Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3137302e38302e36382e302f32322d3234203d3e20323633393035.roa
File:                     3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (raw, json)
Hash identifier:          MOvUP8yj0RfCZtNAXpMWwTK/ZIZEVjk7KY7cok+72QE=
Subject key identifier:   CC:22:2F:B0:83:D9:10:FB:1A:60:24:9C:A2:82:6E:D3:80:1D:5B:26
Certificate issuer:       /CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
Certificate serial:       70BBC2C7908ABE439D1B4589C6DD6EEC2DC13D28
Authority key identifier: 60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3137302e38302e36382e302f32322d3234203d3e20323633393035.roa
Signing time:             Fri 26 Apr 2024 17:13:03 +0000
ROA not before:           Fri 26 Apr 2024 17:08:03 +0000
ROA not after:            Fri 25 Apr 2025 17:13:03 +0000
asID:                     263905
IP address blocks:        170.80.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bb:c2:c7:90:8a:be:43:9d:1b:45:89:c6:dd:6e:ec:2d:c1:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
        Validity
            Not Before: Apr 26 17:08:03 2024 GMT
            Not After : Apr 25 17:13:03 2025 GMT
        Subject: CN=CC222FB083D910FB1A60249CA2826ED3801D5B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:ef:68:1b:87:b7:30:7f:2f:2e:81:1e:2e:
                    fb:19:fc:f3:c5:46:dc:c1:7b:2e:bd:c1:dc:01:26:
                    8e:a5:67:12:34:a9:57:38:8e:9b:24:b9:35:2b:e5:
                    1c:6e:74:3e:f8:40:1b:b6:c6:43:05:84:29:76:bc:
                    2b:bb:fb:c1:91:c0:ea:a8:c6:4a:13:89:f9:27:91:
                    bc:44:f1:e6:c6:da:a8:14:23:fe:60:bd:0c:9e:e9:
                    17:a9:ba:f1:1e:bd:61:32:c5:36:50:36:b5:bc:de:
                    90:f5:86:64:56:bb:c7:3b:a4:c6:40:4e:b4:75:4b:
                    7d:81:f0:a3:9c:cb:76:ad:11:29:1e:9b:23:7e:68:
                    c1:ff:35:b7:74:95:a8:7e:6f:39:dd:ed:56:00:30:
                    fa:a7:32:6e:82:c1:71:2b:b1:17:cb:d5:e6:87:01:
                    c0:a2:1a:7b:64:63:a1:b2:19:2c:f1:43:65:d7:c7:
                    25:8b:43:ca:76:2f:af:da:ba:91:1f:c8:71:80:d3:
                    26:41:6b:34:22:55:cf:d0:d2:f1:4a:8c:54:63:c6:
                    ee:a1:35:5b:8a:f2:8d:09:4d:8b:30:4f:6d:7e:07:
                    a5:14:30:44:02:77:30:10:e1:a1:e9:04:97:2e:38:
                    1c:d9:ac:bb:53:4e:5f:49:de:22:ce:a2:da:e3:14:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:2F:B0:83:D9:10:FB:1A:60:24:9C:A2:82:6E:D3:80:1D:5B:26
            X509v3 Authority Key Identifier:
                keyid:60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3137302e38302e36382e302f32322d3234203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:e4:21:b6:74:41:64:63:98:ca:dd:4d:06:2f:fd:71:cf:
         9c:1a:96:7a:89:54:c1:6c:80:1d:9e:03:97:ab:55:5a:a8:57:
         e8:bd:9d:5b:4b:73:09:0c:80:68:fb:db:3c:bf:e1:20:b1:60:
         c0:af:6d:8b:56:44:4c:e0:0f:f8:22:c1:06:88:71:38:3f:b2:
         ca:2c:42:cb:b1:f2:f4:7c:ec:ce:f1:13:6a:4d:83:77:de:ad:
         da:1d:3c:e1:84:e4:ee:18:64:3c:a3:a2:4c:1e:08:5e:73:47:
         2c:40:5e:8b:b1:3e:2b:0c:e4:0d:d6:d1:54:6c:6c:5d:c0:a9:
         b7:c8:8a:e9:01:dc:6e:f2:10:e0:13:45:50:3b:9b:e2:fa:48:
         8d:c5:4c:14:99:78:83:e1:ec:8b:d7:d4:d9:96:c7:88:95:ad:
         92:5d:82:a5:00:b3:58:4a:82:fc:09:23:7a:ee:3f:30:00:b5:
         85:2b:f9:e1:fb:3d:37:e8:4b:d4:dd:cb:99:7a:34:ee:da:07:
         f0:65:3c:a6:1e:63:a4:d2:f7:56:77:c2:3b:ad:06:b9:fe:b3:
         cf:5b:31:74:ad:cb:a4:09:79:77:43:2b:54:a3:0b:ba:c7:1a:
         dd:9c:20:97:f1:b6:ba:35:04:5a:a1:2a:be:56:09:1a:ee:44:
         fd:92:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org