Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233382e302f32332d3233203d3e203631363738.roa
File:                     3137302e3234362e3233382e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          mgLZ9xOUwE29r3zQAcFvaSvdnLmPeroRhLZ14DWfK4U=
Subject key identifier:   2D:E7:5B:AB:24:D1:86:40:AA:C9:10:99:58:CE:D4:AF:77:13:68:28
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       4EECDE2330CAAAB5AD96639EEB53D622CD7AEEF9
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233382e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        170.246.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ec:de:23:30:ca:aa:b5:ad:96:63:9e:eb:53:d6:22:cd:7a:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=2DE75BAB24D18640AAC9109958CED4AF77136828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:e3:87:b0:0c:d9:04:e2:46:d4:d2:28:2d:
                    19:ba:f4:3d:61:fa:56:bc:57:dc:47:ae:29:27:a1:
                    7d:fe:ce:22:93:f0:44:ba:82:84:45:a1:41:ff:23:
                    57:17:48:a2:65:17:62:7c:22:3d:73:ba:9d:81:f7:
                    64:ef:b6:9b:6e:23:06:58:6f:a5:44:cf:78:75:95:
                    9b:74:df:f8:bf:39:5f:4f:8b:f5:37:53:f1:a5:54:
                    6a:1d:7e:d4:1f:71:88:86:cf:7a:0c:75:95:44:03:
                    60:d1:3a:d5:fb:fd:f7:f3:16:85:7a:2c:9e:7c:3e:
                    ae:03:41:44:e7:2f:27:e8:fc:55:d6:48:3d:6e:fc:
                    12:d9:c7:21:d9:ed:b0:d4:a6:46:de:99:86:2d:67:
                    f9:0e:d5:a4:bf:9e:7d:f7:29:67:11:79:6a:66:5d:
                    3f:33:21:a4:34:ea:ba:96:44:9b:43:f5:60:50:5a:
                    5f:9a:6d:13:a7:27:34:8d:b5:1a:80:a6:b7:f1:00:
                    fa:fa:3d:c2:b7:54:75:eb:63:8b:7b:10:ab:c9:bd:
                    c9:fa:f2:2d:c3:87:a4:c1:b5:4f:d5:47:d9:ee:b7:
                    12:96:e1:16:65:a7:54:e4:5b:fa:14:46:7e:d0:d5:
                    6e:57:b4:6b:90:99:76:94:a2:04:c5:30:f1:d0:c6:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:5B:AB:24:D1:86:40:AA:C9:10:99:58:CE:D4:AF:77:13:68:28
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233382e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:10:7b:ea:e7:4e:05:3e:0e:38:f1:6b:a1:b5:f0:62:da:cf:
         80:e3:32:1b:b0:30:bf:10:fc:3f:7d:65:ec:65:75:96:bd:5d:
         f0:c1:9d:ca:0e:5b:ba:05:07:ac:1c:88:db:f5:11:39:4b:00:
         45:9a:91:e1:d0:e3:cb:2e:ef:38:c6:fc:59:67:cd:18:cb:75:
         22:63:ac:03:7e:bf:5b:ec:51:e1:74:25:d9:5f:db:d8:73:0c:
         f5:f1:bb:35:90:26:21:d6:c2:74:92:8b:a0:6b:a1:4e:a2:ae:
         30:f3:e1:eb:8d:9c:54:45:ef:48:31:ed:a8:89:83:e9:bb:0c:
         50:08:c4:ca:f2:ad:ee:35:8b:b1:3f:00:bb:14:69:e3:44:1f:
         6f:6e:30:ea:c4:0f:41:cb:a1:0c:e7:cd:11:5e:90:7b:af:b5:
         09:11:f0:ab:28:56:b4:86:6b:4d:c3:fe:0b:34:d0:5f:1b:c8:
         e1:cf:bc:fa:04:df:5b:6a:55:1c:90:e6:ac:c9:d4:58:8e:b9:
         7b:a6:8f:89:29:69:c1:8b:d1:a1:5b:5b:c9:fe:a6:57:cc:c6:
         cc:3b:3a:97:34:77:bf:c6:55:9f:c6:13:da:ab:48:88:96:e9:
         d5:e5:25:56:62:77:d3:c6:f5:04:80:5c:ad:d6:aa:21:d6:6a:
         a6:f9:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org