Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3234203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          R+ljhBy3INnBlirhUJW7P3zgFRUuVK1q4dvuIG2nCEg=
Subject key identifier:   A2:F3:1C:62:F1:C1:A2:38:09:A1:02:2F:AF:F8:55:84:02:BC:DC:03
Certificate issuer:       /CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
Certificate serial:       7CFE2D059E419806866EC90F07093B5CB6FE21D2
Authority key identifier: 9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3234203d3e20323635353030.roa
Signing time:             Sat 15 Jun 2024 15:49:36 +0000
ROA not before:           Sat 15 Jun 2024 15:44:36 +0000
ROA not after:            Sat 14 Jun 2025 15:49:36 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:2d:05:9e:41:98:06:86:6e:c9:0f:07:09:3b:5c:b6:fe:21:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
        Validity
            Not Before: Jun 15 15:44:36 2024 GMT
            Not After : Jun 14 15:49:36 2025 GMT
        Subject: CN=A2F31C62F1C1A23809A1022FAFF8558402BCDC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:98:b7:02:a4:49:11:31:1d:c1:08:de:57:
                    4c:8e:be:f9:e0:fd:4f:3d:16:63:5c:b4:b5:5f:df:
                    30:5c:ef:92:b5:08:78:ba:1f:bd:be:28:43:86:5c:
                    cd:19:ff:d0:6b:83:d6:82:5a:3c:b2:04:9a:67:5a:
                    fa:71:a3:e4:34:5f:fc:7f:3d:f0:31:78:98:07:3a:
                    42:ed:a7:f7:76:74:c3:f2:35:d2:09:11:a3:b8:96:
                    c5:66:c9:75:dc:38:3c:f7:a0:dc:9c:3d:8c:62:d5:
                    a0:1d:13:17:71:bd:69:00:ab:d9:f6:7b:9f:af:26:
                    14:7e:5f:93:6b:03:be:38:6a:0f:1a:04:c4:1c:e4:
                    fb:b9:08:7a:fc:27:9f:a0:f0:aa:a1:3a:38:15:8c:
                    cc:e2:53:2d:a2:01:f2:85:b7:d8:cf:79:31:de:6c:
                    b2:6f:73:f6:ff:ca:53:69:e1:c0:33:df:03:20:d3:
                    23:e3:88:8b:04:21:30:e1:6d:26:45:57:0a:a2:ef:
                    5c:d0:a6:39:56:e0:5d:a9:4a:f4:a9:0e:4c:1d:13:
                    9a:ed:6e:8e:ca:c5:c1:75:3f:97:ea:3a:94:f0:f3:
                    62:d8:c6:13:01:47:2d:2e:34:c3:f3:6c:95:dd:5e:
                    06:9f:24:75:d1:2d:2b:1c:df:1a:0d:dc:bb:8d:af:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:1C:62:F1:C1:A2:38:09:A1:02:2F:AF:F8:55:84:02:BC:DC:03
            X509v3 Authority Key Identifier:
                keyid:9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:de:e7:4a:39:3d:19:59:21:1e:fb:aa:01:9d:ca:13:44:
         ef:09:6c:d6:1b:9e:29:3c:3a:26:60:26:8d:fc:7f:cb:ac:de:
         69:5e:13:8f:06:2e:0a:f5:5f:da:27:f7:12:4e:f2:6b:2f:aa:
         84:08:93:ca:32:04:45:95:26:25:bf:ff:7e:c6:22:cc:68:3c:
         71:56:ff:63:39:0f:8c:39:5e:18:c9:98:3b:a8:4b:45:fd:69:
         77:a5:b1:e7:bc:5d:6c:95:41:09:1d:55:bc:a7:5b:7e:51:45:
         e6:63:05:bf:45:8b:98:e8:a7:bb:59:2b:9a:6a:6b:b2:62:5f:
         f5:f5:a4:84:8d:d8:57:ef:09:bc:89:76:45:1a:c1:23:bf:00:
         8f:bd:10:d2:1a:4b:d0:ea:34:68:48:c6:c9:f1:2b:7b:49:5d:
         96:8b:bc:78:1d:6d:64:4b:ca:6b:e6:e1:57:08:d0:95:dc:b8:
         27:8b:21:f9:ee:d4:4d:6d:a8:75:e9:f2:6b:45:9d:13:e1:0d:
         98:2b:c8:95:e6:df:19:d5:e6:22:4f:83:5c:28:33:49:58:f0:
         a3:ba:73:0a:4d:85:41:bd:d6:a0:6a:16:b0:03:a2:2a:3e:b5:
         a8:47:ea:9e:51:ca:53:02:ad:09:29:1f:35:e6:9c:9f:a2:b2:
         50:25:c1:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfP4tBZ5BmAaGbskPBwk7XLb+IdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3ODA4NkUzRkU2RTMxNDNFQjlBNEY5QzRGNTRBRDJG
MTcxQjBCOTAeFw0yNDA2MTUxNTQ0MzZaFw0yNTA2MTQxNTQ5MzZaMDMxMTAvBgNV
BAMTKEEyRjMxQzYyRjFDMUEyMzgwOUExMDIyRkFGRjg1NTg0MDJCQ0RDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEZi3AqRJETEdwQjeV0yOvvng
/U89FmNctLVf3zBc75K1CHi6H72+KEOGXM0Z/9Brg9aCWjyyBJpnWvpxo+Q0X/x/
PfAxeJgHOkLtp/d2dMPyNdIJEaO4lsVmyXXcODz3oNycPYxi1aAdExdxvWkAq9n2
e5+vJhR+X5NrA744ag8aBMQc5Pu5CHr8J5+g8KqhOjgVjMziUy2iAfKFt9jPeTHe
bLJvc/b/ylNp4cAz3wMg0yPjiIsEITDhbSZFVwqi71zQpjlW4F2pSvSpDkwdE5rt
bo7KxcF1P5fqOpTw82LYxhMBRy0uNMPzbJXdXgafJHXRLSsc3xoN3LuNr+npAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUovMcYvHBojgJoQIvr/hVhAK83AMwHwYDVR0j
BBgwFoAUmngIbj/m4xQ+uaT5xPVK0vFxsLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC85QTc4MDg2RTNGRTZFMzE0M0VCOUE0RjlDNEY1NEFEMkYxNzFCMEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBNzgwODZFM0ZFNkUzMTQz
RUI5QTRGOUM0RjU0QUQyRjE3MUIwQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk5cMA0GCSqGSIb3DQEBCwUAA4IBAQBAsN7nSjk9
GVkhHvuqAZ3KE0TvCWzWG54pPDomYCaN/H/LrN5pXhOPBi4K9V/aJ/cSTvJrL6qE
CJPKMgRFlSYlv/9+xiLMaDxxVv9jOQ+MOV4YyZg7qEtF/Wl3pbHnvF1slUEJHVW8
p1t+UUXmYwW/RYuY6Ke7WSuaamuyYl/19aSEjdhX7wm8iXZFGsEjvwCPvRDSGkvQ
6jRoSMbJ8St7SV2Wi7x4HW1kS8pr5uFXCNCV3LgniyH57tRNbah16fJrRZ0T4Q2Y
K8iV5t8Z1eYiT4NcKDNJWPCjunMKTYVBvdagahawA6IqPrWoR+qeUcpTAq0JKR81
5pyforJQJcGx
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:29:41 2025 by rpki-client