Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32332d3233203d3e20323635343936.roa
File:                     3137302e37382e36302e302f32332d3233203d3e20323635343936.roa (raw, json)
Hash identifier:          Fk1gzDCEaXbQqgfWUz0BzVif4EUqsHNQ7lWxwnwz0cQ=
Subject key identifier:   04:AE:8C:C7:01:6B:3F:CA:A6:FC:BB:B2:FB:FE:20:07:AA:63:30:B6
Certificate issuer:       /CN=F37624DFD975EAF07625C6087B663470695A2CB4
Certificate serial:       24A92F4CFE0F91FD99B577368C201F8D98465BBB
Authority key identifier: F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32332d3233203d3e20323635343936.roa
Signing time:             Wed 31 May 2023 02:32:38 +0000
ROA not before:           Wed 31 May 2023 02:27:38 +0000
ROA not after:            Wed 29 May 2024 02:32:38 +0000
asID:                     265496
IP address blocks:        170.78.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a9:2f:4c:fe:0f:91:fd:99:b5:77:36:8c:20:1f:8d:98:46:5b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F37624DFD975EAF07625C6087B663470695A2CB4
        Validity
            Not Before: May 31 02:27:38 2023 GMT
            Not After : May 29 02:32:38 2024 GMT
        Subject: CN=04AE8CC7016B3FCAA6FCBBB2FBFE2007AA6330B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:26:2a:5b:7e:bd:8f:cf:7d:18:c0:14:38:
                    1b:74:fd:02:54:55:25:df:4f:3f:64:04:4b:76:c4:
                    fe:77:2d:4b:b7:b6:f1:22:f9:98:94:6a:7b:6f:cd:
                    36:9c:e3:97:97:b8:7b:88:77:57:d5:04:9c:8b:9f:
                    1c:e3:23:0e:f7:6e:eb:5c:e0:cc:1a:c9:5f:50:17:
                    cc:11:7d:7b:d8:4a:62:b5:2c:cd:25:59:f9:ec:f5:
                    f3:aa:72:1c:89:a7:eb:86:79:48:29:f4:c7:bb:6b:
                    9b:0f:0f:8f:d0:88:33:df:57:b3:1a:3a:52:96:d7:
                    2e:e3:b5:fe:76:12:13:76:36:7c:0f:92:34:3e:44:
                    13:8a:c9:de:50:87:db:f4:bf:f8:b7:2f:d8:fa:d0:
                    a0:93:6f:03:b1:65:e1:4a:76:13:2a:f8:c2:ef:f0:
                    ed:81:f0:b9:2c:30:95:6b:98:e1:a1:1e:d4:2a:8f:
                    b3:bc:8b:e7:e8:55:f2:b6:62:0b:53:e4:e2:8a:70:
                    d8:8e:35:da:8f:bb:f0:14:f5:66:8d:f5:ce:95:0b:
                    2d:33:94:47:6c:3a:ef:bd:39:eb:1e:f2:68:d4:a6:
                    d2:f6:10:c8:df:15:38:b9:dc:0f:2b:53:a8:8f:00:
                    6f:0f:05:7d:dc:13:da:62:c6:61:cb:97:d5:9e:61:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:8C:C7:01:6B:3F:CA:A6:FC:BB:B2:FB:FE:20:07:AA:63:30:B6
            X509v3 Authority Key Identifier:
                keyid:F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/F37624DFD975EAF07625C6087B663470695A2CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32332d3233203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:1b:3a:f8:1a:a0:cb:3f:c9:a5:60:7c:61:33:51:5e:b9:34:
         0b:9e:bc:a9:4c:d5:b3:af:21:d9:75:af:be:c6:45:5f:e6:3d:
         93:85:a4:b5:37:ff:f4:26:f4:8e:df:55:64:55:f5:89:b6:91:
         42:ff:a3:fe:b8:4d:91:d7:12:63:df:b9:15:29:c2:fc:9c:d4:
         ba:0b:a9:96:8c:de:b9:d7:77:fd:7f:22:2d:88:5f:07:5a:21:
         0f:a2:5f:4d:44:ca:98:ef:fb:d8:cb:8a:22:54:37:f6:15:93:
         84:cb:bf:4e:74:da:85:d2:8e:60:09:41:60:06:f2:db:05:cb:
         76:7e:6c:1c:70:c2:18:99:e6:c2:da:d5:7c:b9:8c:0d:a1:b9:
         c9:22:63:4b:ae:f3:7b:41:69:0f:94:3a:48:4b:e8:5d:e4:a4:
         f1:56:2d:9f:e4:20:41:4b:9a:b7:40:a0:90:8a:da:ed:fe:99:
         fd:79:e5:5d:4f:ee:08:20:c4:a3:34:45:6c:12:ff:31:63:18:
         59:43:89:18:79:89:97:35:44:cc:ed:1a:a5:ad:66:a7:3a:41:
         d9:e6:64:ab:63:1d:d2:57:77:96:43:f1:38:a4:c3:20:15:07:
         e6:f9:05:30:3e:6b:31:fa:29:80:16:a0:8a:a3:05:56:7e:b4:
         ae:4d:5f:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJKkvTP4Pkf2ZtXc2jCAfjZhGW7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM3NjI0REZEOTc1RUFGMDc2MjVDNjA4N0I2NjM0NzA2
OTVBMkNCNDAeFw0yMzA1MzEwMjI3MzhaFw0yNDA1MjkwMjMyMzhaMDMxMTAvBgNV
BAMTKDA0QUU4Q0M3MDE2QjNGQ0FBNkZDQkJCMkZCRkUyMDA3QUE2MzMwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtECYqW369j899GMAUOBt0/QJU
VSXfTz9kBEt2xP53LUu3tvEi+ZiUantvzTac45eXuHuId1fVBJyLnxzjIw73butc
4MwayV9QF8wRfXvYSmK1LM0lWfns9fOqchyJp+uGeUgp9Me7a5sPD4/QiDPfV7Ma
OlKW1y7jtf52EhN2NnwPkjQ+RBOKyd5Qh9v0v/i3L9j60KCTbwOxZeFKdhMq+MLv
8O2B8LksMJVrmOGhHtQqj7O8i+foVfK2YgtT5OKKcNiONdqPu/AU9WaN9c6VCy0z
lEdsOu+9Oese8mjUptL2EMjfFTi53A8rU6iPAG8PBX3cE9pixmHLl9WeYQNtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBK6MxwFrP8qm/Luy+/4gB6pjMLYwHwYDVR0j
BBgwFoAU83Yk39l16vB2JcYIe2Y0cGlaLLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMS9GMzc2MjRERkQ5NzVFQUYwNzYyNUM2MDg3QjY2MzQ3MDY5NUEyQ0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzNzYyNERGRDk3NUVBRjA3
NjI1QzYwODdCNjYzNDcwNjk1QTJDQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzEv
MzEzNzMwMmUzNzM4MmUzNjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqk48MA0GCSqGSIb3DQEBCwUAA4IBAQBeGzr4GqDL
P8mlYHxhM1FeuTQLnrypTNWzryHZda++xkVf5j2ThaS1N//0JvSO31VkVfWJtpFC
/6P+uE2R1xJj37kVKcL8nNS6C6mWjN6513f9fyItiF8HWiEPol9NRMqY7/vYy4oi
VDf2FZOEy79OdNqF0o5gCUFgBvLbBct2fmwccMIYmebC2tV8uYwNobnJImNLrvN7
QWkPlDpIS+hd5KTxVi2f5CBBS5q3QKCQitrt/pn9eeVdT+4IIMSjNEVsEv8xYxhZ
Q4kYeYmXNUTM7RqlrWanOkHZ5mSrYx3SV3eWQ/E4pMMgFQfm+QUwPmsx+imAFqCK
owVWfrSuTV9k
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org