Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135302e302f32332d3233203d3e20323636323732.roa
File:                     3137302e37382e3135302e302f32332d3233203d3e20323636323732.roa (raw, json)
Hash identifier:          gVGhvTuLc3BEYbRFYapUhpfSXCrzvNlsssdgHTTI6hU=
Subject key identifier:   78:49:7C:9B:F6:CF:A3:5C:CE:54:C0:DD:00:52:F9:45:02:CC:A1:47
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       5A4ADBF13CDDDC668B94A12305A1BB402C95C88E
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135302e302f32332d3233203d3e20323636323732.roa
Signing time:             Tue 12 Mar 2024 14:58:00 +0000
ROA not before:           Tue 12 Mar 2024 14:53:00 +0000
ROA not after:            Tue 11 Mar 2025 14:58:00 +0000
asID:                     266272
IP address blocks:        170.78.150.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4a:db:f1:3c:dd:dc:66:8b:94:a1:23:05:a1:bb:40:2c:95:c8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Mar 12 14:53:00 2024 GMT
            Not After : Mar 11 14:58:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b9:a6:87:49:1c:bb:bd:9e:57:b7:60:47:56:
                    bd:15:61:d2:a4:fd:ce:2d:bd:12:b1:40:d3:56:d0:
                    b9:1b:6e:15:71:55:8f:22:10:1d:e3:df:25:44:fd:
                    c1:2e:9c:e7:87:c3:e1:50:84:aa:ee:0c:29:2c:cb:
                    05:90:3c:0e:ef:04:04:13:54:0f:e0:14:51:83:08:
                    8b:5a:e4:d4:d6:e8:1a:0c:b6:0c:18:c2:4a:20:47:
                    33:5f:9d:39:d9:1a:bd:f9:b7:60:a1:a7:1c:c0:ca:
                    b8:0b:fc:9d:41:5c:23:c4:d3:d2:e1:97:72:ca:47:
                    68:98:48:b3:5e:52:f7:fc:ec:57:80:c5:f7:ab:53:
                    74:56:1b:b9:2f:6a:4b:b2:f8:a8:cb:43:51:1e:4e:
                    0b:6c:58:9e:c5:a4:ec:b4:8f:ac:6d:1c:eb:08:0e:
                    99:53:57:cc:1b:62:3e:f3:cf:a1:ae:4a:58:d7:38:
                    fd:2e:78:4d:be:8d:88:6e:b0:56:36:e0:f2:ea:99:
                    b2:22:ec:32:e4:54:43:fe:11:d3:e1:e6:11:f6:e6:
                    6c:6c:5d:a8:72:a0:51:da:15:3b:07:6c:c4:4e:26:
                    25:d2:72:b4:be:b8:0d:ce:71:6f:f9:b8:36:de:12:
                    cb:dc:b9:17:b6:b3:0f:31:18:f3:96:da:47:f4:7b:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:49:7C:9B:F6:CF:A3:5C:CE:54:C0:DD:00:52:F9:45:02:CC:A1:47
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/3137302e37382e3135302e302f32332d3233203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:6b:19:0d:2f:cf:50:f9:ff:ae:5a:4a:64:78:da:a7:9b:
         a6:98:90:8b:de:70:1d:3f:1a:de:01:d7:5a:e1:2f:be:45:1c:
         6c:0c:48:4e:81:2a:6f:6f:6b:f3:90:bb:ce:15:3e:79:31:52:
         c6:8f:1c:8b:97:ba:61:61:a0:b6:13:11:a1:d5:bb:a6:0e:40:
         75:f8:a1:95:ea:0e:a4:0b:95:d8:1e:4f:a1:96:d0:51:75:33:
         d5:31:b2:3a:2f:5f:01:20:41:c0:3a:0e:53:fe:e6:6b:f1:a4:
         a0:d6:dd:62:26:5d:98:4d:96:6d:ea:d5:2e:ce:5f:b3:f6:b8:
         3d:e8:67:f3:5a:4b:75:02:2c:30:63:41:24:d0:2e:1e:02:5a:
         ad:3e:39:e3:f1:5d:d8:7e:cc:09:5e:cd:e5:35:99:b2:56:56:
         2f:ae:06:80:87:5d:b4:67:d7:01:f7:38:be:b2:7a:42:f8:ed:
         b3:ba:7c:52:f4:3f:95:30:69:cc:0e:6c:10:5d:23:43:6f:38:
         07:d9:ee:3e:36:d4:71:76:51:3a:d4:6e:5b:2a:43:a2:d3:d6:
         2a:0a:06:e3:4e:91:32:c4:64:ac:6a:29:83:06:b1:6e:de:43:
         8c:71:73:56:a0:b4:4d:94:18:2c:20:c2:d6:2f:84:25:8d:59:
         d5:7b:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:57 2025 by rpki-client