Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36322e302f32342d3234203d3e20323635343936.roa
File:                     3137302e37382e36322e302f32342d3234203d3e20323635343936.roa (raw, json)
Hash identifier:          W5HUamaEW+fP20KxyEYt8dwdHcrMSDKV3Gxyerqnl4A=
Subject key identifier:   14:19:04:E0:20:2D:B8:A5:8D:F8:A2:8B:34:CE:77:B6:EB:D2:FD:2E
Certificate issuer:       /CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
Certificate serial:       1F64D30ADDFCCA179FA92EF32BDA8FCC522F5BD4
Authority key identifier: 09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36322e302f32342d3234203d3e20323635343936.roa
Signing time:             Sun 12 Nov 2023 15:36:13 +0000
ROA not before:           Sun 12 Nov 2023 15:31:13 +0000
ROA not after:            Sun 10 Nov 2024 15:36:13 +0000
asID:                     265496
IP address blocks:        170.78.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:64:d3:0a:dd:fc:ca:17:9f:a9:2e:f3:2b:da:8f:cc:52:2f:5b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
        Validity
            Not Before: Nov 12 15:31:13 2023 GMT
            Not After : Nov 10 15:36:13 2024 GMT
        Subject: CN=141904E0202DB8A58DF8A28B34CE77B6EBD2FD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:0c:59:e7:af:58:d0:f6:64:5c:d1:66:45:
                    c0:dc:9f:4d:10:84:2d:18:7f:5a:e4:52:20:3b:79:
                    13:ea:43:3c:2e:d0:28:52:b4:b4:f2:f9:3c:ec:40:
                    87:87:b4:10:35:46:43:d9:fc:a1:16:ba:84:d0:d8:
                    bd:91:05:3f:94:47:8f:2c:bc:1f:76:9d:79:a5:bc:
                    74:83:4a:3d:4e:db:26:8f:51:84:29:ed:5f:5d:47:
                    75:2b:b2:ab:2a:4a:e1:1e:d0:01:3a:48:cb:57:84:
                    65:a1:b1:b4:dc:3e:74:51:0a:39:ea:4a:3f:f8:71:
                    75:f5:a2:c0:5b:60:25:1a:32:4a:f0:96:a4:63:8a:
                    8b:cd:d3:ca:0b:ce:ae:94:85:12:17:55:cb:fa:36:
                    85:2b:d3:a9:b9:fe:53:e3:17:a6:22:af:59:a7:c8:
                    c8:40:ad:f5:e1:14:06:14:a2:8e:ce:69:2c:79:c0:
                    78:a2:3b:84:4b:da:68:9a:d7:5c:54:be:cb:3c:6d:
                    7a:f0:1e:93:06:87:29:60:d4:38:df:d2:66:6b:fa:
                    96:cf:d8:40:27:48:64:ee:c4:81:a2:3a:1e:75:fb:
                    3f:bb:13:b4:8d:54:06:e4:10:90:fd:f3:da:31:9f:
                    fe:08:19:da:ab:1e:58:46:d2:92:c2:92:a6:f5:22:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:19:04:E0:20:2D:B8:A5:8D:F8:A2:8B:34:CE:77:B6:EB:D2:FD:2E
            X509v3 Authority Key Identifier:
                keyid:09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36322e302f32342d3234203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:23:27:69:84:23:95:16:7f:29:70:bf:4f:c3:bf:35:26:db:
         00:7a:33:41:1c:e2:a7:35:44:e5:43:3e:f9:19:e2:b1:7f:68:
         dd:e7:bc:c8:57:97:68:4b:33:9a:e8:29:e7:69:fe:75:98:b3:
         3f:b6:a7:9a:e4:86:27:ac:2d:77:2b:f6:1c:85:8f:a4:ae:e5:
         27:82:4b:90:6b:15:79:18:3e:ba:29:3d:db:3a:b3:50:52:33:
         03:5a:5c:f9:6c:ef:38:39:62:9e:2f:67:cc:95:2e:ad:5a:06:
         68:9e:0b:64:b5:df:63:15:e4:50:32:0e:19:be:3e:bb:32:28:
         8f:ba:07:b1:84:7d:63:7f:9c:d2:84:c5:65:d1:90:e6:83:a1:
         48:62:e9:30:5b:5b:a8:cf:0a:55:45:33:c1:ab:0e:09:02:35:
         ae:33:a4:c6:dc:05:dd:f0:67:d3:97:95:a8:fa:b0:86:70:95:
         73:21:d1:eb:fc:bd:5a:66:22:94:e6:79:94:6c:e8:1c:2a:58:
         9f:9e:29:8a:7b:16:40:57:aa:e3:c6:06:da:9b:8c:69:b9:b8:
         f9:ec:f7:95:68:79:a3:db:b0:7b:75:3e:7f:3a:30:c3:ce:e8:
         b8:4b:29:7d:67:17:4c:c5:2e:9f:e3:f1:1e:b0:3c:44:ca:90:
         27:90:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org