Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa
File:                     3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (raw, json)
Hash identifier:          HIQjC2HKKGtLxH9LJe88zqni/FPVKQGvlnqTZaQvkds=
Subject key identifier:   42:91:F7:17:86:F1:A3:FB:73:AD:01:DE:A7:CE:74:91:37:0C:A8:F1
Certificate issuer:       /CN=CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA
Certificate serial:       02FD21511B92EE37B2ED9D620F77608FD4297D43
Authority key identifier: CB:E8:F1:86:E0:D7:13:EF:4A:7B:4D:D8:DF:C1:B3:B1:C1:4C:57:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa
Signing time:             Fri 05 Apr 2024 04:15:13 +0000
ROA not before:           Fri 05 Apr 2024 04:10:13 +0000
ROA not after:            Fri 04 Apr 2025 04:15:13 +0000
asID:                     266280
IP address blocks:        170.78.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fd:21:51:1b:92:ee:37:b2:ed:9d:62:0f:77:60:8f:d4:29:7d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA
        Validity
            Not Before: Apr  5 04:10:13 2024 GMT
            Not After : Apr  4 04:15:13 2025 GMT
        Subject: CN=4291F71786F1A3FB73AD01DEA7CE7491370CA8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:5e:a4:09:a9:ad:ca:14:6a:49:2c:86:4f:
                    d7:08:9e:7a:91:bf:e5:4a:39:eb:4c:c1:d4:6e:dd:
                    a7:cd:a8:06:7b:87:e9:9c:03:88:a5:d8:70:f3:20:
                    c7:e2:28:57:cf:25:4b:54:f0:57:8e:ff:e2:bd:1f:
                    88:ed:92:f7:ca:10:14:9d:8c:b3:d7:e6:49:ad:0b:
                    b0:5a:c8:4b:2a:aa:9e:d9:85:e3:07:3d:e9:93:ab:
                    6b:7d:10:be:00:65:a5:88:75:d6:33:0b:c5:ce:b9:
                    a5:01:33:1b:f7:5c:3f:40:1a:42:c8:57:23:83:4c:
                    b4:89:d3:64:fa:6a:44:94:67:5e:f0:51:32:49:b3:
                    7d:83:0b:a7:d8:07:e3:50:db:48:74:36:a8:a1:87:
                    d3:c7:53:61:bd:d0:04:9f:52:cb:7e:64:42:e1:c4:
                    d3:e1:d0:93:62:35:1c:97:d1:a1:97:9f:10:a5:0a:
                    1b:4c:d7:2f:d0:90:bf:33:3f:d2:c2:02:43:d8:c2:
                    20:43:00:ca:6e:41:ae:db:4f:ae:1a:50:81:69:70:
                    8c:39:1b:6e:64:bc:42:5e:c5:bb:cb:7f:71:45:49:
                    4c:62:2f:3b:3a:12:7b:2a:d8:7f:07:60:08:d7:b2:
                    c9:40:27:57:d1:fd:e4:84:50:c0:41:bc:63:0a:4c:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:F7:17:86:F1:A3:FB:73:AD:01:DE:A7:CE:74:91:37:0C:A8:F1
            X509v3 Authority Key Identifier:
                keyid:CB:E8:F1:86:E0:D7:13:EF:4A:7B:4D:D8:DF:C1:B3:B1:C1:4C:57:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:06:c1:22:8e:0c:19:9d:de:d3:21:a8:64:30:e1:12:4b:
         78:db:de:da:74:3b:c3:01:36:c8:f7:c7:f6:e9:71:ce:c9:9f:
         4f:89:4e:7a:34:b7:91:8b:aa:41:67:c7:b1:7c:30:5d:d7:1e:
         11:ef:7f:04:35:35:e5:b5:fb:ff:08:56:56:12:9c:08:de:d7:
         41:bf:f4:a3:99:ce:5f:1d:5c:30:07:7f:8a:c2:97:ec:ce:5a:
         e0:58:20:d2:8c:ed:6e:2c:9b:06:d5:60:4d:92:11:fc:1c:30:
         72:01:2f:a0:16:89:2d:0b:f0:92:72:5b:ab:a7:9e:47:6e:af:
         e5:75:a3:27:07:6e:83:63:07:cb:7d:1b:35:22:58:2e:4e:71:
         90:48:69:d9:fe:34:12:8f:00:15:87:ce:7f:79:f9:b0:01:69:
         1d:b9:c4:f0:ac:69:41:d8:80:03:0a:3a:65:e0:7d:be:34:54:
         6c:18:b1:83:3d:c0:a3:b5:34:0e:6f:71:e6:9c:a7:07:ec:cf:
         f5:a1:7c:9e:cb:74:13:27:9c:ba:5b:4f:21:35:16:0a:c2:06:
         cd:72:04:56:03:2f:b6:e9:08:c5:0f:4a:c2:f9:cb:fd:fb:1b:
         36:5d:22:0a:db:b0:92:d0:e0:ef:1d:c0:e9:33:ab:67:40:3b:
         a7:db:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org