Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323536363030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323536363030.roa (raw, json)
Hash identifier:          FEnrZ6rRs6eocMWMe9YoMm5JrKI2lnVGqb0fLlj+krE=
Subject key identifier:   C4:01:D2:8C:BE:64:33:B3:CE:01:28:2D:C7:CE:A4:14:CE:00:34:8B
Certificate issuer:       /CN=2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11
Certificate serial:       10F2174B503A3165B32C3CDDCE215CE6A970DDFF
Authority key identifier: 2E:AE:B0:C4:29:8C:81:A5:A1:9D:7D:70:0E:A0:E3:6F:82:D2:FB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323536363030.roa
Signing time:             Tue 26 Dec 2023 19:08:58 +0000
ROA not before:           Tue 26 Dec 2023 19:03:58 +0000
ROA not after:            Tue 24 Dec 2024 19:08:58 +0000
asID:                     256600
IP address blocks:        170.78.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f2:17:4b:50:3a:31:65:b3:2c:3c:dd:ce:21:5c:e6:a9:70:dd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11
        Validity
            Not Before: Dec 26 19:03:58 2023 GMT
            Not After : Dec 24 19:08:58 2024 GMT
        Subject: CN=C401D28CBE6433B3CE01282DC7CEA414CE00348B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:9b:2b:da:73:65:e4:61:ed:c6:64:61:c1:
                    63:60:38:96:6e:c5:8d:67:f8:ee:f1:57:40:05:03:
                    3d:4f:e6:dc:25:9d:79:82:6e:eb:77:59:34:d6:e0:
                    b1:1a:fc:d9:df:8f:07:1d:e6:bd:3d:b7:9d:6e:ca:
                    4f:be:e7:6a:1a:0d:73:8a:86:04:9c:0a:4d:3b:b6:
                    8b:64:b0:c6:76:7b:7b:58:d3:a5:9d:23:fe:6c:cb:
                    2d:7f:b8:f5:d3:3b:89:28:18:2f:11:7b:24:75:1c:
                    9a:98:4b:96:0d:4c:f6:bc:de:61:37:b3:e1:d9:35:
                    99:da:7e:64:5d:ad:ce:97:65:6c:69:52:3c:83:c3:
                    e4:4c:27:a2:47:92:ea:45:a0:b7:d8:16:ec:c7:56:
                    18:52:82:6f:55:2d:fb:4e:39:93:98:6d:59:04:29:
                    15:6d:32:b7:ea:32:05:c1:ab:ea:c3:9c:83:05:7c:
                    30:b1:0e:c0:c8:29:4a:a3:8c:2f:81:b4:c4:b5:8c:
                    bd:22:c0:e7:50:87:f9:7a:f4:8e:19:69:24:1b:bc:
                    77:d9:3c:6b:6d:ff:14:1b:38:95:d6:2f:cd:73:25:
                    a6:b3:86:1a:df:52:b1:a4:3d:3b:38:d9:2f:4e:d4:
                    51:98:73:5c:21:f4:a1:81:55:5b:f5:f1:03:99:b5:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:D2:8C:BE:64:33:B3:CE:01:28:2D:C7:CE:A4:14:CE:00:34:8B
            X509v3 Authority Key Identifier:
                keyid:2E:AE:B0:C4:29:8C:81:A5:A1:9D:7D:70:0E:A0:E3:6F:82:D2:FB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323536363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:4e:d2:80:39:7e:46:11:a8:6a:92:94:04:a6:c7:5e:a5:
         ca:5e:a6:73:74:e4:2d:54:a4:fc:59:71:74:b0:4b:f4:95:cf:
         a4:f5:58:93:3b:14:3e:b9:c8:0e:fa:23:6a:ad:81:d1:91:e7:
         02:eb:bc:c3:26:5f:7b:36:1f:d7:74:d3:22:d7:b6:c3:4e:a2:
         8e:44:5a:f9:57:79:eb:9d:72:d2:2f:e8:ab:5c:dc:42:4a:7e:
         b6:37:b7:24:c8:35:22:68:2a:18:94:d5:f0:26:03:ba:55:3d:
         e2:16:98:f2:9f:3d:d9:e7:4c:5e:39:75:9e:99:9f:50:13:7c:
         d6:95:8f:c8:8a:2a:68:da:c9:d9:65:ee:0a:48:d7:8b:2d:1f:
         b6:59:de:26:56:d0:2a:2d:93:45:4a:1b:97:92:0c:a9:6c:cf:
         4d:04:a0:e6:62:38:dd:84:07:0a:6f:9f:b8:d2:55:28:ce:b1:
         16:20:55:85:fc:0b:33:8e:f9:ac:88:9f:fa:51:49:ee:5d:fe:
         94:c5:a3:b5:9a:ed:b3:c1:88:f5:cf:48:93:89:a8:3f:2a:8a:
         b7:59:0f:75:c9:dc:01:6d:7f:47:c5:19:6d:43:9f:96:00:78:
         36:d0:c9:7b:ef:98:51:07:07:11:00:b8:56:62:7e:32:79:11:
         92:d0:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:48 2025 by rpki-client