Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e33312e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e33312e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          OkUMEMWGXPLesSM8cnMm5J51G19H60p6GtxrUGLx+O0=
Subject key identifier:   B3:F1:FF:B4:5F:A8:D7:42:FC:5C:FE:7A:C6:2C:BB:51:E5:6C:FF:9B
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       1F79B82C0447FA938652747F01B43BB235C54803
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e33312e302f32342d3234203d3e20323635323431.roa
Signing time:             Wed 08 Nov 2023 13:27:45 +0000
ROA not before:           Wed 08 Nov 2023 13:22:45 +0000
ROA not after:            Wed 06 Nov 2024 13:27:45 +0000
asID:                     265241
IP address blocks:        170.78.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:79:b8:2c:04:47:fa:93:86:52:74:7f:01:b4:3b:b2:35:c5:48:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Nov  8 13:22:45 2023 GMT
            Not After : Nov  6 13:27:45 2024 GMT
        Subject: CN=B3F1FFB45FA8D742FC5CFE7AC62CBB51E56CFF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:01:f9:67:22:9a:99:89:bb:e8:90:fa:41:
                    36:99:14:11:7d:21:3a:b0:d3:14:cb:b3:2f:a9:a0:
                    23:ea:21:20:41:72:de:72:9b:a0:01:17:55:d8:f3:
                    58:99:9f:e2:d6:fa:5d:02:59:ba:8f:3d:30:f6:cf:
                    65:40:f2:25:ba:e3:4e:59:fd:02:1a:20:4d:cf:a5:
                    ed:5e:65:c6:53:04:99:f6:04:9e:03:fe:ef:b8:a6:
                    97:df:4f:31:55:29:9d:3b:10:8a:53:6e:92:4c:52:
                    2c:5a:54:a3:45:77:0e:39:60:8a:b9:04:b9:8a:0f:
                    ac:a1:9c:e6:f3:e2:91:a1:bc:ab:c9:aa:f3:65:3a:
                    5e:2d:a1:14:75:84:9b:a5:91:64:71:fb:68:f0:20:
                    a8:76:3b:9a:c3:7a:d9:9e:b3:d2:45:52:d7:cc:46:
                    30:4c:1c:87:97:e3:2b:f2:5e:e1:9d:2a:5e:2f:c7:
                    e9:17:ac:3d:6f:ee:43:ff:36:05:5b:0a:9f:f1:51:
                    18:80:1e:c0:0c:8d:87:c3:21:a9:dc:76:5e:db:9b:
                    30:68:4c:cf:d5:3e:cf:da:f3:d9:49:7e:2e:1e:89:
                    b6:0a:c4:61:46:c8:c9:6c:ae:28:bd:da:ba:f7:a7:
                    7b:25:8b:f4:c4:e7:bb:37:d1:5f:99:ad:69:4b:f9:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:FF:B4:5F:A8:D7:42:FC:5C:FE:7A:C6:2C:BB:51:E5:6C:FF:9B
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e33312e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:34:c8:3b:ce:d4:93:6a:3b:ab:b5:9a:19:fa:84:2a:b0:1b:
         19:dc:ae:5f:42:1d:d0:cf:9d:8a:ea:7b:38:16:9b:3f:9b:9a:
         8f:19:a0:e0:35:5b:b0:4d:84:3d:12:02:9a:73:63:90:f5:e1:
         93:01:1b:8b:aa:bb:3a:c5:dd:43:51:95:85:9d:24:f8:c2:1f:
         0d:c8:6e:2e:92:46:c8:94:97:f5:3e:fa:9c:65:60:60:8e:af:
         a2:59:dc:a0:d7:90:03:ad:38:cd:68:ac:2b:51:d6:3b:4f:c5:
         e7:0e:28:3c:4f:24:86:39:74:f8:7a:dd:bc:95:c0:19:05:f9:
         d3:91:05:cc:31:c3:be:8c:c2:80:2b:8c:d9:ea:9e:37:92:a5:
         b9:91:57:81:47:a2:6e:65:29:85:91:d7:0a:3f:07:85:c0:74:
         41:71:68:8d:1f:b6:4e:13:4f:ea:7d:2f:8e:e8:7b:ac:17:67:
         fc:8a:c5:dc:81:de:63:21:ba:f1:76:19:05:14:07:20:20:a0:
         c5:7b:0d:3f:d0:f3:48:95:ba:6b:af:a2:70:a4:57:b3:32:81:
         d7:2c:85:9b:5d:b3:e6:c8:db:65:a8:67:52:e1:0f:7e:35:95:
         0a:e9:d8:fb:ab:76:65:4f:08:fb:bf:59:48:9b:24:44:55:39:
         05:aa:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org