Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134392e302f32342d3234203d3e20323636323732.roa
File:                     3137302e37382e3134392e302f32342d3234203d3e20323636323732.roa (raw, json)
Hash identifier:          9hq8owrygz/E+Fqayq/rSBSGyFnzZO5VXg5doPv/Ddc=
Subject key identifier:   72:62:A2:66:E9:6D:09:C6:C1:AB:01:97:26:9E:3B:72:8E:A3:5F:11
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       54010CF786C199374E85F83EB376BFAC6D1BC1E5
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134392e302f32342d3234203d3e20323636323732.roa
Signing time:             Tue 12 Mar 2024 14:58:00 +0000
ROA not before:           Tue 12 Mar 2024 14:53:00 +0000
ROA not after:            Tue 11 Mar 2025 14:58:00 +0000
asID:                     266272
IP address blocks:        170.78.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:01:0c:f7:86:c1:99:37:4e:85:f8:3e:b3:76:bf:ac:6d:1b:c1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Mar 12 14:53:00 2024 GMT
            Not After : Mar 11 14:58:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:31:b2:3e:e7:22:d7:3e:e0:43:3c:43:9e:
                    cf:00:19:fd:d3:ae:b1:21:d9:7a:4e:3c:aa:82:8a:
                    08:a7:a8:28:86:63:db:a5:ba:7e:35:50:4b:fd:a7:
                    94:fa:67:63:ef:49:c6:81:53:d2:82:29:ed:ef:f0:
                    54:53:a6:b5:94:ea:10:e8:5e:c0:2a:d3:bf:73:06:
                    d0:ce:5a:a3:e4:cd:9e:91:67:f7:77:1e:e0:22:d4:
                    2c:78:c3:86:79:c7:5e:55:e6:cf:28:f5:4d:86:c4:
                    51:9b:aa:f5:8e:6a:50:bf:96:bf:18:b7:67:f0:1d:
                    8e:fb:d0:b6:fd:35:08:f1:c9:28:12:1e:27:bf:90:
                    2b:72:e0:fe:11:4f:30:f8:f6:ad:20:2d:13:b8:73:
                    ec:fb:e6:27:79:34:13:55:96:05:11:e0:dd:33:dd:
                    86:76:51:d2:60:52:1f:40:6c:2e:af:b9:11:71:5d:
                    0a:6b:d7:3f:8d:24:8d:bc:33:4c:ce:3b:f5:bd:08:
                    89:13:8d:d3:7b:21:00:b5:66:6b:30:34:4a:2e:a6:
                    d7:f3:1d:09:15:43:8f:d0:d4:ec:3d:c5:99:72:e9:
                    31:a6:d4:2e:15:19:71:9b:22:d3:1a:4c:e3:e7:99:
                    46:6c:b5:b3:d4:58:a4:58:ab:e3:1e:2e:5d:8d:18:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:A2:66:E9:6D:09:C6:C1:AB:01:97:26:9E:3B:72:8E:A3:5F:11
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3134392e302f32342d3234203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:84:25:9b:2b:89:c6:dd:57:cf:b4:cd:ba:3f:8a:47:f1:
         91:e6:1f:d1:2b:35:40:b7:60:5a:af:93:87:e2:23:b3:a2:58:
         3c:e2:33:97:ea:17:56:80:e1:02:4e:b0:1f:9f:2e:3e:41:8e:
         c0:80:49:24:a1:d7:16:22:00:af:1d:39:7b:fa:a2:7a:9f:17:
         26:da:28:f7:ce:e4:ac:c2:49:92:0c:73:e2:9a:31:6c:23:cc:
         36:fc:55:9c:ac:ef:37:84:48:4c:a9:28:65:c2:4f:b0:9f:18:
         1f:f8:e3:6b:4d:d8:77:5a:95:c0:1d:22:04:e1:f0:46:d8:7d:
         86:b5:32:7c:a6:40:3e:2c:f6:28:6f:63:2e:17:9b:97:58:b6:
         c5:f5:4a:49:93:dc:ac:67:c1:ce:ec:8d:ae:a0:dd:a0:96:84:
         e1:ac:07:fb:ed:d2:c0:a6:f8:2c:9e:84:0b:84:a9:b5:a7:03:
         c8:cf:4f:91:69:db:36:1c:55:a0:b1:6a:7d:34:d4:a9:a3:93:
         4e:64:e1:89:5a:55:4c:53:96:c5:de:71:16:c9:c9:ca:51:43:
         75:dd:dd:59:f0:63:5a:f8:57:b1:22:4c:ce:ac:7d:ab:65:b3:
         48:00:95:aa:72:22:7d:9e:20:55:5e:f7:83:d4:e0:54:07:9c:
         fb:a1:82:16
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUVAEM94bBmTdOhfg+s3a/rG0bweUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQxNUQ3NUE5RDdGM0IwQ0UxRTE1QzIzODlCMjAzQTI5
NDREOUM4QjAeFw0yNDAzMTIxNDUzMDBaFw0yNTAzMTExNDU4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFBNjMxQjIzRUU3MjJENzNF
RTA0MzNDNDM5RUNGMDAxOUZERDNBRUIxMjFEOTdBNEUzQ0FBODI4QTA4QTdBODI4
ODY2M0RCQTVCQTdFMzU1MDRCRkRBNzk0RkE2NzYzRUY0OUM2ODE1M0QyODIyOUVE
RUZGMDU0NTNBNkI1OTRFQTEwRTg1RUMwMkFEM0JGNzMwNkQwQ0U1QUEzRTRDRDlF
OTE2N0Y3NzcxRUUwMjJENDJDNzhDMzg2NzlDNzVFNTVFNkNGMjhGNTREODZDNDUx
OUJBQUY1OEU2QTUwQkY5NkJGMThCNzY3RjAxRDhFRkJEMEI2RkQzNTA4RjFDOTI4
MTIxRTI3QkY5MDJCNzJFMEZFMTE0RjMwRjhGNkFEMjAyRDEzQjg3M0VDRkJFNjI3
NzkzNDEzNTU5NjA1MTFFMEREMzNERDg2NzY1MUQyNjA1MjFGNDA2QzJFQUZCOTEx
NzE1RDBBNkJENzNGOEQyNDhEQkMzMzRDQ0UzQkY1QkQwODg5MTM4REQzN0IyMTAw
QjU2NjZCMzAzNDRBMkVBNkQ3RjMxRDA5MTU0MzhGRDBENEVDM0RDNTk5NzJFOTMx
QTZENDJFMTUxOTcxOUIyMkQzMUE0Q0UzRTc5OTQ2NkNCNUIzRDQ1OEE0NThBQkUz
MUUyRTVEOEQxODg4NzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwaYxsj7nItc+4EM8Q57PABn9066xIdl6TjyqgooIp6gohmPbpbp+
NVBL/aeU+mdj70nGgVPSgint7/BUU6a1lOoQ6F7AKtO/cwbQzlqj5M2ekWf3dx7g
ItQseMOGecdeVebPKPVNhsRRm6r1jmpQv5a/GLdn8B2O+9C2/TUI8ckoEh4nv5Ar
cuD+EU8w+PatIC0TuHPs++YneTQTVZYFEeDdM92GdlHSYFIfQGwur7kRcV0Ka9c/
jSSNvDNMzjv1vQiJE43TeyEAtWZrMDRKLqbX8x0JFUOP0NTsPcWZcukxptQuFRlx
myLTGkzj55lGbLWz1FikWKvjHi5djRiIdQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHJiombpbQnGwasBlyaeO3KOo18RMB8GA1UdIwQYMBaAFNQV11qdfzsM4eFcI4my
A6KUTZyLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JrOE12ZmlIZmNHRzcz
N0RQVWZKWERSbjlyeXFtczN5QXljRHdlNEJQcnBWLzAvRDQxNUQ3NUE5RDdGM0Iw
Q0UxRTE1QzIzODlCMjAzQTI5NDREOUM4Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENDE1RDc1QTlEN0YzQjBDRTFFMTVDMjM4OUIyMDNBMjk0NEQ5
QzhCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CazhNdmZpSGZjR0c3MzdEUFVm
SlhEUm45cnlxbXMzeUF5Y0R3ZTRCUHJwVi8wLzMxMzczMDJlMzczODJlMzEzNDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzIzNzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qk6VMA0GCSqGSIb3DQEBCwUAA4IBAQB/p4QlmyuJxt1Xz7TNuj+KR/GR5h/RKzVA
t2Bar5OH4iOzolg84jOX6hdWgOECTrAfny4+QY7AgEkkodcWIgCvHTl7+qJ6nxcm
2ij3zuSswkmSDHPimjFsI8w2/FWcrO83hEhMqShlwk+wnxgf+ONrTdh3WpXAHSIE
4fBG2H2GtTJ8pkA+LPYob2MuF5uXWLbF9UpJk9ysZ8HO7I2uoN2gloThrAf77dLA
pvgsnoQLhKm1pwPIz0+Rads2HFWgsWp9NNSpo5NOZOGJWlVMU5bF3nEWycnKUUN1
3d1Z8GNa+FexIkzOrH2rZbNIAJWqciJ9niBVXveD1OBUB5z7oYIW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org