Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36322e302f32342d3234203d3e20323635343936.roa
File:                     3137302e37382e36322e302f32342d3234203d3e20323635343936.roa (raw, json)
Hash identifier:          FDvNWKigICtsmLVERGRK7KqjGzbMhuCM3HgQIVI+H3k=
Subject key identifier:   3A:31:3B:CA:97:1F:A5:4F:2F:68:B9:CF:6D:CB:2C:14:54:8C:AA:83
Certificate issuer:       /CN=F37624DFD975EAF07625C6087B663470695A2CB4
Certificate serial:       5B653A6F581DFD1389F3DD3FC0357DC71B4323CA
Authority key identifier: F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36322e302f32342d3234203d3e20323635343936.roa
Signing time:             Wed 31 May 2023 02:32:37 +0000
ROA not before:           Wed 31 May 2023 02:27:37 +0000
ROA not after:            Wed 29 May 2024 02:32:37 +0000
asID:                     265496
IP address blocks:        170.78.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:65:3a:6f:58:1d:fd:13:89:f3:dd:3f:c0:35:7d:c7:1b:43:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F37624DFD975EAF07625C6087B663470695A2CB4
        Validity
            Not Before: May 31 02:27:37 2023 GMT
            Not After : May 29 02:32:37 2024 GMT
        Subject: CN=3A313BCA971FA54F2F68B9CF6DCB2C14548CAA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:00:42:51:3f:3a:ca:d8:dd:9c:02:f4:ca:
                    67:22:f9:f1:4e:a8:34:5a:b7:6b:49:71:0c:a4:fd:
                    5c:fe:c8:a5:c6:68:de:fe:fd:df:e9:74:4f:33:96:
                    cf:7f:e9:61:a6:b7:8b:9e:1b:4a:c1:55:0d:7f:f3:
                    d1:8a:ae:61:d7:6d:07:75:5c:ef:87:73:8b:3b:ca:
                    c5:63:b1:a3:b8:b9:6d:72:db:6a:21:a5:35:f9:9a:
                    53:8f:6d:85:37:f7:f6:2f:2e:ea:34:7e:1e:ea:58:
                    f2:72:cb:14:b4:9e:1b:60:57:52:f3:b2:aa:7a:90:
                    67:15:86:cf:56:57:6b:ec:27:c3:79:e0:6b:75:5a:
                    ae:5f:18:23:36:54:02:1d:66:8b:65:a1:5d:05:e1:
                    13:dc:d2:74:e5:ca:fe:64:56:55:74:39:67:71:e0:
                    06:68:0f:2f:e2:87:9f:d2:d3:1c:0f:71:6b:8b:07:
                    c8:57:da:9b:35:95:ea:1c:24:d5:a0:e2:fd:f7:d1:
                    ef:4f:c4:8b:78:67:90:d4:19:21:95:5e:9d:dd:00:
                    e0:da:f8:e6:39:dd:d8:9b:3f:8f:62:a7:e7:80:02:
                    e6:57:4c:02:73:5a:5f:25:95:be:2c:9e:11:a4:b9:
                    57:ed:11:25:93:2e:45:28:6c:4c:0b:e0:9e:22:29:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:31:3B:CA:97:1F:A5:4F:2F:68:B9:CF:6D:CB:2C:14:54:8C:AA:83
            X509v3 Authority Key Identifier:
                keyid:F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/F37624DFD975EAF07625C6087B663470695A2CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36322e302f32342d3234203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:a0:5f:88:dd:2b:19:56:86:7b:7a:f9:d1:29:48:47:c4:
         86:e4:01:20:61:e2:30:17:f6:b7:0a:e4:70:8a:e9:7a:82:98:
         4b:58:b2:d7:ad:30:5b:d4:da:75:d8:96:8c:3c:10:91:dd:62:
         1e:9a:96:54:e2:49:ec:fc:e5:e2:d0:f9:7e:ad:05:7b:a7:f5:
         b6:09:48:4e:e0:47:23:4d:55:b6:74:b2:24:84:1f:af:88:39:
         12:49:a1:a1:93:6f:7a:65:14:5e:84:75:31:ba:fe:be:3d:d3:
         9d:f6:3f:75:11:dc:fe:08:dc:c5:fd:ee:c0:73:d6:cd:c7:46:
         de:5d:33:64:82:9b:84:f2:ba:79:0f:28:08:5b:c2:8e:fa:7a:
         c3:d7:10:15:25:9e:32:35:da:32:0c:8e:83:bc:7a:d1:84:c0:
         17:f4:14:c1:2c:10:eb:a4:3f:69:06:4f:87:e3:20:d6:2e:ae:
         d3:ef:21:46:ab:34:fb:d7:1e:be:e3:a5:20:59:a9:c1:c0:db:
         5b:58:5c:ed:73:44:91:17:33:b0:8e:1e:7f:be:d9:64:e7:e7:
         d2:2a:a9:50:b5:48:de:b3:53:1d:5f:ea:28:a7:b4:3c:6c:bd:
         a6:65:e9:55:74:50:21:66:4e:ce:7e:1e:f8:b6:27:0a:d7:10:
         1d:f1:d8:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW2U6b1gd/ROJ890/wDV9xxtDI8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM3NjI0REZEOTc1RUFGMDc2MjVDNjA4N0I2NjM0NzA2
OTVBMkNCNDAeFw0yMzA1MzEwMjI3MzdaFw0yNDA1MjkwMjMyMzdaMDMxMTAvBgNV
BAMTKDNBMzEzQkNBOTcxRkE1NEYyRjY4QjlDRjZEQ0IyQzE0NTQ4Q0FBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//QBCUT86ytjdnAL0ymci+fFO
qDRat2tJcQyk/Vz+yKXGaN7+/d/pdE8zls9/6WGmt4ueG0rBVQ1/89GKrmHXbQd1
XO+Hc4s7ysVjsaO4uW1y22ohpTX5mlOPbYU39/YvLuo0fh7qWPJyyxS0nhtgV1Lz
sqp6kGcVhs9WV2vsJ8N54Gt1Wq5fGCM2VAIdZotloV0F4RPc0nTlyv5kVlV0OWdx
4AZoDy/ih5/S0xwPcWuLB8hX2ps1leocJNWg4v330e9PxIt4Z5DUGSGVXp3dAODa
+OY53dibP49ip+eAAuZXTAJzWl8llb4snhGkuVftESWTLkUobEwL4J4iKVpTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOjE7ypcfpU8vaLnPbcssFFSMqoMwHwYDVR0j
BBgwFoAU83Yk39l16vB2JcYIe2Y0cGlaLLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMS9GMzc2MjRERkQ5NzVFQUYwNzYyNUM2MDg3QjY2MzQ3MDY5NUEyQ0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzNzYyNERGRDk3NUVBRjA3
NjI1QzYwODdCNjYzNDcwNjk1QTJDQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzEv
MzEzNzMwMmUzNzM4MmUzNjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk4+MA0GCSqGSIb3DQEBCwUAA4IBAQCMeKBfiN0r
GVaGe3r50SlIR8SG5AEgYeIwF/a3CuRwiul6gphLWLLXrTBb1Np12JaMPBCR3WIe
mpZU4kns/OXi0Pl+rQV7p/W2CUhO4EcjTVW2dLIkhB+viDkSSaGhk296ZRRehHUx
uv6+PdOd9j91Edz+CNzF/e7Ac9bNx0beXTNkgpuE8rp5DygIW8KO+nrD1xAVJZ4y
NdoyDI6DvHrRhMAX9BTBLBDrpD9pBk+H4yDWLq7T7yFGqzT71x6+46UgWanBwNtb
WFztc0SRFzOwjh5/vtlk5+fSKqlQtUjes1MdX+oop7Q8bL2mZelVdFAhZk7Ofh74
ticK1xAd8dig
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org