Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
File:                     3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier:          othTnS0liSGXC1hf+TKzseC5jQXM3TAgzhj504WFsqo=
Subject key identifier:   8D:75:07:9E:75:69:3B:2F:83:D2:A3:15:1A:54:0C:9C:33:90:07:FC
Certificate issuer:       /CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
Certificate serial:       2C75244DAD831489948DDEBDF0967A61D924DF67
Authority key identifier: DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
Signing time:             Mon 26 Feb 2024 13:03:03 +0000
ROA not before:           Mon 26 Feb 2024 12:58:03 +0000
ROA not after:            Mon 24 Feb 2025 13:03:03 +0000
asID:                     264128
IP address blocks:        170.78.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:75:24:4d:ad:83:14:89:94:8d:de:bd:f0:96:7a:61:d9:24:df:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
        Validity
            Not Before: Feb 26 12:58:03 2024 GMT
            Not After : Feb 24 13:03:03 2025 GMT
        Subject: CN=8D75079E75693B2F83D2A3151A540C9C339007FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:23:cc:7d:8a:b7:2c:e6:5d:58:d6:81:37:
                    2b:94:59:fb:db:5d:84:d3:18:77:b7:12:f5:d6:bc:
                    20:5a:a7:96:2a:88:44:f2:91:d5:22:e7:c9:de:e8:
                    bf:04:4e:21:b9:b1:d9:34:58:1f:28:d8:45:94:f2:
                    00:9f:f8:a7:bc:33:7d:4e:8a:fb:e5:40:23:ce:ec:
                    f3:b2:c6:5e:4f:46:31:45:78:72:a3:93:08:ae:63:
                    bf:0b:3c:4c:a2:87:0a:db:b4:b0:d3:05:c8:45:58:
                    fc:1e:73:c2:95:33:26:23:54:c8:37:07:78:77:62:
                    28:92:e9:94:e0:87:71:8a:82:fe:fb:11:e2:39:f7:
                    4e:94:95:8a:6f:71:4a:d1:b3:6f:7c:f2:35:15:e1:
                    1c:23:12:b4:4d:1a:3f:62:fe:40:c6:25:92:e1:9c:
                    b9:02:86:8b:5c:be:a0:bd:c4:32:85:1b:32:23:c6:
                    8d:1e:1a:5e:18:69:f3:01:95:9c:92:96:d5:6e:b4:
                    6f:10:8d:7b:27:ab:d9:3f:da:e0:d2:ed:7d:0e:bf:
                    2a:cd:a5:af:8a:86:0b:cb:69:dc:79:41:9f:30:4f:
                    48:ba:95:5d:68:c1:bd:c0:33:6e:e2:bb:e1:82:87:
                    d5:2e:58:83:d6:67:4e:62:7f:74:f5:e3:d2:46:07:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:07:9E:75:69:3B:2F:83:D2:A3:15:1A:54:0C:9C:33:90:07:FC
            X509v3 Authority Key Identifier:
                keyid:DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:42:3a:7d:15:00:1f:89:a1:70:2d:12:f9:cf:4f:29:6f:03:
         53:ea:44:5e:00:2b:b7:61:0a:5c:cd:4b:ff:aa:f9:8b:94:05:
         bf:ba:2c:fc:28:49:88:ec:ff:f6:62:6d:4f:e5:5c:b4:a1:e6:
         fb:7f:e6:ac:00:5f:42:9f:26:91:c1:0d:f2:0a:54:48:42:47:
         02:d3:d6:bf:74:da:ad:13:41:71:81:84:51:e8:13:2b:49:88:
         72:7c:40:11:e4:c0:d1:55:98:22:f2:d3:a2:ba:03:22:8b:26:
         ce:5d:cb:6d:7b:05:87:fe:40:1a:11:99:5c:df:01:35:9b:cf:
         3f:2c:3b:3c:d6:6c:3d:df:e1:2a:4d:d5:93:b0:0a:b3:73:e6:
         a6:ff:be:05:c4:ae:ca:41:7f:5a:b7:c4:f4:09:b5:f2:27:e3:
         53:08:e6:2f:4c:59:49:ee:5d:eb:84:58:f5:92:7c:7a:ba:64:
         65:50:14:b1:30:e8:9b:37:eb:f5:59:ca:b0:ab:47:24:09:9e:
         a2:6e:53:b1:04:ea:1f:30:22:4c:c1:9d:7a:c1:ca:ef:c4:c8:
         06:ac:7b:8d:c5:0a:3a:95:9d:12:7a:d5:c7:da:22:5e:a0:b8:
         86:39:23:68:e2:d7:a4:04:2d:2f:cc:92:15:8d:ae:a3:b3:ca:
         4f:88:ec:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULHUkTa2DFImUjd698JZ6Ydkk32cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERDQkZBNkZGQjMxRkZGNjAwNzEwRDNCNTNEQjRDRjI0
M0VDNjU4RTAeFw0yNDAyMjYxMjU4MDNaFw0yNTAyMjQxMzAzMDNaMDMxMTAvBgNV
BAMTKDhENzUwNzlFNzU2OTNCMkY4M0QyQTMxNTFBNTQwQzlDMzM5MDA3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuSPMfYq3LOZdWNaBNyuUWfvb
XYTTGHe3EvXWvCBap5YqiETykdUi58ne6L8ETiG5sdk0WB8o2EWU8gCf+Ke8M31O
ivvlQCPO7POyxl5PRjFFeHKjkwiuY78LPEyihwrbtLDTBchFWPwec8KVMyYjVMg3
B3h3YiiS6ZTgh3GKgv77EeI5906UlYpvcUrRs2988jUV4RwjErRNGj9i/kDGJZLh
nLkChotcvqC9xDKFGzIjxo0eGl4YafMBlZySltVutG8QjXsnq9k/2uDS7X0OvyrN
pa+KhgvLadx5QZ8wT0i6lV1owb3AM27iu+GCh9UuWIPWZ05if3T149JGB5lPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjXUHnnVpOy+D0qMVGlQMnDOQB/wwHwYDVR0j
BBgwFoAU3cv6b/sx//YAcQ07U9tM8kPsZY4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdvbVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3kyN3pjRXlSSGVY
RUgvMC9ERENCRkE2RkZCMzFGRkY2MDA3MTBEM0I1M0RCNENGMjQzRUM2NThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REQ0JGQTZGRkIzMUZGRjYw
MDcxMEQzQjUzREI0Q0YyNDNFQzY1OEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHb21SUkZjVGdRVnhMZlNzaGFqUUxuMXRLYm5WcTd5Mjd6Y0V5UkhlWEVILzAv
MzEzNzMwMmUzNzM4MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqTvAwDQYJKoZIhvcNAQELBQADggEBABRCOn0V
AB+JoXAtEvnPTylvA1PqRF4AK7dhClzNS/+q+YuUBb+6LPwoSYjs//ZibU/lXLSh
5vt/5qwAX0KfJpHBDfIKVEhCRwLT1r902q0TQXGBhFHoEytJiHJ8QBHkwNFVmCLy
06K6AyKLJs5dy217BYf+QBoRmVzfATWbzz8sOzzWbD3f4SpN1ZOwCrNz5qb/vgXE
rspBf1q3xPQJtfIn41MI5i9MWUnuXeuEWPWSfHq6ZGVQFLEw6Js36/VZyrCrRyQJ
nqJuU7EE6h8wIkzBnXrByu/EyAase43FCjqVnRJ61cfaIl6guIY5I2ji16QELS/M
khWNrqOzyk+I7Ak=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org