Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa
File:                     3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (raw, json)
Hash identifier:          TkxHiIFjfxFUjv97BuoltRGqGlVoz1XInfYWuBk2p0w=
Subject key identifier:   7F:E8:91:47:14:0C:BF:83:85:5A:D4:DB:8A:2B:BB:1E:B5:7D:79:27
Certificate issuer:       /CN=C2B39AB73EA83A81BA76D827057DE505232F8600
Certificate serial:       2858FA03660109644135630966611191661DA61E
Authority key identifier: C2:B3:9A:B7:3E:A8:3A:81:BA:76:D8:27:05:7D:E5:05:23:2F:86:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2B39AB73EA83A81BA76D827057DE505232F8600.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa
Signing time:             Tue 01 Aug 2023 19:34:08 +0000
ROA not before:           Tue 01 Aug 2023 19:29:08 +0000
ROA not after:            Tue 30 Jul 2024 19:34:08 +0000
asID:                     266277
IP address blocks:        170.78.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:58:fa:03:66:01:09:64:41:35:63:09:66:61:11:91:66:1d:a6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B39AB73EA83A81BA76D827057DE505232F8600
        Validity
            Not Before: Aug  1 19:29:08 2023 GMT
            Not After : Jul 30 19:34:08 2024 GMT
        Subject: CN=7FE89147140CBF83855AD4DB8A2BBB1EB57D7927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:80:46:8f:c5:fd:72:f3:c4:e5:07:a7:4d:
                    85:5c:93:48:83:45:92:ba:a7:e5:af:a7:f7:35:9e:
                    98:a6:4f:6b:38:10:84:65:b4:e9:cc:23:af:cf:7b:
                    db:c1:3b:fc:2f:97:11:1c:86:bd:71:00:16:e7:9b:
                    cd:ec:a5:19:dc:8d:fe:52:c7:e6:98:7b:9c:35:b0:
                    51:09:ff:2f:29:e3:14:66:ef:83:da:6f:cd:a4:89:
                    77:2a:bd:f8:f0:60:2b:7b:1b:fb:5b:1d:f2:1c:5f:
                    14:de:f7:1f:56:d2:9c:c7:f5:44:fe:99:c3:92:b8:
                    b1:19:7f:2f:f8:fc:99:2c:a7:88:2a:5e:f4:71:ad:
                    f7:c2:65:be:a9:2e:64:1d:d9:84:a8:ec:12:49:cd:
                    a7:83:7c:89:33:f9:fb:64:fc:b2:17:d6:2c:5d:75:
                    bf:1b:17:cc:aa:0e:4f:99:79:64:39:fc:ad:89:14:
                    71:dc:81:cf:a5:3b:8f:44:3e:4a:b8:30:c6:85:87:
                    81:07:59:c5:2f:d5:55:2f:56:68:f0:dc:ad:4b:3d:
                    b8:f7:45:2a:c8:02:da:f9:09:7f:71:d5:ea:f9:80:
                    9c:d9:21:2c:14:29:95:88:be:7c:5b:c9:6a:57:6a:
                    31:d6:11:95:06:bc:a3:18:f0:54:e0:0a:dd:e0:07:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E8:91:47:14:0C:BF:83:85:5A:D4:DB:8A:2B:BB:1E:B5:7D:79:27
            X509v3 Authority Key Identifier:
                keyid:C2:B3:9A:B7:3E:A8:3A:81:BA:76:D8:27:05:7D:E5:05:23:2F:86:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/C2B39AB73EA83A81BA76D827057DE505232F8600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2B39AB73EA83A81BA76D827057DE505232F8600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:4a:3d:1f:cb:eb:0d:d2:24:ed:5f:a8:c1:55:50:c1:76:ee:
         73:37:dc:f2:3a:de:a5:0f:19:35:a3:7a:90:b8:5e:3c:05:db:
         06:93:d4:08:6e:89:f6:a0:60:17:d0:ed:a5:01:a2:70:88:18:
         0a:b8:bc:8e:3f:2e:1e:f0:b7:ef:3f:ef:bb:0c:0b:17:bc:3f:
         aa:65:2f:ab:11:f5:a0:e8:c6:b5:0d:ec:37:f9:64:c1:97:84:
         59:c5:03:9f:70:70:bc:f6:0e:f4:8a:9e:d2:ac:2f:39:85:fa:
         d3:3e:ee:aa:2e:f0:c4:a6:e5:ac:b7:f3:83:7f:0c:18:f2:e6:
         4a:a9:11:e9:53:fc:83:f8:f6:fa:e3:f7:b3:34:2b:bd:0d:55:
         20:78:45:ba:23:8f:13:68:6f:9f:e7:75:32:81:b8:d7:84:b4:
         9e:36:fb:80:74:ca:cb:1f:64:c9:34:71:06:8f:23:c4:9c:9b:
         96:7e:9b:1e:0a:56:38:ca:e7:b9:b7:62:88:b1:4b:c9:80:a0:
         ab:d2:33:2b:f2:34:16:93:8d:92:3d:ac:c8:8f:0c:7f:c9:92:
         25:62:96:9c:80:ce:18:df:e4:73:64:0e:ae:af:0d:bf:42:ed:
         ab:58:3f:6e:69:49:0d:33:6c:94:86:24:2f:14:f1:f4:b8:cf:
         71:d5:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org