Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0/3137302e37382e3230342e302f32322d3234203d3e203238323430.roa
File:                     3137302e37382e3230342e302f32322d3234203d3e203238323430.roa (raw, json)
Hash identifier:          pFg4OfwkVcLZbEfELWEwkIVxFuZgrgG0gNwziA+rydQ=
Subject key identifier:   1D:92:F1:D7:A3:CA:82:B6:DC:FD:30:1F:62:AE:FC:1D:B2:2D:30:CE
Certificate issuer:       /CN=478793E5899D008F156F8F358BEBE07B8161103C
Certificate serial:       0A2E0D0A16E1D9819ACC888A5478F876BC794FAC
Authority key identifier: 47:87:93:E5:89:9D:00:8F:15:6F:8F:35:8B:EB:E0:7B:81:61:10:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/478793E5899D008F156F8F358BEBE07B8161103C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0/3137302e37382e3230342e302f32322d3234203d3e203238323430.roa
Signing time:             Wed 18 Oct 2023 19:38:38 +0000
ROA not before:           Wed 18 Oct 2023 19:33:38 +0000
ROA not after:            Wed 16 Oct 2024 19:38:38 +0000
asID:                     28240
IP address blocks:        170.78.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2e:0d:0a:16:e1:d9:81:9a:cc:88:8a:54:78:f8:76:bc:79:4f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478793E5899D008F156F8F358BEBE07B8161103C
        Validity
            Not Before: Oct 18 19:33:38 2023 GMT
            Not After : Oct 16 19:38:38 2024 GMT
        Subject: CN=1D92F1D7A3CA82B6DCFD301F62AEFC1DB22D30CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a8:82:04:f1:0b:ff:6e:8b:fd:40:ad:24:24:
                    cd:81:78:ab:8f:b5:9c:e8:09:aa:e6:5a:e2:b3:35:
                    89:64:9a:c5:f0:e4:23:16:c0:29:80:6f:25:eb:86:
                    d4:98:1b:89:f1:20:97:d8:36:8d:63:ad:95:ad:76:
                    6f:8c:a9:d7:6a:bf:61:79:7c:c7:b4:0c:c0:ce:35:
                    86:cd:32:f9:7d:f1:35:1c:c2:d1:70:f3:1b:c9:d7:
                    22:e0:b8:8b:3e:8c:25:72:9f:80:0a:f2:ab:fe:e3:
                    96:bd:ff:a2:81:b8:e4:05:e5:75:1b:09:51:31:53:
                    4f:90:e5:4c:71:13:6f:a8:3b:c8:50:cb:7b:49:56:
                    81:a2:d6:ed:cf:a5:4f:0a:70:18:36:40:bc:9d:db:
                    27:4f:be:6e:ed:43:67:91:05:fc:f6:48:4b:cf:92:
                    8c:32:e1:4d:a5:58:55:c1:7b:91:be:01:05:9f:d1:
                    e6:f5:7c:d0:23:70:42:c1:41:70:55:d5:da:8e:ee:
                    f6:93:ab:73:5f:bd:b9:c1:0b:f2:8e:d4:0c:6b:ca:
                    d5:d5:a9:67:7a:f2:62:b8:6e:bb:f2:bb:c4:19:3c:
                    3e:0a:f8:87:9d:47:76:6e:11:66:ef:54:e5:6c:c0:
                    0b:7c:67:2f:04:9e:7e:ee:00:40:c8:ab:91:69:fc:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:92:F1:D7:A3:CA:82:B6:DC:FD:30:1F:62:AE:FC:1D:B2:2D:30:CE
            X509v3 Authority Key Identifier:
                keyid:47:87:93:E5:89:9D:00:8F:15:6F:8F:35:8B:EB:E0:7B:81:61:10:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0/478793E5899D008F156F8F358BEBE07B8161103C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/478793E5899D008F156F8F358BEBE07B8161103C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/0/3137302e37382e3230342e302f32322d3234203d3e203238323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:16:08:28:37:87:84:19:99:fe:65:c9:db:6c:5c:e4:90:89:
         30:7c:5b:47:c1:02:94:d4:65:10:bf:58:c9:b4:31:27:d4:9e:
         88:24:0d:56:76:65:8f:eb:eb:5e:81:b9:d5:dd:ac:bb:53:28:
         70:d5:71:ad:ea:77:69:ed:a5:66:33:02:8f:69:25:8f:aa:0e:
         53:7b:b1:3c:b8:2e:ed:86:57:64:94:1d:0e:18:b1:67:f9:57:
         65:f7:c5:6f:8f:c0:43:be:4e:86:a2:0d:be:d3:5e:1d:f1:7f:
         61:ab:a4:d9:d0:63:96:6b:c3:f2:11:d9:f1:93:90:d6:9d:f9:
         d7:b6:ab:5c:97:3f:79:b2:51:46:fd:8b:2d:84:e2:c5:15:72:
         22:78:73:3b:63:7a:24:e2:a3:20:78:33:bf:52:08:b0:3f:3f:
         30:fb:f5:18:0f:6c:25:65:45:19:e8:15:4b:eb:49:b5:e8:f6:
         68:de:fc:d5:af:87:62:59:80:f6:02:2b:85:05:4c:ed:22:26:
         45:78:e1:aa:8f:58:e4:50:ae:3a:e0:c6:2f:3d:a5:0c:b5:65:
         57:c0:33:a8:33:35:ef:4d:da:89:73:36:6f:d5:1a:62:31:29:
         59:38:d4:12:05:ab:39:e0:cc:72:5e:82:d9:a7:74:8e:32:cb:
         68:34:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org