Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36332e302f32342d3234203d3e20323635343936.roa
File:                     3137302e37382e36332e302f32342d3234203d3e20323635343936.roa (raw, json)
Hash identifier:          bEDVLsBezj4FhIVpOLfcirj6xkolNR/HvxbHnUKz1cE=
Subject key identifier:   EC:23:A3:D8:70:0F:93:49:9D:A2:78:6F:BE:35:A4:E2:06:0C:E8:1C
Certificate issuer:       /CN=F37624DFD975EAF07625C6087B663470695A2CB4
Certificate serial:       60E773F8FFF232485326BB8ABB465D9C923B9C2A
Authority key identifier: F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36332e302f32342d3234203d3e20323635343936.roa
Signing time:             Wed 31 May 2023 02:32:37 +0000
ROA not before:           Wed 31 May 2023 02:27:37 +0000
ROA not after:            Wed 29 May 2024 02:32:37 +0000
asID:                     265496
IP address blocks:        170.78.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:73:f8:ff:f2:32:48:53:26:bb:8a:bb:46:5d:9c:92:3b:9c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F37624DFD975EAF07625C6087B663470695A2CB4
        Validity
            Not Before: May 31 02:27:37 2023 GMT
            Not After : May 29 02:32:37 2024 GMT
        Subject: CN=EC23A3D8700F93499DA2786FBE35A4E2060CE81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:41:6e:67:5e:e7:5b:80:70:81:e7:16:51:
                    7f:55:b5:b0:5e:3e:0c:7d:93:09:a8:8f:b8:9e:4b:
                    ac:e0:82:a1:f1:8d:9c:e1:17:f5:84:c3:64:4e:a8:
                    df:e4:09:11:cc:72:44:7d:50:e9:64:0e:5a:ef:1b:
                    06:df:5e:eb:ed:78:75:2c:21:c7:ab:26:1d:bc:4a:
                    ee:20:fa:c6:a7:03:08:5c:bd:37:99:d2:1d:83:0b:
                    24:1a:50:8e:bf:08:04:66:af:a1:87:62:97:97:f8:
                    a7:8d:3a:f7:7e:f6:b7:da:d7:93:77:e8:0f:1e:c1:
                    0f:6d:28:1c:e4:bc:82:e2:ac:f6:69:f0:a6:e1:54:
                    fa:03:eb:fb:08:51:39:f4:03:4c:a4:58:aa:9c:de:
                    cd:87:6e:e3:5e:06:de:3c:b8:41:ee:b4:1a:99:90:
                    21:a3:66:fc:67:b6:6c:b7:e0:fb:52:bc:50:ed:d0:
                    65:bb:8b:11:2f:6a:85:65:fa:58:4d:49:aa:b2:9f:
                    d9:97:28:79:71:87:9c:56:53:0b:91:9c:6a:63:07:
                    a6:03:64:20:e1:56:a6:58:82:70:c4:f7:71:0c:e4:
                    1f:55:ca:b5:1b:2a:30:db:6f:c7:b7:b3:06:02:13:
                    19:05:91:91:22:c7:85:76:a2:12:55:70:ee:6c:30:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:23:A3:D8:70:0F:93:49:9D:A2:78:6F:BE:35:A4:E2:06:0C:E8:1C
            X509v3 Authority Key Identifier:
                keyid:F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/F37624DFD975EAF07625C6087B663470695A2CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/3137302e37382e36332e302f32342d3234203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:da:77:a8:d8:5e:ca:56:8c:e2:65:d3:d3:39:54:e3:2d:
         68:92:96:7a:60:78:4d:c9:a2:2b:08:94:29:af:71:9a:02:48:
         d4:27:cf:a9:f4:b3:1d:2a:e6:68:11:69:48:8f:6e:ef:ec:ce:
         ca:6d:38:f8:17:0e:01:46:b1:1f:24:2b:7a:24:1e:78:e0:d8:
         a2:9d:6b:3f:a4:80:fa:13:d0:8d:85:ff:36:b5:64:66:bc:e7:
         61:bb:16:5a:cf:55:ce:c8:01:9d:80:4f:58:d4:2b:40:76:df:
         0a:d3:41:b7:ef:74:87:1e:5e:26:58:ed:0b:e8:e7:57:eb:e1:
         14:5a:93:b0:d3:7f:db:7a:75:10:98:bc:8b:19:3e:e3:a6:e8:
         f2:59:b6:87:03:7f:07:8f:2b:f9:5b:56:be:34:b1:7d:23:00:
         d3:9a:00:11:1c:bd:fe:89:2d:74:98:0c:d1:61:81:c2:82:84:
         ce:c7:18:23:7c:e5:2e:8f:b5:14:72:b0:20:3b:68:9c:73:a7:
         a6:c7:bb:28:3f:41:a6:c7:c2:41:5a:1d:2f:7d:28:9f:15:c7:
         50:8d:60:88:e3:82:c8:f2:53:7a:62:82:d3:88:7c:63:0e:14:
         a5:f5:30:8f:d8:c3:8a:8e:3c:ea:ea:e7:11:27:1d:99:c1:15:
         75:10:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org