Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32322d3232203d3e20323635343936.roa
File:                     3137302e37382e36302e302f32322d3232203d3e20323635343936.roa (raw, json)
Hash identifier:          q79XYBcPG4e78aRhkyusLXKerjUn9/NLTxYAX+oLOhc=
Subject key identifier:   83:35:F2:1A:5E:42:E5:FE:AE:2F:43:99:0B:FC:74:DD:9F:BD:C4:E4
Certificate issuer:       /CN=F37624DFD975EAF07625C6087B663470695A2CB4
Certificate serial:       3633E750AE1FE9171B411C3E26DBFE4FAAA7184B
Authority key identifier: F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32322d3232203d3e20323635343936.roa
Signing time:             Wed 31 May 2023 02:32:37 +0000
ROA not before:           Wed 31 May 2023 02:27:37 +0000
ROA not after:            Wed 29 May 2024 02:32:37 +0000
asID:                     265496
IP address blocks:        170.78.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:33:e7:50:ae:1f:e9:17:1b:41:1c:3e:26:db:fe:4f:aa:a7:18:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F37624DFD975EAF07625C6087B663470695A2CB4
        Validity
            Not Before: May 31 02:27:37 2023 GMT
            Not After : May 29 02:32:37 2024 GMT
        Subject: CN=8335F21A5E42E5FEAE2F43990BFC74DD9FBDC4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:40:8a:fe:81:f1:19:f6:cd:be:f6:9b:26:
                    3b:9a:5a:c6:a5:c3:47:90:26:86:7f:f1:01:a5:a1:
                    18:c1:e6:39:c1:52:13:b5:82:b0:82:25:c0:87:5d:
                    8e:92:16:3e:48:47:ff:79:f2:3a:a4:a4:35:64:6e:
                    41:01:2b:a5:e6:4e:a8:48:d3:34:38:6b:ed:b7:f2:
                    f7:b4:8a:2f:61:78:46:d4:16:fa:29:0a:f3:87:41:
                    6a:3b:11:b6:f2:6f:3e:3f:b1:3c:6c:34:75:f9:6a:
                    d3:14:8f:62:ab:64:19:10:7d:6e:6e:5b:bd:a1:d8:
                    39:bc:99:48:77:6d:ab:e6:51:7a:8e:99:e8:2d:78:
                    59:c2:ee:31:20:f9:de:5f:87:cb:61:16:71:8b:4f:
                    67:7f:9e:07:3a:73:dc:00:f5:c3:bf:1d:19:d2:7d:
                    e1:01:d8:6d:e5:c1:b1:11:76:fc:31:c6:a3:a9:9d:
                    6f:29:d9:0c:1a:1d:e7:c5:b7:b2:a6:46:cf:68:56:
                    c3:a7:8b:20:38:92:72:7e:34:18:ca:5d:bf:1f:20:
                    aa:2b:fc:1d:c7:5f:25:a7:65:ec:4c:42:8f:c9:53:
                    ef:fe:70:97:09:0d:f6:2c:7f:d6:be:3b:4b:93:5d:
                    e9:59:b6:93:3b:89:cf:03:79:30:bd:91:97:46:22:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:35:F2:1A:5E:42:E5:FE:AE:2F:43:99:0B:FC:74:DD:9F:BD:C4:E4
            X509v3 Authority Key Identifier:
                keyid:F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/F37624DFD975EAF07625C6087B663470695A2CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32322d3232203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:f3:7b:74:f8:98:a3:8f:41:29:b3:9a:a1:de:24:35:e4:3c:
         78:95:80:c6:2c:69:2b:ba:42:e0:f3:6b:3e:e4:14:17:1a:20:
         3f:b5:75:61:a1:ef:04:ef:c6:83:ed:d8:8f:95:8f:20:83:95:
         61:73:9a:a6:85:65:ec:67:e5:f6:92:31:0f:9a:f2:7b:7d:bd:
         a4:29:84:c4:02:70:52:af:b1:94:53:aa:9c:22:1e:a2:55:28:
         40:da:aa:7d:80:89:b8:a4:e0:91:d3:34:61:50:36:a7:8e:e1:
         e7:99:ec:c9:cc:b2:ac:67:ba:57:a1:fd:f6:31:a3:5d:54:c5:
         f5:9e:84:e4:30:69:a9:e4:6f:65:3e:f1:5d:2e:8d:72:bb:6d:
         ed:bf:1d:7d:cd:a5:0f:6c:bc:ce:c4:95:c4:7d:ac:a9:4b:93:
         79:6f:07:bc:92:4d:6e:8b:13:84:93:92:f5:83:b4:9d:38:c4:
         51:02:2c:a7:f3:e1:80:91:6f:72:3e:c3:c8:71:c2:ca:ba:a7:
         25:d3:17:18:60:08:e5:79:1b:42:a5:ae:9b:d8:64:e3:b3:b6:
         bd:0e:e3:62:3a:4d:c4:38:3c:92:5c:07:28:49:51:69:37:b3:
         26:ac:6d:c9:58:9c:b4:d8:5c:99:70:90:2b:4e:34:5c:97:95:
         40:36:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org