Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36302e302f32332d3233203d3e20323635343936.roa
File:                     3137302e37382e36302e302f32332d3233203d3e20323635343936.roa (raw, json)
Hash identifier:          v5DBU1Pu3glhVUZOsdKxgF4rK1tBUWe+CxI56GDNZak=
Subject key identifier:   88:AE:45:B1:E4:00:63:CD:21:39:7F:F4:67:43:6E:C7:94:BA:BB:33
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       4002C141A94BD770F33DD316CE60DF5E52600E89
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36302e302f32332d3233203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:39 +0000
ROA not before:           Mon 03 Apr 2023 10:51:39 +0000
ROA not after:            Mon 01 Apr 2024 10:56:39 +0000
asID:                     265496
IP address blocks:        170.78.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:02:c1:41:a9:4b:d7:70:f3:3d:d3:16:ce:60:df:5e:52:60:0e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:39 2023 GMT
            Not After : Apr  1 10:56:39 2024 GMT
        Subject: CN=88AE45B1E40063CD21397FF467436EC794BABB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:a1:ed:d9:67:4e:72:1d:ba:3b:bf:43:87:
                    99:1a:60:da:9f:c8:8e:03:c1:1e:ac:27:35:06:ad:
                    a3:ae:fe:47:e3:97:bf:c1:69:26:36:66:5f:cc:27:
                    3c:f8:1e:e0:91:0a:d4:6b:a1:82:3c:92:3f:71:10:
                    53:08:c9:be:0a:0a:c4:95:4e:54:3f:93:66:23:51:
                    d2:39:47:22:74:b9:74:e4:13:70:75:90:c8:e5:1e:
                    c2:a0:c1:2b:64:c6:67:c4:88:6c:00:20:d1:c1:31:
                    84:d3:2c:69:a9:a7:9f:f6:21:98:ae:2c:f0:d5:8c:
                    1b:2b:79:f2:16:cd:1e:5e:5d:23:aa:06:b2:13:dc:
                    85:f8:96:d7:ac:c8:66:a4:32:04:85:2c:40:25:e3:
                    55:ae:95:d7:34:4f:2a:d3:23:88:59:34:8e:28:5e:
                    a4:81:ad:83:94:c9:2d:cd:95:a7:fa:c5:67:9e:b8:
                    69:8f:31:28:a6:9d:11:72:24:40:dc:d9:f2:41:e9:
                    cd:b6:ee:76:6e:f7:c2:97:17:77:23:2e:93:18:13:
                    44:65:f4:82:63:10:13:93:18:3c:de:52:13:a7:0d:
                    a0:ae:f6:d5:46:00:96:e2:6d:4a:a4:76:e9:ec:06:
                    2d:7c:fa:91:2b:f7:79:48:4f:90:5b:a3:3c:ed:9a:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:45:B1:E4:00:63:CD:21:39:7F:F4:67:43:6E:C7:94:BA:BB:33
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36302e302f32332d3233203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:54:6b:c8:c9:13:f5:49:f0:51:ec:e2:da:9a:8a:5c:68:d3:
         23:0c:62:24:8a:4a:cc:76:45:60:44:ab:5a:e9:75:45:12:68:
         ad:21:97:20:14:ef:f0:9d:b3:e0:98:44:0f:12:7c:29:6f:7e:
         1e:32:cc:1b:fd:35:05:e3:4e:28:a2:76:b7:2a:44:bf:30:4e:
         29:19:66:30:5b:5c:12:28:6c:6e:ec:04:89:7b:89:43:dd:99:
         78:ff:b4:75:49:db:87:8c:a5:79:40:a7:bd:66:22:1a:a9:4d:
         a3:ac:19:5f:39:92:8d:bc:ae:d9:75:4a:26:b6:7a:0d:b5:16:
         cc:a6:ef:69:31:79:5e:9c:3a:df:db:db:37:ae:7c:15:72:cb:
         5f:0c:34:cc:28:bc:42:b2:48:a0:93:4b:e0:85:52:0f:f3:08:
         03:66:f3:0b:d6:46:9e:1d:7e:b0:03:06:44:13:0c:76:86:c0:
         41:b7:03:12:4c:a5:74:63:64:16:34:09:6f:e8:4b:bc:66:ca:
         c2:1c:e6:78:3d:dc:dd:cd:54:e9:8e:0c:6d:cf:fc:8f:eb:d6:
         7f:92:25:4a:55:23:ca:10:b1:b8:2a:c6:6d:83:54:8b:94:68:
         7d:d5:13:23:bb:d1:2a:d3:84:1c:f3:fa:06:71:37:b1:76:75:
         7d:32:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org