Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32322d3233203d3e20323634343938.roa
File:                     3137302e37382e33322e302f32322d3233203d3e20323634343938.roa (raw, json)
Hash identifier:          msFnDEtVCKfdvuYONuL04+rbFvZJv0AQ8IZRGE9Ff/c=
Subject key identifier:   09:B5:2D:D5:19:B1:A4:9F:B5:EB:35:41:C4:2A:31:72:DF:69:AA:12
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       79703C7A566830A3C016F507D1EAA835BE07C4E8
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32322d3233203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 17:05:45 +0000
ROA not before:           Thu 18 May 2023 17:00:45 +0000
ROA not after:            Thu 16 May 2024 17:05:45 +0000
asID:                     264498
IP address blocks:        170.78.32.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:3c:7a:56:68:30:a3:c0:16:f5:07:d1:ea:a8:35:be:07:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 17:00:45 2023 GMT
            Not After : May 16 17:05:45 2024 GMT
        Subject: CN=09B52DD519B1A49FB5EB3541C42A3172DF69AA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:39:59:ac:2a:83:cd:60:75:92:f6:00:80:
                    ff:71:ee:d7:b4:28:3e:5a:1b:39:62:6a:8d:78:14:
                    d7:0e:15:4f:51:88:5d:dd:3f:b2:5d:cf:0f:81:e8:
                    72:70:86:66:90:3e:b8:e7:72:86:26:3b:d6:8b:62:
                    e7:a6:d0:81:11:9a:38:92:a8:5a:3b:9e:e9:e8:b6:
                    dd:b4:9a:69:b1:74:82:d7:bc:d1:69:e5:f8:0e:a8:
                    29:41:c1:d1:50:db:f0:0f:55:2c:53:01:b2:21:5d:
                    de:44:97:47:ec:97:1c:14:4f:b8:59:3e:a5:e5:7e:
                    bb:59:85:cf:57:12:4a:fd:f6:35:96:c2:a3:3b:04:
                    5c:a6:48:23:3e:63:5c:bb:38:9e:80:e1:84:e5:9a:
                    1f:a1:a3:33:49:52:ee:dd:de:0e:0c:cb:64:b4:ca:
                    eb:38:a3:a7:bb:8a:3e:cb:11:2b:a3:9d:4c:04:2d:
                    38:84:64:a5:b1:f6:8e:0e:59:5e:93:b3:58:c7:df:
                    fe:54:a3:6c:03:70:8c:6f:70:73:3f:0c:67:a7:61:
                    ea:b2:13:77:6d:f1:1b:e8:80:f1:f5:93:41:4c:58:
                    c6:39:d9:e5:d5:bf:1d:4f:34:97:64:5c:b6:67:8d:
                    18:54:00:6a:10:b1:ba:a2:63:07:ae:47:c9:28:5a:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:2D:D5:19:B1:A4:9F:B5:EB:35:41:C4:2A:31:72:DF:69:AA:12
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32322d3233203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:bb:f8:57:62:ed:54:9f:17:d7:b1:9b:6d:43:1e:e2:e6:
         d3:d1:90:42:73:26:02:dd:d9:f0:69:fd:38:b1:4c:fd:fd:ac:
         f0:e9:9d:72:df:bc:90:ac:99:d7:42:66:de:5b:4e:0d:99:66:
         84:34:ee:e3:26:ea:92:e4:6c:5f:79:52:85:5a:90:f8:29:cc:
         95:f8:1d:9e:18:8b:77:ee:2f:34:d6:ab:e9:ac:14:d8:42:31:
         4c:5d:0a:f9:76:6f:4d:f0:02:f0:23:fa:03:89:40:91:2f:c7:
         d0:6b:22:fc:b4:29:65:4f:92:b2:df:0b:5c:6a:77:a7:a6:e3:
         db:1b:de:5a:a6:a3:31:07:a7:c3:c8:b8:f0:7a:32:85:96:45:
         da:74:4f:7c:42:b3:f1:17:7f:a6:46:88:88:d0:ef:73:4d:8b:
         80:47:c6:76:26:e0:ca:57:09:30:d1:df:0c:a4:88:49:48:e0:
         b6:e8:58:7b:ae:a6:2a:35:b8:c6:0d:37:6d:6b:f9:2b:a8:07:
         36:96:f9:f8:3f:09:61:08:9b:3e:0a:53:93:b8:fb:04:45:c0:
         68:64:09:f5:a6:ea:5a:2a:3f:4d:72:59:c8:5c:a4:25:df:01:
         c1:d8:d6:0b:d4:f6:a6:75:c8:15:ab:08:4a:13:4a:e5:89:f0:
         c0:cc:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org