Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e32382e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e32382e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          XqVGKK4vutFiW6rON5MI0fX4sJ+TPqNldYeLPKUZ75I=
Subject key identifier:   DD:97:2F:5C:7F:19:4F:B7:5D:55:27:38:C0:9A:CF:AD:E7:47:22:7F
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       3E6C0040F6CA286B0473963A3AFBB20F065677DF
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e32382e302f32342d3234203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:39 +0000
ROA not before:           Thu 04 Apr 2024 23:02:39 +0000
ROA not after:            Thu 03 Apr 2025 23:07:39 +0000
asID:                     265241
IP address blocks:        170.78.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6c:00:40:f6:ca:28:6b:04:73:96:3a:3a:fb:b2:0f:06:56:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:39 2024 GMT
            Not After : Apr  3 23:07:39 2025 GMT
        Subject: CN=DD972F5C7F194FB75D552738C09ACFADE747227F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:93:3b:41:04:c9:6a:13:e5:93:71:1a:e4:
                    b8:0c:a6:93:e1:d8:27:1c:ce:d0:c2:42:a6:e5:80:
                    17:62:43:01:29:a4:e3:df:ec:ae:3b:24:94:04:dd:
                    e9:19:3f:63:67:88:53:90:6e:c4:c7:23:31:ca:ef:
                    1e:4d:65:73:3d:aa:72:85:05:3d:cc:45:ab:68:0c:
                    f6:38:84:53:e0:7b:aa:f9:93:ee:b1:52:27:4d:25:
                    df:e2:fd:c2:53:70:a5:f8:2b:1d:5e:f3:65:15:da:
                    d6:51:8d:4d:1a:2f:62:1d:2b:0f:57:ea:dd:53:b9:
                    02:c8:ae:40:30:b4:cc:e1:bd:f3:fb:58:2c:b9:9a:
                    88:17:4c:75:fd:30:31:13:79:d3:ed:4d:06:1b:d4:
                    7d:a0:bf:cb:2b:aa:5f:08:20:9b:80:c1:ed:1a:ea:
                    2a:8a:3a:18:7c:dc:e5:17:6d:ec:76:93:99:7b:f7:
                    7d:cf:c1:f4:0e:de:38:8b:88:77:b4:86:c3:ce:a9:
                    ae:b1:53:a4:67:14:e0:72:fb:1f:38:2c:5f:19:d8:
                    30:0b:7c:d1:85:04:3d:e4:74:78:11:a7:5c:6c:2b:
                    53:bc:7f:b6:18:d0:89:32:bc:03:73:f2:8b:c8:e6:
                    1f:8f:11:5f:bb:ed:db:97:77:01:4c:e0:0e:ac:26:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:97:2F:5C:7F:19:4F:B7:5D:55:27:38:C0:9A:CF:AD:E7:47:22:7F
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e32382e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:6a:60:b3:f1:c1:48:a8:39:0e:a4:86:37:7a:24:24:02:b5:
         12:55:bc:de:57:ba:61:69:98:c1:f6:fd:8a:28:c3:fa:5e:f6:
         1d:4c:ce:95:d8:06:29:3a:3d:1f:d8:08:e5:aa:3e:0a:af:27:
         c6:a8:d0:ac:dd:78:d0:87:ce:ab:8a:8d:01:c4:c0:92:53:b4:
         be:56:ab:9a:d2:41:07:b0:9d:39:d7:5e:29:59:f8:de:c1:b6:
         04:38:5c:3a:7b:60:0f:98:f4:35:67:95:7d:2e:e8:aa:da:06:
         2f:fa:ca:c2:fc:00:e2:bf:0c:23:ce:e1:a4:c3:d3:6e:0d:d0:
         87:b7:a7:86:ec:a4:79:93:b3:65:d3:b4:b0:e8:76:41:f7:07:
         2c:d4:5e:b0:76:7e:13:8e:b5:db:68:a5:0b:b6:6a:30:6e:53:
         a3:b0:25:8a:85:9f:e5:52:88:a8:32:8a:c2:e4:13:59:54:7a:
         61:09:35:8a:1a:21:70:c1:1a:bd:49:4b:87:e5:45:19:4a:63:
         ba:e2:b2:9e:9f:5e:7a:98:65:ef:b0:05:59:20:c5:ac:5e:01:
         d3:8a:16:0e:63:31:1a:67:ac:c9:0a:0e:97:55:b2:ea:12:71:
         ab:01:10:e0:dc:04:22:a3:db:d5:ad:39:fc:01:ab:b6:e7:5c:
         f4:98:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org