Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33302e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e33302e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          Vq71xjB8gz4gAjwqU+r1tBsFfLLLYmovy3H/Z9lfzuU=
Subject key identifier:   82:F2:38:F8:0B:B1:4C:0A:7F:E1:79:68:14:56:FB:35:8D:E1:C3:8F
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       7EBA5C84310064792643CA4C607EDBFE96B3F710
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33302e302f32342d3234203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:40 +0000
ROA not before:           Thu 04 Apr 2024 23:02:40 +0000
ROA not after:            Thu 03 Apr 2025 23:07:40 +0000
asID:                     265241
IP address blocks:        170.78.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:5c:84:31:00:64:79:26:43:ca:4c:60:7e:db:fe:96:b3:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:40 2024 GMT
            Not After : Apr  3 23:07:40 2025 GMT
        Subject: CN=82F238F80BB14C0A7FE179681456FB358DE1C38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:ef:b9:8e:ad:a8:67:01:32:fb:d3:af:59:
                    78:50:47:96:4d:bd:a6:36:a8:42:fd:66:30:aa:54:
                    e6:22:85:91:e9:4d:ce:3a:58:de:74:37:e3:59:f8:
                    24:f1:76:5a:ea:ed:36:f3:9b:cf:74:3e:fc:1a:b2:
                    3c:5c:3a:c4:88:2b:de:34:f2:00:df:14:65:79:dd:
                    13:10:0f:1f:84:39:f4:25:21:f2:d9:9e:22:59:ba:
                    4b:e4:01:67:85:0f:4f:c9:9b:7f:e5:43:d8:71:1e:
                    6a:69:63:4a:6c:b3:ec:c0:1a:01:c9:d7:3d:b1:94:
                    f1:6a:85:07:9f:ea:75:ba:59:c7:b4:df:e4:24:a4:
                    39:6f:56:ec:91:b5:33:db:05:3a:dd:48:00:46:ed:
                    22:28:6e:8c:74:18:21:48:c6:78:5a:2a:2e:1f:10:
                    68:0f:69:71:95:55:ab:90:b8:ab:e1:e0:d3:68:ee:
                    62:11:76:f6:03:31:bb:ca:3d:e1:5a:8b:3d:87:a5:
                    d3:b1:01:02:a4:dc:2e:9a:67:87:c2:9e:6b:fa:e3:
                    73:28:b4:1a:21:bc:bc:b1:c4:e7:10:66:49:fc:c4:
                    3c:b0:bb:b1:d8:54:af:57:95:fd:01:1d:60:76:01:
                    68:08:b4:e2:ef:4e:38:9e:d5:1d:3b:d1:7c:24:69:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:38:F8:0B:B1:4C:0A:7F:E1:79:68:14:56:FB:35:8D:E1:C3:8F
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33302e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:2d:9a:49:74:57:99:3c:fd:31:b8:2d:98:5e:4b:30:40:
         51:e9:f0:54:e3:5f:22:50:15:37:fa:bf:3f:1a:c6:4a:49:aa:
         75:30:bb:d6:08:88:04:3e:68:66:d3:88:c6:9e:42:45:29:d1:
         1e:65:e4:4b:62:9f:50:b7:07:27:8d:76:02:5a:69:53:35:65:
         2c:fb:b0:18:e4:19:02:cd:85:82:23:5a:6c:c4:e1:48:86:be:
         88:fb:39:d6:ad:0f:56:96:eb:3f:09:ec:58:85:4d:4f:2d:ba:
         30:52:f8:00:da:7c:57:e3:02:e7:68:19:6f:39:40:a0:50:4d:
         7c:e4:78:df:ae:b3:51:66:e8:a9:73:0d:7a:09:4b:b6:b5:45:
         02:f0:4b:61:df:13:2c:49:0f:3f:a5:e1:1f:e4:79:96:05:51:
         7e:57:96:6d:87:36:87:e0:20:fb:14:78:8e:98:fa:47:e4:8a:
         c6:4d:00:39:be:70:e3:3a:f8:19:95:d8:db:5a:72:e5:38:f3:
         3a:3a:dd:48:7d:38:38:49:e1:7a:3c:1d:19:30:e6:e5:b8:f9:
         16:81:57:e6:99:e6:80:05:68:9a:f3:5c:6b:0a:a1:be:19:35:
         2d:23:24:8c:94:f9:8e:b8:74:30:23:40:b7:72:7b:c7:1b:4d:
         76:27:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org