Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33312e302f32342d3234203d3e20323635323431.roa
File:                     3137302e37382e33312e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          s8cZIuI5m8Ph62NmrPBBQniuUh/cZqgqMWR2+0eQOog=
Subject key identifier:   53:E7:67:12:E9:55:F9:4B:80:24:C7:14:64:01:35:E3:AC:04:1F:1B
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       2E46883845AA34890301783F92E41EEA4CE3159B
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33312e302f32342d3234203d3e20323635323431.roa
Signing time:             Thu 23 May 2024 00:13:58 +0000
ROA not before:           Thu 23 May 2024 00:08:58 +0000
ROA not after:            Thu 22 May 2025 00:13:58 +0000
asID:                     265241
IP address blocks:        170.78.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:46:88:38:45:aa:34:89:03:01:78:3f:92:e4:1e:ea:4c:e3:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: May 23 00:08:58 2024 GMT
            Not After : May 22 00:13:58 2025 GMT
        Subject: CN=53E76712E955F94B8024C714640135E3AC041F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:78:05:26:ee:c5:24:69:72:64:58:7e:12:
                    e9:bb:b9:00:50:00:2f:65:3c:54:50:68:92:38:39:
                    f2:c3:41:a2:62:ae:4d:81:ed:e4:21:c6:2c:68:49:
                    49:2e:b0:f2:10:cf:2d:35:0d:bd:8e:2c:4a:6f:b5:
                    9b:63:9b:f9:fb:a2:1e:9c:22:85:28:ce:70:d4:75:
                    b2:86:f3:36:cc:d1:da:72:b4:6a:3b:88:dd:04:7a:
                    83:95:19:13:8d:e7:b2:e6:83:e9:00:c7:5c:ce:58:
                    c7:2f:cc:84:e8:16:51:1d:75:fe:db:ca:87:bb:f9:
                    e2:2a:86:30:e8:2e:ce:6a:b2:59:9b:c1:50:4f:de:
                    25:ed:64:dc:78:2c:2f:de:62:96:fd:37:bb:82:5a:
                    66:3d:a5:cd:45:45:0c:62:27:88:a5:61:dd:fa:04:
                    74:c3:e6:b1:7c:bf:d5:bf:4a:b3:d1:bf:9e:dd:55:
                    69:a7:b0:3b:f5:e2:48:35:d5:76:fd:a4:4a:41:3f:
                    85:1f:ea:d4:72:ab:14:0f:1f:0e:ac:38:a1:7e:7f:
                    08:00:4b:47:cf:a3:76:ba:c9:c6:7b:c5:09:26:5a:
                    3d:c7:32:01:b4:3f:e2:f6:e8:45:ca:4c:5b:d1:84:
                    bb:e8:60:46:76:c2:cf:7b:a9:79:b4:e0:d9:5a:5e:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E7:67:12:E9:55:F9:4B:80:24:C7:14:64:01:35:E3:AC:04:1F:1B
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33312e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:47:16:0c:fb:26:66:92:e5:c5:5e:9c:46:a5:37:a2:6a:cb:
         1a:b5:27:c9:22:bf:f1:37:8f:90:0b:d1:4b:0e:34:d4:89:77:
         a7:7f:d6:f9:86:7e:5f:ae:22:26:95:20:e8:52:97:58:b8:f5:
         5e:03:90:a2:4c:1c:72:16:56:a9:bd:55:8e:d6:40:38:bd:4f:
         4e:bb:fc:aa:ce:f1:dd:83:e8:1d:4a:31:29:0e:f5:90:50:40:
         27:73:03:00:b3:c0:cc:f6:fb:95:d4:7f:25:bb:a1:e4:f0:87:
         de:2c:57:73:ee:b0:e9:e0:3a:37:4e:f3:19:eb:8f:7e:9c:5f:
         e8:56:44:1a:98:a9:f4:67:0f:c6:8a:78:34:1c:0e:43:d4:21:
         ba:16:08:6a:aa:2d:01:6c:d1:f8:00:b6:7c:05:04:1d:62:1d:
         fe:53:24:ec:b0:6a:28:c9:72:17:bb:7a:e4:2b:8c:11:c5:53:
         95:a3:e7:d2:4e:06:c5:b3:e5:24:d1:b1:ee:8e:0f:53:4f:e0:
         5d:50:45:4a:e0:dd:c8:4a:66:b3:26:79:e1:97:ca:6e:fb:d4:
         a9:8d:5e:30:6b:ac:28:e0:bf:86:2c:08:dc:3c:a0:10:7d:c9:
         25:e5:80:e0:a5:75:30:70:8e:37:22:86:60:c4:2d:e2:4f:93:
         b7:51:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org