Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234352e302f32342d3234203d3e20323633333338.roa
File:                     3137302e37382e3234352e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          OefH0XXd6NpzT8EoG6frIzPOZX28ThyXvfDi6wuF4eQ=
Subject key identifier:   8B:1D:21:A9:04:DC:2D:6E:59:81:81:6B:4A:A2:A5:0E:8F:F5:ED:BD
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       60556C778EB60D3C6A506B6E70591C983112E22A
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234352e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        170.78.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:55:6c:77:8e:b6:0d:3c:6a:50:6b:6e:70:59:1c:98:31:12:e2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:63:54:43:4b:b8:25:c6:58:dc:27:83:4c:
                    83:e3:41:f2:e3:db:00:39:5b:1c:8f:6a:22:42:13:
                    1e:3f:4e:7c:6c:b5:fe:9b:2a:14:b6:d9:f0:b8:c8:
                    40:7c:5e:9f:c0:fe:ba:88:96:f9:94:95:7f:2e:7c:
                    c9:32:b9:69:b6:31:d2:2e:6d:29:21:ca:71:67:15:
                    2f:7f:14:17:8b:1d:78:63:95:73:41:6f:3a:4b:11:
                    5b:9b:1c:95:cc:cb:ea:37:a5:63:ab:8d:dc:6c:bf:
                    2a:51:7b:81:a7:1a:4b:f5:71:0b:f9:9f:d8:78:df:
                    75:c0:74:c9:54:99:0a:b9:7a:f8:1a:b0:e3:f1:d2:
                    ec:24:f4:e2:4a:51:66:3c:90:02:2a:f6:0a:76:9d:
                    4a:08:21:8f:b0:28:eb:06:3d:69:bf:03:41:f4:42:
                    0b:f0:13:27:e3:90:d3:b3:89:75:9c:85:eb:4e:9e:
                    09:d4:07:1b:58:16:88:39:39:6c:b3:56:e6:be:01:
                    3f:c5:11:8f:3c:6c:bb:a2:b8:bb:94:b3:eb:1b:9b:
                    a1:9d:be:78:65:5f:5e:a1:4b:aa:4a:3e:c9:20:7f:
                    63:c3:da:67:e6:63:47:be:16:fc:be:9c:7e:7e:2b:
                    01:82:60:e2:12:a7:c6:e3:8d:c8:63:4c:a0:fb:84:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:21:A9:04:DC:2D:6E:59:81:81:6B:4A:A2:A5:0E:8F:F5:ED:BD
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234352e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:c5:61:31:28:b6:73:39:47:35:9e:0f:a3:0a:cf:54:99:50:
         54:6d:20:ae:f6:8b:17:e4:2f:e1:14:27:fe:5c:f4:01:ee:94:
         7b:a6:c2:df:c4:3e:c2:a7:d7:d6:53:d6:08:54:8f:65:66:27:
         01:c3:9f:7e:69:52:f3:f7:0f:3f:d9:d0:3c:4f:ee:2c:8f:59:
         dc:09:c1:41:66:4e:d3:44:02:de:93:66:70:da:0c:e1:51:ca:
         cb:c0:5a:cf:d7:46:07:a7:36:6b:6e:55:c6:ab:57:00:37:0d:
         64:4f:ad:3e:cd:f4:8c:41:67:80:b8:59:2c:b1:4a:e3:72:4f:
         74:08:65:c8:29:b1:6b:f7:88:14:58:53:7d:2d:5e:ec:f4:0d:
         43:6f:af:bc:08:fa:aa:d4:89:91:7b:fb:6b:60:86:f3:7f:99:
         4b:bb:8d:73:ce:3f:04:82:b9:d6:73:83:30:6c:ed:ba:a8:ba:
         0f:49:5c:5b:58:99:6b:53:c2:8d:52:9f:40:55:af:1e:b1:8b:
         78:b3:ff:a1:26:2a:f6:00:d0:5e:f2:60:29:ed:35:c2:16:1b:
         ae:23:f8:60:cf:b3:d3:2c:1e:a0:2a:2b:b5:17:5d:94:b2:a1:
         03:d7:51:86:e5:2c:32:ff:a5:29:7f:ad:60:61:d4:0e:d2:8b:
         69:34:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org