Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32342d3234203d3e20323635343936.roa
File:                     3137302e37382e36302e302f32342d3234203d3e20323635343936.roa (raw, json)
Hash identifier:          4gpK/wtMlkLA8dQ+BxU8nsax4Pye3Vm8dgdW/5/Zz28=
Subject key identifier:   88:EE:E3:18:15:78:19:EA:21:6E:33:C7:C4:61:62:40:69:5C:EC:53
Certificate issuer:       /CN=F37624DFD975EAF07625C6087B663470695A2CB4
Certificate serial:       4E8A55457BFDFD05B816C8AF36033A35F90CE094
Authority key identifier: F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32342d3234203d3e20323635343936.roa
Signing time:             Wed 31 May 2023 02:32:37 +0000
ROA not before:           Wed 31 May 2023 02:27:37 +0000
ROA not after:            Wed 29 May 2024 02:32:37 +0000
asID:                     265496
IP address blocks:        170.78.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8a:55:45:7b:fd:fd:05:b8:16:c8:af:36:03:3a:35:f9:0c:e0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F37624DFD975EAF07625C6087B663470695A2CB4
        Validity
            Not Before: May 31 02:27:37 2023 GMT
            Not After : May 29 02:32:37 2024 GMT
        Subject: CN=88EEE318157819EA216E33C7C4616240695CEC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:75:b8:64:ac:d6:eb:36:d4:7f:77:7c:94:
                    d1:7e:1d:1d:64:4a:2a:17:3e:24:b0:ba:0a:3a:9c:
                    d5:81:29:d8:cf:71:65:9f:17:92:c1:e7:e8:51:7b:
                    06:74:d7:c1:e7:2c:2f:97:ce:d0:97:6c:8b:f7:05:
                    ea:59:ce:cc:37:e9:01:a0:2b:53:6d:29:5e:27:34:
                    25:71:fd:65:99:aa:4c:a7:e5:92:e8:4f:c8:58:b4:
                    77:a3:c6:ae:e3:be:51:ab:4a:f3:47:4c:ac:04:26:
                    27:03:c6:e3:e0:b0:8e:ef:33:ce:ce:59:10:6d:05:
                    de:c4:70:1e:ef:89:2b:03:06:8f:79:f9:e3:b7:70:
                    01:59:89:18:02:8f:7b:4a:25:2c:2e:79:9e:68:a2:
                    da:b5:92:ab:e2:f5:dc:d6:2c:65:67:11:b9:55:ef:
                    be:67:01:41:a1:ad:0f:66:4b:56:72:78:77:da:f4:
                    6e:bc:66:31:01:bc:12:46:53:bc:ef:a5:02:b6:92:
                    d3:37:5e:02:18:6e:47:2a:b4:98:76:5b:fd:44:22:
                    83:81:60:d4:7f:f9:4c:f9:dd:81:94:19:5c:96:bf:
                    b8:ee:a0:c2:98:38:59:84:e0:6c:1d:ff:10:82:35:
                    14:2c:8f:cb:2c:65:70:76:de:ef:d3:ef:aa:08:85:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EE:E3:18:15:78:19:EA:21:6E:33:C7:C4:61:62:40:69:5C:EC:53
            X509v3 Authority Key Identifier:
                keyid:F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/F37624DFD975EAF07625C6087B663470695A2CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36302e302f32342d3234203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:db:b0:c5:c9:83:23:29:af:86:6c:f9:24:05:98:6b:f2:
         99:3b:08:55:76:0f:90:0d:c8:b9:64:a2:b8:64:2a:90:5f:e0:
         5b:08:c1:b2:44:2e:c0:81:b7:95:12:65:bb:ff:57:12:1c:50:
         dc:1f:7c:4f:9f:e9:58:a2:c1:85:f6:d8:60:7d:8d:8d:ff:10:
         6c:45:94:18:ff:08:fc:bd:6d:76:b2:c6:4e:35:55:8a:22:48:
         17:ba:31:48:5f:1e:51:bd:0e:c4:1d:73:fc:4a:f7:fd:ad:59:
         95:1e:e3:fe:e8:84:e2:9f:bc:c4:38:4f:81:1e:50:82:46:14:
         e6:8d:bd:7a:31:b8:f0:10:bd:af:e2:f6:fa:7f:85:90:d0:b3:
         7e:70:af:d5:01:5d:b4:e6:22:44:4d:f4:d2:2e:62:e7:1f:6f:
         02:20:d4:9c:d6:98:c9:17:10:cd:62:12:48:96:bd:fa:79:d1:
         e8:39:78:1f:04:c4:43:b9:aa:c2:61:fe:6a:fe:80:e1:31:91:
         ad:71:aa:d5:25:26:09:0b:72:51:64:30:5d:53:fe:c1:d0:c5:
         d6:a8:8a:d5:81:0c:ee:29:7d:c3:af:fa:83:ff:24:ca:b8:fe:
         b7:80:d3:78:eb:61:4d:71:f9:75:b8:07:e4:a4:90:a9:ea:a5:
         ab:c2:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:50 2025 by rpki-client