFc/EgBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMC8yMDZBQTc0RjhDOUU2NTYwNUZBOUEzQzY5NzBEQUUxNUNGQzQ4MDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwNkFBNzRGOEM5RTY1NjA1
RkE5QTNDNjk3MERBRTE1Q0ZDNDgwMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzAv
MzEzNzMwMmUzNzM4MmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzIzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk4dMA0GCSqGSIb3DQEBCwUAA4IBAQCnoPZKNoa2
OFt5RSGNb5HOhPoYAJnAtjF6/G6UaXUF61fASIJ3ySVdWyvjJW6JBJMf83huhK6R
MMSfXMmloWVSl7LBpk/IjWAbrCdoJoruIhqkz57nzfUKxgas3p8rfN9wX5dJ9bAv
T9aEVjCLATXe7mmzFVw6qqdDMOjEXGjLRNPW2FqHiGjjLX+pqVQiCJ3ouSmtzgyx
IG7iXGCxA9qdnyi4HGEsCu1gytNoi1Q7Bf0p03x4jnOjcl6H2EX2OWiNJirE3D5D
akmXk4qcIOfZxKrn8XRjb6RxodigE9bUTbQpYgKHpHtsISJpsT/BxKmhMgZgE3Ow
mckpjxfXt94k
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org