Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa
File:                     3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa (raw, json)
Hash identifier:          SmzscyDOMazJIM02M89eN6MKTpGVyu5Tu2BI85rjCic=
Subject key identifier:   1A:E5:AD:61:17:09:81:89:09:01:7C:CB:0E:D8:F4:E0:81:C1:16:8E
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       456152CC64768FC4ACDFB1CAEFE8D07290EBF28A
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:48 +0000
ROA not before:           Tue 16 Apr 2024 11:36:48 +0000
ROA not after:            Tue 15 Apr 2025 11:41:48 +0000
asID:                     263338
IP address blocks:        170.78.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:61:52:cc:64:76:8f:c4:ac:df:b1:ca:ef:e8:d0:72:90:eb:f2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:48 2024 GMT
            Not After : Apr 15 11:41:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:43:00:84:60:09:87:f9:04:51:29:3a:67:
                    77:55:1b:c9:56:fa:09:05:60:bb:81:61:5c:be:f2:
                    e8:0f:14:15:89:3b:86:17:d9:64:a7:31:b4:e9:d1:
                    df:6b:d2:05:31:a2:f2:2a:79:06:2e:0c:5f:a2:25:
                    ea:3a:d4:54:ce:00:67:b6:8b:c4:f3:c7:31:3f:53:
                    2b:88:bc:52:3e:36:cf:13:4d:56:47:08:1b:e3:1b:
                    ea:4d:48:ed:c3:79:ec:9c:5d:7a:64:e1:b9:42:ac:
                    1c:0a:80:95:9a:9c:59:ad:01:6b:d8:ff:b8:4c:06:
                    96:ad:f9:b1:48:68:96:fb:24:c3:d4:46:71:c6:84:
                    70:77:64:73:1f:30:37:9b:a7:4d:71:ed:25:14:93:
                    3a:e9:46:bb:4a:34:53:ce:51:ee:e3:c9:17:4b:9b:
                    2c:bd:a7:de:eb:23:4a:e2:ad:c6:4d:f1:91:7e:f3:
                    95:b2:26:95:97:2a:09:88:e1:09:f0:d5:82:ab:f3:
                    f7:03:8f:da:e1:72:ff:01:da:88:ef:98:3a:52:12:
                    93:8b:8d:84:fa:b9:f5:3b:c9:dd:54:26:cd:04:7a:
                    1f:7a:38:91:8e:ac:7f:e5:41:8e:8a:a1:42:f9:84:
                    14:21:0b:77:57:5f:58:23:35:92:e9:fe:db:41:18:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:AD:61:17:09:81:89:09:01:7C:CB:0E:D8:F4:E0:81:C1:16:8E
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:66:13:4a:36:1d:02:b4:eb:e4:f4:8c:58:ca:90:94:2e:2e:
         ff:f1:6b:18:aa:46:3a:cb:54:c2:f6:25:f7:73:6d:30:fd:1d:
         2c:25:28:5f:57:b1:3a:2b:43:dd:0f:cf:9a:30:70:ed:b0:a3:
         5f:37:9a:bb:2d:98:aa:e8:43:d4:a7:b6:7a:95:39:29:09:cc:
         3a:3d:0b:82:a2:2e:ef:21:73:d4:7e:80:f7:5d:53:d2:e3:7c:
         7c:b4:95:e0:6a:6f:57:4e:54:d4:25:a4:43:b9:f2:5f:30:2e:
         58:c5:5e:30:c6:9e:ce:72:30:dc:a4:e6:06:12:f6:16:d6:77:
         3d:86:68:90:61:27:13:3e:a3:53:b4:c8:b9:db:ce:6c:06:5e:
         da:04:a0:b8:3b:a0:5c:b7:fb:73:56:ed:b0:d9:06:22:77:bb:
         9c:fc:d8:ff:60:8b:bc:8b:b8:f9:bd:6c:0e:e9:92:95:7d:4a:
         ca:48:94:2c:0e:ff:3a:2d:1a:03:a0:7b:83:f4:53:1b:a2:0a:
         76:49:cf:b6:97:ab:36:e9:6a:83:cb:e2:17:a5:c1:cd:1a:2d:
         c4:c4:d6:e8:e3:25:9a:74:d5:4a:ef:ad:ac:22:72:77:15:6a:
         d5:2b:1c:11:a4:c7:5c:53:3f:0c:c9:de:de:6b:9e:a7:5e:8e:
         79:21:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org