Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa
File:                     3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa (raw, json)
Hash identifier:          BLkbVaqu14JQyxetjJReJ7DP3uyoq9B5yskRzXjeAZA=
Subject key identifier:   BA:04:DE:81:B0:8B:0D:4C:41:33:2B:BE:D4:3D:AD:5D:0F:6A:9B:DD
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       1F0E85A95C8A9CB48345B36287A070A605EB7267
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        170.78.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:85:a9:5c:8a:9c:b4:83:45:b3:62:87:a0:70:a6:05:eb:72:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:42:b3:e5:83:d8:6d:e4:48:11:f2:e9:b3:
                    d7:6d:65:7f:e9:07:78:9c:7d:6a:da:4c:bb:bf:1f:
                    86:f8:98:45:da:7b:22:41:ab:38:1f:a8:4c:d4:98:
                    c2:81:54:7f:83:6f:9b:42:a6:86:41:2b:ce:a0:12:
                    2c:ea:46:45:63:92:d6:75:98:00:16:32:95:4a:e5:
                    26:08:6e:00:3a:44:b4:ea:fc:7c:d3:2b:f4:6d:93:
                    db:b3:31:8e:1e:18:93:db:74:07:06:8c:07:ed:b6:
                    0b:3c:51:b2:93:b3:90:38:46:27:4a:e3:9f:8c:f9:
                    5e:60:bf:0e:94:28:c2:1e:a8:50:cd:d9:61:3d:c5:
                    b6:5e:ef:a8:4c:38:52:b6:d4:7f:1d:32:6f:09:f0:
                    f5:2c:90:8e:01:60:3b:2c:a8:05:40:7e:54:72:6b:
                    e3:a3:21:72:b7:7d:9d:1b:d1:da:74:3c:97:e0:0d:
                    ea:48:9d:56:9d:48:4d:a6:b1:fe:14:0a:18:74:e9:
                    0c:a7:3d:73:33:61:4d:dc:cb:0e:19:14:a3:24:70:
                    6a:10:8f:48:49:07:d2:8c:02:c2:2f:af:68:84:d0:
                    45:62:5b:5d:54:34:54:ed:95:c2:f4:2b:9b:18:af:
                    be:da:ac:30:ea:0d:fc:ca:48:33:79:1b:73:23:29:
                    f0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:DE:81:B0:8B:0D:4C:41:33:2B:BE:D4:3D:AD:5D:0F:6A:9B:DD
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:df:97:4f:4d:47:7d:90:eb:97:c5:9a:a4:e7:18:e6:3f:40:
         81:cf:e1:48:42:1e:2d:12:0e:e4:5f:8c:f4:49:69:45:1f:19:
         79:65:34:53:2c:c4:ac:f4:82:06:34:d4:27:11:5a:a1:ec:a9:
         b6:07:8d:54:f4:c3:db:28:c6:b3:95:85:70:52:6a:17:43:17:
         75:1a:d4:6a:44:03:6f:0d:4b:f0:bb:ad:2b:17:ca:54:db:f8:
         b1:2c:cd:7d:1f:d6:73:03:43:43:91:8f:c8:5f:67:dc:fe:c2:
         41:d8:21:bc:0f:d9:a6:df:76:16:7c:75:b1:d4:52:c4:3d:74:
         9f:a1:25:c3:4c:ae:09:bf:dc:3c:f3:4a:bb:06:29:08:5e:6a:
         5e:d9:53:8e:54:d0:03:49:9f:ea:39:d4:b6:5f:ac:e6:3f:07:
         7d:20:c0:bd:ef:ea:d5:de:a9:af:3d:d6:4f:18:5c:9e:09:db:
         ce:89:ac:a5:7a:09:8f:a2:0a:90:fa:96:44:ae:7e:33:70:e4:
         ac:94:4f:ee:05:98:ec:8c:c1:5e:50:90:21:58:8a:13:99:18:
         88:75:c6:ae:74:6d:3c:55:95:2e:2b:75:40:ff:51:83:23:2a:
         34:a9:85:55:58:e0:c4:59:a5:09:ec:5f:d8:75:37:c2:b5:fa:
         ff:70:71:da
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHw6FqVyKnLSDRbNih6BwpgXrcmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEQUFEMzJBQUI5NEZDNDBBMTg0MzdGN0Y0NTJCRjMw
NjlCMzdBODAeFw0yNDA0MTYxMTM2NDdaFw0yNTA0MTUxMTQxNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0I1NDQyQjNFNTgzRDg2REU0
NDgxMUYyRTlCM0Q3NkQ2NTdGRTkwNzc4OUM3RDZBREE0Q0JCQkYxRjg2Rjg5ODQ1
REE3QjIyNDFBQjM4MUZBODRDRDQ5OEMyODE1NDdGODM2RjlCNDJBNjg2NDEyQkNF
QTAxMjJDRUE0NjQ1NjM5MkQ2NzU5ODAwMTYzMjk1NEFFNTI2MDg2RTAwM0E0NEI0
RUFGQzdDRDMyQkY0NkQ5M0RCQjMzMThFMUUxODkzREI3NDA3MDY4QzA3RURCNjBC
M0M1MUIyOTNCMzkwMzg0NjI3NEFFMzlGOENGOTVFNjBCRjBFOTQyOEMyMUVBODUw
Q0REOTYxM0RDNUI2NUVFRkE4NEMzODUyQjZENDdGMUQzMjZGMDlGMEY1MkM5MDhF
MDE2MDNCMkNBODA1NDA3RTU0NzI2QkUzQTMyMTcyQjc3RDlEMUJEMURBNzQzQzk3
RTAwREVBNDg5RDU2OUQ0ODREQTZCMUZFMTQwQTE4NzRFOTBDQTczRDczMzM2MTRE
RENDQjBFMTkxNEEzMjQ3MDZBMTA4RjQ4NDkwN0QyOEMwMkMyMkZBRjY4ODREMDQ1
NjI1QjVENTQzNDU0RUQ5NUMyRjQyQjlCMThBRkJFREFBQzMwRUEwREZDQ0E0ODMz
NzkxQjczMjMyOUYwNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy1RCs+WD2G3kSBHy6bPXbWV/6Qd4nH1q2ky7vx+G+JhF2nsiQas4
H6hM1JjCgVR/g2+bQqaGQSvOoBIs6kZFY5LWdZgAFjKVSuUmCG4AOkS06vx80yv0
bZPbszGOHhiT23QHBowH7bYLPFGyk7OQOEYnSuOfjPleYL8OlCjCHqhQzdlhPcW2
Xu+oTDhSttR/HTJvCfD1LJCOAWA7LKgFQH5UcmvjoyFyt32dG9HadDyX4A3qSJ1W
nUhNprH+FAoYdOkMpz1zM2FN3MsOGRSjJHBqEI9ISQfSjALCL69ohNBFYltdVDRU
7ZXC9CubGK++2qww6g38ykgzeRtzIynwSwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLoE3oGwiw1MQTMrvtQ9rV0PapvdMB8GA1UdIwQYMBaAFLbarTKquU/EChhDf39F
K/MGmzeoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F2cDl3OGdoWWNiVmVE
ZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzEvQjZEQUFEMzJBQUI5NEZD
NDBBMTg0MzdGN0Y0NTJCRjMwNjlCMzdBOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNkRBQUQzMkFBQjk0RkM0MEExODQzN0Y3RjQ1MkJGMzA2OUIz
N0E4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdnA5dzhnaFljYlZlRGVmdk1E
Q0NoYllUR29lcHVYRW5rWU1xZVFaUDFQRC8xLzMxMzczMDJlMzczODJlMzIzNDM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzMzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qk70MA0GCSqGSIb3DQEBCwUAA4IBAQC+35dPTUd9kOuXxZqk5xjmP0CBz+FIQh4t
Eg7kX4z0SWlFHxl5ZTRTLMSs9IIGNNQnEVqh7Km2B41U9MPbKMazlYVwUmoXQxd1
GtRqRANvDUvwu60rF8pU2/ixLM19H9ZzA0NDkY/IX2fc/sJB2CG8D9mm33YWfHWx
1FLEPXSfoSXDTK4Jv9w880q7BikIXmpe2VOOVNADSZ/qOdS2X6zmPwd9IMC97+rV
3qmvPdZPGFyeCdvOiaylegmPogqQ+pZErn4zcOSslE/uBZjsjMFeUJAhWIoTmRiI
dcaudG08VZUuK3VA/1GDIyo0qYVVWODEWaUJ7F/YdTfCtfr/cHHa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org