Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36302e302f32342d3234203d3e20323635343936.roa
File:                     3137302e37382e36302e302f32342d3234203d3e20323635343936.roa (raw, json)
Hash identifier:          WA2mMrDdpVVaPbkyRAcEdVamf0SqHRc+feucTr5BKLQ=
Subject key identifier:   39:CC:7A:E2:5D:AE:2C:85:68:4C:E7:F2:B2:71:F8:B6:5A:A8:C8:91
Certificate issuer:       /CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
Certificate serial:       31185DD6482AA21825F18A4B33C907B46842F240
Authority key identifier: 09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36302e302f32342d3234203d3e20323635343936.roa
Signing time:             Sun 12 Nov 2023 15:36:13 +0000
ROA not before:           Sun 12 Nov 2023 15:31:13 +0000
ROA not after:            Sun 10 Nov 2024 15:36:13 +0000
asID:                     265496
IP address blocks:        170.78.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:18:5d:d6:48:2a:a2:18:25:f1:8a:4b:33:c9:07:b4:68:42:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
        Validity
            Not Before: Nov 12 15:31:13 2023 GMT
            Not After : Nov 10 15:36:13 2024 GMT
        Subject: CN=39CC7AE25DAE2C85684CE7F2B271F8B65AA8C891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:be:07:df:c5:d7:19:17:43:75:b1:c7:4d:
                    c3:6d:f9:32:ed:66:f9:16:3a:be:5e:9b:77:9d:42:
                    cc:33:d9:c6:85:3f:95:c1:7d:b4:80:c1:93:5e:9d:
                    1a:7a:5d:46:7d:08:2f:1e:96:44:b6:10:c5:24:45:
                    d0:74:32:9d:35:b2:26:fc:87:0b:4d:d4:5e:cd:de:
                    42:5a:71:6f:ab:66:9e:b4:2c:01:04:d0:62:37:e9:
                    ff:b9:3c:34:1e:ba:9d:a1:76:47:e7:54:7a:98:fd:
                    97:a2:06:aa:e2:10:37:f8:a8:5e:12:3e:35:46:b5:
                    05:d7:ec:01:ff:84:16:fa:8f:44:f5:43:26:c2:1f:
                    eb:41:cc:06:99:54:dd:10:71:4b:d2:58:66:92:51:
                    7e:6e:7b:c0:b8:30:c6:b4:bc:a0:94:8a:04:80:9e:
                    26:85:6a:75:63:c5:6d:91:5a:c8:44:2c:c7:5b:5c:
                    e5:cb:fe:65:57:d5:e8:f1:6a:9f:66:52:21:f4:df:
                    8e:cf:70:3b:f6:17:c0:a1:55:83:7c:28:23:ed:2d:
                    da:ed:7a:13:25:24:bd:cc:5e:53:5c:82:10:65:77:
                    65:09:a1:77:6e:c6:1b:e0:18:5e:89:f2:c2:e8:b2:
                    00:9a:e2:99:25:b1:3c:e9:95:a9:86:af:10:99:56:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:7A:E2:5D:AE:2C:85:68:4C:E7:F2:B2:71:F8:B6:5A:A8:C8:91
            X509v3 Authority Key Identifier:
                keyid:09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36302e302f32342d3234203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:66:5b:a8:d0:53:35:de:d3:0f:5a:8a:fe:81:af:78:0a:a1:
         11:e6:80:72:d8:de:ce:80:32:74:04:7f:5d:f0:18:9a:9c:2e:
         4e:66:28:52:51:dc:fd:b7:90:db:62:55:d1:b1:88:c9:f7:a9:
         53:98:1c:02:de:62:8a:77:89:4e:d8:c2:6d:36:cb:f0:a6:cb:
         da:64:04:a4:44:bc:a5:8b:c3:89:ac:67:dd:28:52:9e:f0:e9:
         0f:5d:dc:35:f0:0a:04:f1:f0:fe:c7:eb:c7:d9:42:7d:76:dd:
         34:5e:17:8e:3a:1f:f1:28:df:a1:51:c7:a0:fa:8c:e8:36:b1:
         f1:a2:e0:a5:3f:c3:00:3c:e5:0c:ef:18:5e:65:a1:c4:f1:fd:
         8e:42:1c:88:c7:f3:3e:a0:a7:90:5c:6f:80:44:94:60:a8:04:
         64:d1:92:4c:7f:41:7d:05:54:37:e8:24:3a:f3:8e:2e:9c:96:
         f5:be:08:68:8c:71:5e:e0:3c:4b:5d:bd:d6:10:06:9d:ec:3d:
         9a:6c:66:9a:cf:61:62:42:05:d8:0e:5e:eb:24:df:7f:48:35:
         6b:f6:df:4e:85:8f:22:d6:ac:87:e7:4c:ff:76:bd:75:d7:d8:
         67:fa:e8:7d:64:b5:73:ab:e0:06:cc:48:6e:b6:4e:fb:06:e8:
         7d:fd:4c:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMRhd1kgqohgl8YpLM8kHtGhC8kAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2QUI3NzBGRDJDREYyMkU4QjlBMjU0MDhGQTZGNzY1
RTAxQ0ZBRjAeFw0yMzExMTIxNTMxMTNaFw0yNDExMTAxNTM2MTNaMDMxMTAvBgNV
BAMTKDM5Q0M3QUUyNURBRTJDODU2ODRDRTdGMkIyNzFGOEI2NUFBOEM4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbor4H38XXGRdDdbHHTcNt+TLt
ZvkWOr5em3edQswz2caFP5XBfbSAwZNenRp6XUZ9CC8elkS2EMUkRdB0Mp01sib8
hwtN1F7N3kJacW+rZp60LAEE0GI36f+5PDQeup2hdkfnVHqY/ZeiBqriEDf4qF4S
PjVGtQXX7AH/hBb6j0T1QybCH+tBzAaZVN0QcUvSWGaSUX5ue8C4MMa0vKCUigSA
niaFanVjxW2RWshELMdbXOXL/mVX1ejxap9mUiH0347PcDv2F8ChVYN8KCPtLdrt
ehMlJL3MXlNcghBld2UJoXduxhvgGF6J8sLosgCa4pklsTzplamGrxCZVjnLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOcx64l2uLIVoTOfysnH4tlqoyJEwHwYDVR0j
BBgwFoAUCWq3cP0s3yLouaJUCPpvdl4Bz68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMC8wOTZBQjc3MEZEMkNERjIyRThCOUEyNTQwOEZBNkY3NjVFMDFDRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA5NkFCNzcwRkQyQ0RGMjJF
OEI5QTI1NDA4RkE2Rjc2NUUwMUNGQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzAv
MzEzNzMwMmUzNzM4MmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk48MA0GCSqGSIb3DQEBCwUAA4IBAQAeZluo0FM1
3tMPWor+ga94CqER5oBy2N7OgDJ0BH9d8BianC5OZihSUdz9t5DbYlXRsYjJ96lT
mBwC3mKKd4lO2MJtNsvwpsvaZASkRLyli8OJrGfdKFKe8OkPXdw18AoE8fD+x+vH
2UJ9dt00XheOOh/xKN+hUceg+ozoNrHxouClP8MAPOUM7xheZaHE8f2OQhyIx/M+
oKeQXG+ARJRgqARk0ZJMf0F9BVQ36CQ6844unJb1vghojHFe4DxLXb3WEAad7D2a
bGaaz2FiQgXYDl7rJN9/SDVr9t9OhY8i1qyH50z/dr1119hn+uh9ZLVzq+AGzEhu
tk77Buh9/Uwq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org