Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e37382e3139382e302f32332d3234203d3e203238333433.roa
File:                     3137302e37382e3139382e302f32332d3234203d3e203238333433.roa (raw, json)
Hash identifier:          tr5eFOzX2655of79JK/cE/KabOEeK/CgSq8zO0lnDW8=
Subject key identifier:   DF:1E:F4:9A:D2:4E:F8:EC:95:55:A5:5F:0E:40:9E:77:ED:EA:DE:A0
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3C4EF8264635AE3CA6420FFC1DDE5A6B68163FA0
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e37382e3139382e302f32332d3234203d3e203238333433.roa
Signing time:             Tue 07 Feb 2023 13:07:57 +0000
ROA not before:           Tue 07 Feb 2023 13:02:57 +0000
ROA not after:            Tue 06 Feb 2024 13:07:57 +0000
asID:                     28343
IP address blocks:        170.78.198.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4e:f8:26:46:35:ae:3c:a6:42:0f:fc:1d:de:5a:6b:68:16:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Feb  7 13:02:57 2023 GMT
            Not After : Feb  6 13:07:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:7d:de:3c:95:17:dd:e9:6a:8d:9f:1d:21:
                    fc:a6:8a:87:a9:87:ab:d8:11:07:30:08:e0:ec:6e:
                    52:92:8c:4c:45:ad:5e:3f:7a:3a:99:91:fb:5a:03:
                    2f:ff:50:b6:9d:ca:2e:2e:5f:f5:da:b0:d8:17:4a:
                    7f:0f:1d:75:72:bd:f6:a0:1c:88:14:81:38:81:3c:
                    38:6d:8c:70:1a:75:0b:1e:47:b2:c4:dc:03:43:71:
                    b0:58:4b:5c:7b:d7:49:ca:bb:32:ba:39:9a:ed:a0:
                    e5:f3:2a:e4:1d:fd:9c:99:18:fc:39:5a:0d:8c:ac:
                    a4:20:9d:f3:e5:09:77:c2:97:a3:36:5d:ac:23:de:
                    1c:10:ae:ac:61:e7:22:3c:d5:46:af:7e:28:cd:70:
                    25:90:32:8f:fc:3c:9d:31:22:9d:bb:b6:7b:60:ac:
                    8e:c7:76:e7:f8:5e:c9:eb:47:f3:d3:74:20:f6:6c:
                    ac:21:13:0c:73:ad:1e:30:79:1b:33:6b:09:14:70:
                    fb:7d:3b:d4:a3:96:ab:d3:4d:c7:18:1b:13:97:09:
                    31:37:e0:43:66:64:a7:f0:93:14:34:5e:2d:74:01:
                    e4:e3:85:ee:d2:bd:d4:cb:e6:06:c9:bb:c7:ec:b2:
                    80:f8:51:e3:87:1c:d8:3b:cc:09:44:00:8a:81:e6:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:F4:9A:D2:4E:F8:EC:95:55:A5:5F:0E:40:9E:77:ED:EA:DE:A0
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137302e37382e3139382e302f32332d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:d2:9a:fe:17:d4:c4:f0:d4:7c:47:ce:ae:2f:d3:d9:d2:
         d5:b2:df:07:36:a0:4b:c6:0e:51:48:7b:23:10:da:5d:54:b0:
         0d:0d:bf:30:ed:9d:36:31:dc:65:50:da:a0:e9:e4:06:47:86:
         38:60:e9:67:18:16:85:48:e6:24:8b:26:49:5f:f2:ba:aa:45:
         84:62:67:3e:e7:76:bb:52:1c:d0:8c:b2:cf:8c:89:6d:a3:d0:
         81:90:69:47:c5:ca:1b:ad:af:0d:4b:f8:d5:c2:2a:6c:4c:ba:
         a7:65:1c:62:26:ee:9d:13:ec:12:4a:5b:b1:95:77:66:ef:a8:
         bc:dc:34:94:02:02:2d:43:b8:de:de:f6:df:9f:90:2d:02:d4:
         d5:0f:b1:e5:2a:bf:7d:b8:3f:d4:e7:d7:5a:27:99:fb:39:73:
         f0:3b:c4:0b:25:37:7c:23:0b:1c:f2:1a:0a:b9:38:9e:66:92:
         de:bc:29:64:8a:00:5f:61:cd:7d:24:72:43:11:cb:67:d2:a4:
         cc:c7:c7:67:bc:90:9a:fe:94:2c:9a:c6:ac:2d:3a:ae:f9:76:
         60:5c:44:88:4c:d2:39:3f:cd:d7:ee:eb:76:4a:82:af:a2:09:
         be:cf:34:52:5a:10:93:a9:0f:ae:7f:52:7e:ba:6f:e8:cb:c7:
         37:7a:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org