Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32322d3232203d3e20323634343938.roa
File:                     3137302e37382e33322e302f32322d3232203d3e20323634343938.roa (raw, json)
Hash identifier:          N6tj3ZoBenFszuzrIJ6y4vNRW/2nzy7jKzC1wTPb978=
Subject key identifier:   41:A3:D6:6A:13:B3:CB:A9:69:AE:DD:80:2E:BA:30:02:A0:F1:9A:B2
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       402079E8444D4E07B2B20049E2CD51D09F24F022
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32322d3232203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 14:08:53 +0000
ROA not before:           Thu 18 May 2023 14:03:53 +0000
ROA not after:            Thu 16 May 2024 14:08:53 +0000
asID:                     264498
IP address blocks:        170.78.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:20:79:e8:44:4d:4e:07:b2:b2:00:49:e2:cd:51:d0:9f:24:f0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 14:03:53 2023 GMT
            Not After : May 16 14:08:53 2024 GMT
        Subject: CN=41A3D66A13B3CBA969AEDD802EBA3002A0F19AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:87:ba:2d:94:e3:31:6a:27:b6:28:a8:cf:
                    28:01:f8:b8:b0:c2:f3:a2:ef:03:9f:45:ae:1f:94:
                    47:ba:1d:88:20:ca:bf:93:66:59:31:e1:56:f5:01:
                    9b:f3:63:02:ff:ed:7a:8f:68:38:84:54:f2:90:2e:
                    40:20:56:0d:be:2a:b1:f2:81:32:33:14:49:43:d7:
                    df:29:c9:6c:1b:44:5e:d8:4d:07:61:45:1f:3c:81:
                    2e:6f:11:69:e2:15:08:77:e6:10:e4:02:f8:8d:d1:
                    c5:ca:bf:79:d6:74:25:2e:99:7d:33:78:2c:7c:5a:
                    d5:09:5d:7e:ac:f8:46:a1:ec:1a:74:86:1c:9a:84:
                    d7:1b:b4:47:7c:25:f8:18:14:46:69:ed:15:74:23:
                    a0:17:37:0d:32:fb:74:47:b0:c9:d9:a0:49:8f:86:
                    a0:14:f9:85:f8:f6:3d:6d:7f:f6:9c:d9:fd:99:8f:
                    d6:e8:ea:f8:59:3f:d6:8f:ad:62:56:06:a8:84:a2:
                    61:4e:7a:5a:c6:90:b1:e2:a7:3d:b1:83:ce:8f:0a:
                    4d:58:ad:b9:3e:41:25:03:97:d0:2e:3a:35:42:7a:
                    2c:27:49:3e:24:83:93:1e:76:1a:25:4b:f3:c1:c7:
                    a2:af:b0:51:e1:7d:7b:5e:10:56:c7:de:97:80:6a:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:D6:6A:13:B3:CB:A9:69:AE:DD:80:2E:BA:30:02:A0:F1:9A:B2
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32322d3232203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:5e:12:7e:28:85:a4:29:56:03:6e:19:97:d7:2e:90:5f:
         0e:83:d9:ac:0c:42:78:70:64:c5:e9:30:45:39:c9:84:e6:dd:
         72:87:d9:82:f2:a8:7c:07:e2:78:48:72:d4:99:40:25:46:28:
         00:01:e9:19:9e:dd:a7:46:46:8f:c4:f7:ab:25:39:6a:71:41:
         53:19:0b:fe:83:31:39:ab:4a:b1:b2:8b:75:13:8e:74:4e:de:
         9d:3f:a1:bf:52:1c:d8:0e:a1:d0:c3:7e:5c:44:8f:04:c9:ca:
         dc:7d:5b:80:4c:23:96:99:13:9b:9b:23:fa:fb:ff:21:d7:e9:
         91:cf:ed:f3:16:8a:70:77:f2:23:94:a3:0d:20:a8:58:c4:e3:
         19:fb:7b:78:4b:00:79:0b:4d:1b:63:94:b6:7c:01:b6:9f:0c:
         83:00:f3:3a:5e:7b:65:96:2e:cc:d6:47:c6:fd:e4:87:93:0d:
         5a:c2:dc:06:1e:a6:6c:c2:15:96:e3:b8:59:2a:00:03:3f:86:
         cb:f8:1c:51:6a:be:7e:bf:82:1a:ef:c4:a9:46:a4:de:eb:70:
         1d:92:b1:ac:9f:eb:08:54:9f:a5:81:fa:7a:54:dd:92:a5:63:
         38:46:fe:e5:49:e0:62:32:c4:79:70:ff:6d:1d:b5:66:98:9b:
         9c:a1:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org