Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36332e302f32342d3234203d3e20323635343936.roa
File:                     3137302e37382e36332e302f32342d3234203d3e20323635343936.roa (raw, json)
Hash identifier:          Jsq9hgkVHefwBXOdpcr5HIdyWlNV2CzfK23Fhc+XecA=
Subject key identifier:   35:94:06:B9:24:46:0A:2C:6C:9B:E4:05:19:E6:CE:48:3D:E6:52:FF
Certificate issuer:       /CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
Certificate serial:       5F8258CE452A8F44C4551B6915DBAC5C9C7B1134
Authority key identifier: 09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36332e302f32342d3234203d3e20323635343936.roa
Signing time:             Sun 12 Nov 2023 15:36:12 +0000
ROA not before:           Sun 12 Nov 2023 15:31:12 +0000
ROA not after:            Sun 10 Nov 2024 15:36:12 +0000
asID:                     265496
IP address blocks:        170.78.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:82:58:ce:45:2a:8f:44:c4:55:1b:69:15:db:ac:5c:9c:7b:11:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
        Validity
            Not Before: Nov 12 15:31:12 2023 GMT
            Not After : Nov 10 15:36:12 2024 GMT
        Subject: CN=359406B924460A2C6C9BE40519E6CE483DE652FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:d5:c9:f0:f8:1d:4f:6c:f3:f9:60:b8:71:
                    e2:e4:12:90:3b:d5:05:0f:f4:ea:97:da:66:01:47:
                    19:c0:43:8b:d2:74:c2:79:7f:86:5d:14:6f:b0:f1:
                    8e:4b:7d:0a:cd:44:99:31:bf:ea:c7:9e:00:f0:ec:
                    2f:d3:2e:8f:82:5e:e2:22:7e:af:38:c0:3b:2e:ec:
                    9d:3b:2f:fb:7c:b9:b5:a6:78:1f:eb:cb:3d:79:20:
                    f8:6e:83:ff:3b:0e:10:a6:ae:fa:e5:83:34:43:03:
                    0f:f8:a3:21:7c:f7:7b:be:0b:f8:db:dc:4f:37:c3:
                    14:da:4f:71:12:07:4d:f2:07:df:de:6b:b1:88:c1:
                    98:ea:64:6b:d8:d8:3b:20:cd:57:e1:4f:86:16:a4:
                    d0:a2:ff:97:c3:3f:c9:4b:e8:fd:39:aa:d1:2f:2e:
                    1b:eb:e2:88:d4:de:e4:6f:4a:ee:8a:f2:dd:26:a1:
                    c8:07:e2:ce:d1:1e:21:2d:4c:16:2a:0f:27:c5:c4:
                    62:23:17:08:0b:5a:bf:e9:19:8a:84:09:5b:de:4e:
                    d2:67:4d:79:cd:87:73:0a:e0:e0:9a:7d:41:16:6d:
                    01:3e:3f:91:76:fb:96:35:33:e0:d3:6b:75:5d:05:
                    a8:ed:60:f3:33:ee:25:91:09:26:67:80:1e:2e:c1:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:94:06:B9:24:46:0A:2C:6C:9B:E4:05:19:E6:CE:48:3D:E6:52:FF
            X509v3 Authority Key Identifier:
                keyid:09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/3137302e37382e36332e302f32342d3234203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:66:b0:fd:ac:0e:8c:df:a0:7d:b6:3c:e1:67:3b:ab:5f:e0:
         d6:a2:6c:6e:97:f2:70:f2:84:ba:bf:8a:16:d9:81:38:13:fe:
         f2:c1:e6:54:ff:61:33:c7:7f:ba:a5:2e:be:63:15:dd:6c:e6:
         96:ed:91:00:c5:55:cf:c3:e4:09:b2:ff:08:db:f1:61:3a:37:
         d0:6e:f6:6e:34:40:6d:e9:a8:26:43:7c:8f:f4:cf:44:62:6a:
         7c:54:88:db:43:19:72:e6:bf:c4:dd:85:88:86:ba:f3:cd:42:
         11:99:0f:78:35:16:53:16:ff:c0:1c:80:09:95:2b:d7:73:74:
         26:66:52:88:2d:c9:35:13:da:c4:f8:95:73:8d:8c:f6:10:59:
         8c:d1:6c:6e:ac:e1:48:f0:6e:df:69:76:b0:6a:da:e2:c2:4f:
         84:3b:37:ca:80:2c:79:62:a2:a6:47:40:5d:9f:2a:0e:f9:2c:
         69:c5:d3:87:8c:19:7b:86:f2:b8:c8:48:8d:a4:37:1e:d3:f5:
         f2:2c:c5:0d:c4:f5:68:e7:de:3a:70:0f:78:8a:41:2e:26:06:
         52:84:4c:d9:1a:b4:71:d9:b0:ab:b5:38:f9:8a:f0:0e:a8:70:
         61:8b:7e:ff:e6:a4:f2:26:d2:2e:fc:79:45:2c:f6:9f:13:8b:
         df:2f:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org