Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
File:                     3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa (raw, json)
Hash identifier:          quzpXX0bXZEhYvEIhn0ZWFGUpBcLSCby08FdPrXCekY=
Subject key identifier:   4B:B7:90:09:D3:B0:02:2A:F2:9F:8A:5D:4A:A0:AE:0F:51:03:64:6A
Certificate issuer:       /CN=DB78049BFAA2384D5A158AA82F18399C706E6157
Certificate serial:       6FD79F994B198A71C9208831333632B95A91537B
Authority key identifier: DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
Signing time:             Wed 03 Apr 2024 23:01:36 +0000
ROA not before:           Wed 03 Apr 2024 22:56:36 +0000
ROA not after:            Wed 02 Apr 2025 23:01:36 +0000
asID:                     266303
IP address blocks:        170.79.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d7:9f:99:4b:19:8a:71:c9:20:88:31:33:36:32:b9:5a:91:53:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB78049BFAA2384D5A158AA82F18399C706E6157
        Validity
            Not Before: Apr  3 22:56:36 2024 GMT
            Not After : Apr  2 23:01:36 2025 GMT
        Subject: CN=4BB79009D3B0022AF29F8A5D4AA0AE0F5103646A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:43:43:73:92:b9:5c:cd:1e:13:e3:63:48:
                    20:44:53:b6:02:a0:05:38:1b:eb:23:87:0f:74:49:
                    85:ee:24:56:58:e6:fa:35:2f:4f:3c:6a:47:34:fb:
                    da:bc:0e:1f:94:bf:bb:8f:b2:27:cb:25:f3:04:ba:
                    54:0c:22:a4:f5:7e:e7:c1:fd:b8:ba:b7:8d:ef:cc:
                    8f:e4:e4:73:a9:59:47:fe:94:03:1f:11:87:c8:f5:
                    b1:30:44:56:d7:bc:47:8e:ca:e3:6b:69:db:76:18:
                    89:31:10:1a:03:dd:8f:34:ce:32:64:ae:7f:3e:c1:
                    e1:1f:b7:03:26:1c:c7:bc:2f:80:5f:c3:6d:0c:73:
                    fd:41:90:47:88:4a:b7:e7:29:c2:39:71:da:2c:9b:
                    81:d4:a8:bf:07:65:46:34:86:3b:ae:69:a8:67:36:
                    60:16:76:ab:b2:e8:6a:3b:66:d6:24:3a:81:f2:fa:
                    50:87:84:5f:eb:85:84:e1:ce:66:39:1e:b3:6c:a6:
                    05:60:dd:2e:9f:94:ce:3d:df:c1:68:bb:7b:f4:bf:
                    df:f5:34:5c:89:58:3b:09:86:51:4c:16:fa:26:0e:
                    35:51:5a:4f:96:76:ad:1b:3a:76:95:a6:fe:5d:0c:
                    42:44:2c:33:37:7c:29:a8:5b:bb:9d:98:fa:95:38:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:90:09:D3:B0:02:2A:F2:9F:8A:5D:4A:A0:AE:0F:51:03:64:6A
            X509v3 Authority Key Identifier:
                keyid:DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/DB78049BFAA2384D5A158AA82F18399C706E6157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e2:fe:2e:06:a5:07:23:a3:1d:2f:7b:80:38:06:f8:11:38:
         1d:c7:45:df:95:b5:54:ba:0f:ee:0b:84:dd:08:d7:86:9a:36:
         d7:50:dd:32:3e:74:35:e0:c6:a6:50:98:19:7a:df:8e:44:3b:
         ad:4e:94:99:88:48:6e:17:7a:ab:3e:e0:ca:3f:9a:be:89:df:
         40:78:ef:11:d7:fb:7c:64:9d:8e:0f:ef:ee:fe:6a:4a:40:36:
         ec:b9:2e:fe:b9:a2:21:e2:23:76:5e:af:31:81:8c:2b:19:ad:
         37:ad:81:15:39:34:c0:35:a7:fd:53:24:eb:d3:eb:df:0f:9e:
         c2:2d:97:d8:bf:b3:b1:e0:6e:5a:d1:58:54:1f:bf:3b:da:ce:
         64:ad:91:90:5f:ac:f9:cf:58:cb:3f:77:86:02:0f:a9:46:ae:
         c0:70:24:a6:7b:ce:37:7e:74:cd:d9:cf:98:26:db:a9:62:56:
         2f:52:c7:fb:3d:ac:8c:2a:bd:06:50:74:c7:34:48:ca:e6:04:
         1a:97:bf:56:49:3e:2f:a2:34:5f:21:50:10:e0:d7:2d:e3:ff:
         89:b0:e2:91:1d:3b:a1:d5:b5:1b:9b:05:cb:65:0f:4a:3a:8b:
         40:3d:84:34:bc:ec:33:89:44:72:f8:0a:15:14:e8:08:ba:b2:
         38:5d:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org