Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa
File:                     3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          u2nmQf+0Y4H6LGbarSAZsGw00Z0U5LWeqZNWvGRSWDY=
Subject key identifier:   A7:68:0E:3F:E7:20:11:8D:79:12:24:CD:CA:7E:2C:58:1D:32:C9:FA
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       05A8CAD517376479D5778DC252222254C84732A4
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        170.78.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a8:ca:d5:17:37:64:79:d5:77:8d:c2:52:22:22:54:c8:47:32:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:59:59:9c:e5:e0:28:19:1b:92:5f:11:4e:
                    59:ef:4e:ef:98:86:0b:93:c4:31:63:05:d3:4b:c4:
                    1e:bb:d9:85:f8:a0:7e:1e:3b:e1:d4:33:5d:5b:88:
                    e5:4c:5f:d2:12:55:c8:5c:de:16:78:a8:e6:8c:a6:
                    c2:7d:01:a9:cd:3b:3e:11:7c:53:02:88:37:2e:32:
                    6b:4e:78:a3:fb:02:53:82:07:4e:d2:35:89:41:62:
                    09:73:62:f7:f1:3d:4a:ca:91:54:ff:11:42:66:85:
                    14:e3:b3:0e:b4:16:fd:ca:d2:b4:ce:19:56:e8:bc:
                    e2:1f:fc:8a:28:b6:4b:d5:61:7e:ed:ea:d1:a8:62:
                    23:17:8b:2e:56:f9:82:f7:65:22:1f:46:fd:d5:08:
                    e6:c2:f6:f8:19:1d:b4:4c:cf:a4:70:c6:46:e7:dc:
                    d9:51:1f:78:34:94:4c:05:82:27:06:d9:d1:38:cb:
                    56:36:65:60:bc:7e:b4:d4:d8:19:7c:84:10:db:86:
                    f6:1a:f3:4a:77:e9:16:51:01:5e:33:07:fb:5c:b9:
                    4b:33:cd:37:cf:b8:6d:9b:a9:a5:53:70:d0:28:03:
                    44:21:e9:5e:47:b8:87:89:53:95:ac:2d:e6:0e:c0:
                    10:cc:d9:92:85:e9:2d:46:f1:de:dc:b5:a2:68:f0:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:0E:3F:E7:20:11:8D:79:12:24:CD:CA:7E:2C:58:1D:32:C9:FA
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d7:d0:0c:05:cd:6e:25:19:ec:92:f9:a7:6f:b8:ce:44:f8:
         9d:73:8d:d4:c3:b1:51:06:5c:14:b8:22:54:da:e9:89:f8:4d:
         cb:32:3f:4c:5d:42:af:b4:99:9f:26:97:02:fe:78:ae:36:95:
         b4:1e:61:8d:45:c0:d1:66:30:06:90:4a:23:af:96:32:dd:ff:
         ff:ad:2e:1e:ed:4f:ad:fc:de:57:64:00:4b:fb:75:05:ac:a8:
         ed:ba:ae:5a:3b:9b:1c:a3:ec:78:48:77:33:de:d6:6f:eb:0e:
         0e:1b:1d:42:cf:1c:5f:89:30:77:83:e0:1e:39:f9:f9:23:2d:
         c8:bd:be:54:95:5b:2a:30:98:88:b8:35:a8:1e:63:be:33:a2:
         b9:5d:0c:07:b6:4a:07:56:76:05:01:7e:7e:cc:96:23:90:60:
         15:20:7c:b3:62:dc:7f:6b:93:27:e3:0a:3d:84:c2:ee:dd:4a:
         32:a4:c8:41:b6:a9:55:dc:8f:f5:c8:f1:17:43:1c:63:23:35:
         f7:5e:05:7d:15:fd:41:d6:b8:20:ba:00:fc:ac:2d:e9:3e:5a:
         27:9d:5b:21:96:64:b4:8d:5b:a3:da:f0:f6:d9:7d:20:2d:bb:
         84:a7:5d:3e:02:d8:a3:5d:92:29:24:48:bc:5f:81:f5:b8:20:
         19:d5:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org