Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33312e302f32342d3234203d3e203532353837.roa
File:                     3137302e37382e33312e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          u/b63yReci3z7GH2xSpcK1pCfbRBXxA9xC7nKgmLSNY=
Subject key identifier:   FF:08:D9:3B:C2:CB:98:A4:4E:BC:8F:92:96:B1:0A:04:2E:C8:30:0E
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       22F8D9104CC9874766881CC36E973BB45040AEC3
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33312e302f32342d3234203d3e203532353837.roa
Signing time:             Wed 22 May 2024 16:16:25 +0000
ROA not before:           Wed 22 May 2024 16:11:25 +0000
ROA not after:            Wed 21 May 2025 16:16:25 +0000
asID:                     52587
IP address blocks:        170.78.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f8:d9:10:4c:c9:87:47:66:88:1c:c3:6e:97:3b:b4:50:40:ae:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: May 22 16:11:25 2024 GMT
            Not After : May 21 16:16:25 2025 GMT
        Subject: CN=FF08D93BC2CB98A44EBC8F9296B10A042EC8300E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:a7:b1:92:18:81:16:f1:95:97:62:3a:fa:
                    ce:56:5d:a2:94:ed:e3:67:93:70:c8:d3:73:02:7f:
                    46:38:c6:3c:a8:10:c5:04:ff:0b:fd:af:1b:37:11:
                    0a:72:e1:ba:7c:c8:f2:16:74:fd:9e:f2:1a:f8:b7:
                    d7:fb:a7:cb:1f:ab:29:9d:10:8b:52:a8:e3:03:1e:
                    fc:fc:f4:3a:ef:36:6f:d2:c2:33:20:a6:cf:97:b3:
                    6d:03:9b:de:17:e7:61:3f:de:7d:33:f2:5d:30:d0:
                    39:06:6c:1f:dd:6e:b1:72:2c:1f:76:4a:4e:db:dd:
                    06:3d:17:6c:d2:a2:b2:71:cb:e0:47:ea:96:de:a0:
                    25:c7:8f:5f:20:2c:a2:80:74:f1:a8:e9:c9:77:5c:
                    fb:0b:62:4c:3f:82:57:9b:cc:af:61:00:36:05:62:
                    e8:37:05:a5:89:5d:b1:c5:a0:e2:bd:12:ee:af:eb:
                    c1:24:83:62:9f:d6:cd:f9:e9:a9:74:ef:4a:dd:2b:
                    ce:f9:08:11:42:1c:b3:0d:97:0a:42:7f:a1:67:b0:
                    d3:1d:43:3e:89:f3:54:a8:80:f0:f7:0f:f5:f8:7d:
                    53:13:d4:e7:56:22:76:8a:a1:ff:82:7f:73:84:f2:
                    dc:d9:74:fc:17:21:51:11:d8:98:53:9d:e5:80:ba:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:08:D9:3B:C2:CB:98:A4:4E:BC:8F:92:96:B1:0A:04:2E:C8:30:0E
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/3137302e37382e33312e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:4d:fe:75:49:70:93:cf:24:b7:da:96:93:cf:13:f6:b5:
         ee:1e:0f:ee:b2:de:74:03:f4:70:dd:87:02:f9:d5:e9:30:0c:
         35:94:f2:11:9c:b7:ec:58:dc:dd:77:a4:47:89:83:cf:2d:59:
         7c:10:30:21:0d:8b:0e:e0:a7:c2:21:0f:7b:13:c5:7e:06:63:
         4d:6b:7f:6e:bd:07:1c:5d:96:fa:f7:17:8d:c9:af:a0:8a:a9:
         5a:a7:83:3f:e7:40:49:f5:1f:fd:c9:70:4a:ba:55:f9:1f:8a:
         15:4c:8c:71:84:7f:79:11:2f:a7:c3:ce:c2:85:e9:d2:dd:19:
         de:51:d6:9d:0e:0c:b9:24:5e:25:00:ef:7e:f5:61:a0:aa:b8:
         9c:0b:be:0d:32:81:0c:a1:a8:80:59:73:e8:40:e7:f4:8f:46:
         30:5c:38:2e:53:76:a3:a2:8f:a0:f1:fb:a3:30:97:d3:69:06:
         f4:c3:e6:a9:a4:40:b4:32:55:ad:31:00:69:9c:7a:9a:a7:47:
         8d:2f:3b:7d:ce:d0:94:ab:3c:24:5e:89:48:d3:e1:38:6e:b8:
         79:1d:bb:ff:c9:95:fb:c1:11:7a:c0:07:d4:5f:51:61:e6:42:
         9a:15:4f:91:cf:b7:55:05:94:f4:9b:74:e6:49:9a:c7:d4:8a:
         d2:27:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org