Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/3137302e37382e3133322e302f32342d3234203d3e20323636323730.roa
File:                     3137302e37382e3133322e302f32342d3234203d3e20323636323730.roa (raw, json)
Hash identifier:          ABF/gGESZEXIu/Ez2qXZTHdXt/V3ClyMjHDv86Z/694=
Subject key identifier:   34:58:06:6C:FA:68:50:1B:C8:88:AE:F0:74:00:85:CB:C8:7D:F7:35
Certificate issuer:       /CN=858F93E91EEF6EEF7DCAAD6A99D5240720021F7C
Certificate serial:       5C49FC0F857A5620B9B0F6FE0D8B9E00C705309D
Authority key identifier: 85:8F:93:E9:1E:EF:6E:EF:7D:CA:AD:6A:99:D5:24:07:20:02:1F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/3137302e37382e3133322e302f32342d3234203d3e20323636323730.roa
Signing time:             Tue 13 Feb 2024 12:55:09 +0000
ROA not before:           Tue 13 Feb 2024 12:50:09 +0000
ROA not after:            Tue 11 Feb 2025 12:55:09 +0000
asID:                     266270
IP address blocks:        170.78.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:49:fc:0f:85:7a:56:20:b9:b0:f6:fe:0d:8b:9e:00:c7:05:30:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858F93E91EEF6EEF7DCAAD6A99D5240720021F7C
        Validity
            Not Before: Feb 13 12:50:09 2024 GMT
            Not After : Feb 11 12:55:09 2025 GMT
        Subject: CN=3458066CFA68501BC888AEF0740085CBC87DF735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:b0:27:42:fe:91:f7:9e:c9:65:c5:81:d0:
                    97:4c:70:e2:a9:c8:50:0f:57:c7:4e:6d:c7:4e:8a:
                    f0:0d:0e:0e:99:e3:7b:e2:50:31:da:8b:c0:d9:48:
                    17:28:ce:12:d0:b0:47:0b:d2:0d:f7:bf:48:35:ab:
                    5f:50:92:0c:05:f2:92:86:b8:5e:62:74:6f:cb:9e:
                    10:0a:c5:d8:fc:29:3c:d4:65:27:1f:0f:ed:6c:72:
                    72:e2:29:13:b7:53:a7:3c:a5:10:d3:e8:49:66:b4:
                    62:2b:d0:00:77:1b:54:5f:db:59:a1:51:b9:66:e0:
                    7d:70:86:f4:f7:5b:cc:f0:81:09:2c:3d:c4:81:8b:
                    06:34:6f:f1:20:bf:e5:b3:89:78:68:5b:47:61:3b:
                    cd:5b:89:a6:d0:d4:83:9f:c3:29:fc:d6:b4:36:1f:
                    1a:44:18:47:bd:e6:5f:a2:4a:59:91:cf:14:1b:b7:
                    13:e6:7a:55:68:74:ff:f3:ec:92:f4:7f:ad:db:b1:
                    ee:15:fc:55:ec:36:0e:f3:f7:51:88:43:ad:b8:2d:
                    e5:c9:98:ad:4c:6b:b6:32:53:7e:57:cb:c2:d3:04:
                    c9:e1:6f:f9:ff:1f:7a:a0:e8:b7:53:19:b7:5f:e6:
                    a2:90:9e:86:17:f6:4e:97:28:5f:a9:7f:f2:7e:5a:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:58:06:6C:FA:68:50:1B:C8:88:AE:F0:74:00:85:CB:C8:7D:F7:35
            X509v3 Authority Key Identifier:
                keyid:85:8F:93:E9:1E:EF:6E:EF:7D:CA:AD:6A:99:D5:24:07:20:02:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/3137302e37382e3133322e302f32342d3234203d3e20323636323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:77:7e:48:95:87:19:52:d1:2f:d3:04:2c:5b:8b:5d:ca:aa:
         e1:db:6e:2d:26:64:57:a4:a5:c2:f2:6a:58:2f:2f:a4:bf:54:
         27:1d:10:ff:00:9a:a2:63:65:68:39:cd:4c:6e:5e:ba:2f:6c:
         5d:84:44:6d:86:3e:c8:1e:cc:6e:c2:61:93:38:2e:49:9e:62:
         a5:ac:71:57:11:91:34:b7:6e:0a:92:60:b8:b6:54:b1:89:86:
         be:70:24:7e:63:2b:57:a7:55:a2:34:5b:0b:7c:2d:85:85:93:
         65:23:57:80:a8:a6:5e:08:41:b4:46:45:81:32:6e:27:d2:16:
         d3:d3:0e:55:57:e4:c5:98:14:2c:ad:2f:79:03:3c:7a:d2:1c:
         d6:44:98:20:ce:ad:ae:5b:c4:20:2a:3c:39:ba:e8:97:1e:5a:
         ac:21:91:88:ad:9e:26:9b:52:6d:cf:33:75:57:8c:90:6c:fc:
         e6:c2:40:74:f4:bb:49:3d:9b:e1:05:30:62:5a:d9:8f:7e:14:
         af:1f:fe:76:0a:b5:ac:8e:d8:8a:bc:fa:48:cb:ef:a6:60:08:
         b6:ae:46:1a:f3:6b:71:29:61:23:d7:54:c0:25:2c:58:6c:40:
         22:cd:28:0a:87:c0:19:b9:94:3e:6c:9c:cc:6f:2f:72:f2:3d:
         9e:6c:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org