Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
File:                     3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa (raw, json)
Hash identifier:          9rVxQLzoJm2O5MobzQ4NYTet/CXni5hdlo9WCUfqPlI=
Subject key identifier:   B9:84:D1:C2:BE:ED:11:A8:A6:1E:1D:0C:94:E7:15:32:5E:C9:D1:69
Certificate issuer:       /CN=DB78049BFAA2384D5A158AA82F18399C706E6157
Certificate serial:       02A0C6587D570DDA8F25C907A113AD49784EB7EC
Authority key identifier: DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
Signing time:             Wed 03 Apr 2024 23:01:38 +0000
ROA not before:           Wed 03 Apr 2024 22:56:38 +0000
ROA not after:            Wed 02 Apr 2025 23:01:38 +0000
asID:                     266303
IP address blocks:        170.79.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:c6:58:7d:57:0d:da:8f:25:c9:07:a1:13:ad:49:78:4e:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB78049BFAA2384D5A158AA82F18399C706E6157
        Validity
            Not Before: Apr  3 22:56:38 2024 GMT
            Not After : Apr  2 23:01:38 2025 GMT
        Subject: CN=B984D1C2BEED11A8A61E1D0C94E715325EC9D169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:b9:4b:7b:d5:88:01:86:83:42:69:63:af:
                    59:5c:ee:1d:55:e9:2f:37:91:2b:6b:0d:f4:48:3c:
                    b2:0f:b5:d5:a6:c0:ae:af:c2:4c:1e:5a:fc:2e:cd:
                    65:cf:14:ba:39:e1:0b:2d:dd:86:9f:07:11:e3:d8:
                    89:96:30:3e:13:76:a5:f9:d4:9e:68:4e:9d:4f:eb:
                    94:43:dd:49:30:97:b1:7d:42:5f:e1:33:e2:dc:76:
                    d6:fc:49:07:61:54:0e:18:50:f3:d3:ba:0a:38:9c:
                    e6:82:cf:20:87:32:cd:3b:f0:c9:55:12:7a:f4:96:
                    71:d6:8d:bc:40:44:e6:6a:59:00:4a:af:48:e7:58:
                    0b:f5:34:e8:33:e6:42:2a:67:6d:a5:4f:a7:d0:ef:
                    ed:d2:58:af:ed:dc:fa:f8:7f:ed:16:94:91:3b:e5:
                    b9:3c:c6:f0:50:47:61:5c:a1:e2:2f:ca:c5:51:61:
                    f6:21:ee:0e:01:58:d1:30:4b:4d:b3:68:1c:4f:21:
                    9e:0a:71:f0:b3:d5:14:85:f2:c3:d0:ab:f7:66:f0:
                    8e:39:65:43:b6:7d:f3:9a:c8:db:a7:0b:cb:b3:47:
                    df:59:67:50:41:68:1c:bb:be:07:c4:61:3d:f5:ea:
                    e6:92:dc:78:9c:55:f0:73:5f:b4:40:dd:b5:7c:a8:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:D1:C2:BE:ED:11:A8:A6:1E:1D:0C:94:E7:15:32:5E:C9:D1:69
            X509v3 Authority Key Identifier:
                keyid:DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/DB78049BFAA2384D5A158AA82F18399C706E6157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:20:f5:6b:05:c8:ef:fe:6e:99:e0:47:8d:f3:f8:2c:6c:d4:
         61:96:23:7d:6a:03:6b:79:f1:35:e2:cd:c4:94:b2:7b:c4:e6:
         2c:14:c2:60:f1:d7:ff:e6:0f:c7:41:fb:ca:21:48:70:4d:20:
         e7:df:75:be:1c:5d:4f:96:3e:35:26:2b:0b:23:8e:fb:75:bd:
         54:f1:82:cb:74:8b:e7:b4:cb:4d:36:81:2b:2d:d9:d6:28:6c:
         36:df:9a:6e:c0:11:d0:64:eb:d4:bd:d9:81:e7:f2:16:58:84:
         e1:fa:5e:9b:88:7d:29:e7:07:5c:2c:82:73:b0:71:78:e1:84:
         97:93:86:73:3c:ea:cb:9b:53:76:30:30:a3:4f:b7:db:58:e0:
         0d:bb:42:ac:9a:47:15:72:b1:06:45:63:59:be:09:5b:bf:03:
         19:26:8b:c7:6a:73:00:ae:ae:b5:fc:67:4b:43:16:f1:9d:4a:
         6b:81:72:fe:19:96:15:48:8a:ec:82:c8:e6:9c:11:a6:63:fb:
         5d:d7:ca:72:9a:9f:93:1d:f7:ca:8d:19:eb:03:f5:8e:98:8a:
         da:89:d5:d5:eb:ed:0c:30:fc:87:42:9f:e0:aa:c8:0f:c1:6c:
         d0:fe:f9:be:7e:74:49:6f:d2:18:80:4b:55:84:60:83:2d:c1:
         f7:aa:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org