Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e32392e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e32392e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          xzLnWUssvoKoqEsvQdlOVQbVkdnKOsLOOzl/NBpajSk=
Subject key identifier:   89:3F:FC:47:0E:64:DE:A9:C2:C7:20:E3:65:8D:9F:38:81:02:17:7E
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       4773D8A22225B9F8B739A585E432DDF290D1ACDE
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e32392e302f32342d3234203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:39 +0000
ROA not before:           Thu 04 Apr 2024 23:02:39 +0000
ROA not after:            Thu 03 Apr 2025 23:07:39 +0000
asID:                     265241
IP address blocks:        170.78.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:73:d8:a2:22:25:b9:f8:b7:39:a5:85:e4:32:dd:f2:90:d1:ac:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:39 2024 GMT
            Not After : Apr  3 23:07:39 2025 GMT
        Subject: CN=893FFC470E64DEA9C2C720E3658D9F388102177E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:90:2f:d5:ce:b1:80:c8:a7:d1:dc:f8:e8:
                    19:6e:d0:f5:d3:4f:7b:35:bd:4c:4b:5e:95:e8:18:
                    5e:c8:ad:3a:f0:5e:00:b0:a3:90:7d:c5:43:4e:17:
                    fe:75:a8:50:17:e3:c6:e2:77:34:14:0e:f3:cd:53:
                    95:f3:ce:40:4f:f8:97:45:e1:ac:13:a8:25:12:2c:
                    0c:10:9c:c2:f7:22:a5:12:3f:1c:df:01:69:e7:ea:
                    8d:84:94:bf:66:dc:84:3f:70:1f:86:6b:97:c9:7e:
                    89:27:42:07:08:f5:4d:9c:2d:f9:f4:b3:83:69:42:
                    e6:40:e6:c8:13:4c:ed:67:b2:38:10:61:27:60:4a:
                    fb:c1:84:b5:1e:a2:27:60:8f:11:d7:a8:11:20:89:
                    ac:59:b9:b4:54:ff:4d:87:58:14:84:c4:b9:fb:cd:
                    e5:58:65:38:bb:c4:a3:32:b9:ab:8a:d7:69:d5:2a:
                    d3:d8:41:27:0e:3d:6f:6e:c0:f4:87:13:cc:a5:6a:
                    6d:f6:40:26:04:c1:6c:9c:14:00:b2:4b:b1:30:a1:
                    7c:aa:2f:34:36:f0:0e:79:94:a1:53:4b:1b:57:27:
                    5a:47:ab:7b:97:1e:1e:8b:47:66:3c:ad:02:56:f8:
                    9b:2e:4a:7b:69:06:b3:e0:c0:a2:34:ab:29:d3:03:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3F:FC:47:0E:64:DE:A9:C2:C7:20:E3:65:8D:9F:38:81:02:17:7E
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e32392e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:28:8a:bf:2c:a6:7b:06:68:f8:16:97:a0:30:61:26:16:54:
         19:b4:b5:30:40:1c:91:25:95:0b:57:4a:ee:63:a4:72:03:23:
         90:47:7d:28:55:ef:ea:28:1f:26:ff:f8:27:9b:29:c6:0b:a9:
         af:ce:a0:03:23:8a:55:cf:d7:3c:7a:0d:ca:d9:bd:36:50:14:
         14:b8:bb:2f:83:05:7c:cf:62:7c:59:a3:6f:32:55:cb:52:d8:
         d7:b8:74:aa:e5:44:81:16:7c:9e:dc:b0:2a:70:df:4f:b4:f8:
         c6:b0:52:19:ef:23:7c:8d:5e:07:25:0e:20:bd:bf:75:7a:56:
         c0:a4:09:13:76:1c:c0:6c:76:3b:e4:f7:bf:04:dd:6e:76:53:
         d7:d4:b8:76:1f:da:ec:5e:43:a9:5d:2f:d6:0c:32:f0:8a:d9:
         ca:ae:63:92:a0:91:38:8f:6a:6e:4e:1b:40:b6:cf:f9:05:c0:
         59:13:93:c4:c2:6a:f0:37:61:68:2f:12:c8:81:ef:49:9d:5e:
         c2:1f:c7:78:6d:50:cb:9e:9f:43:9b:0c:30:15:34:dc:25:da:
         e6:2a:28:ef:82:75:52:02:86:54:10:30:7e:08:8b:5a:a1:c7:
         9d:1a:ee:f3:b7:38:64:60:2f:3f:4a:55:7b:ef:fe:fc:ab:95:
         47:d3:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org