Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137302e37382e3136342e302f32322d3234203d3e203238363538.roa
File:                     3137302e37382e3136342e302f32322d3234203d3e203238363538.roa (raw, json)
Hash identifier:          1q8euCUWZJa8S3II37qOskE8RLEeKrtDhNKJq8ows88=
Subject key identifier:   41:8F:79:69:7A:BB:34:0D:6A:04:29:0B:15:6C:17:7F:85:AB:C5:95
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       15A36E13DD757B80E5EA95A5CA9CA218AA7C219C
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137302e37382e3136342e302f32322d3234203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:20 +0000
ROA not before:           Sun 12 Nov 2023 19:35:20 +0000
ROA not after:            Sun 10 Nov 2024 19:40:20 +0000
asID:                     28658
IP address blocks:        170.78.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a3:6e:13:dd:75:7b:80:e5:ea:95:a5:ca:9c:a2:18:aa:7c:21:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:20 2023 GMT
            Not After : Nov 10 19:40:20 2024 GMT
        Subject: CN=418F79697ABB340D6A04290B156C177F85ABC595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:0a:ae:22:5f:bf:0e:ed:e7:2f:98:20:e0:
                    b6:19:cf:f9:b8:03:0a:7f:ff:94:50:1b:5d:60:26:
                    36:28:95:13:7d:37:5a:85:a6:41:55:7a:65:f1:23:
                    20:66:ad:31:9d:5d:24:ce:b8:1b:97:ab:b7:6c:8b:
                    fd:53:fb:c2:ef:31:88:29:c8:67:27:ac:42:33:03:
                    28:44:0a:82:50:db:34:ed:41:3f:35:5f:7a:a3:1a:
                    9e:1a:ca:a4:c2:9c:70:af:2f:db:31:72:39:ca:bd:
                    d3:dc:83:1e:58:ae:04:75:8b:16:2f:93:69:38:28:
                    be:66:ca:14:76:f8:c0:0d:f3:9b:11:e2:74:f5:c4:
                    97:21:9e:87:aa:27:dd:78:18:12:6e:ab:91:7f:63:
                    47:ae:8c:e1:ef:e3:21:28:36:a3:91:fe:5d:d9:68:
                    17:ad:69:bb:36:62:4b:d9:e7:1f:d6:e1:75:a1:aa:
                    9d:44:c6:e4:4e:3c:60:a9:e9:fa:02:a0:68:d3:cd:
                    4d:d0:be:ee:67:f3:79:e4:8d:af:e3:a4:ca:43:1d:
                    1b:bb:de:c6:85:b4:a8:92:20:39:65:e5:bf:55:43:
                    20:2b:b8:42:ae:92:b9:29:04:0d:4d:ea:51:ac:73:
                    08:6b:7f:c7:b4:85:cc:2a:23:2a:54:63:b8:70:0f:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8F:79:69:7A:BB:34:0D:6A:04:29:0B:15:6C:17:7F:85:AB:C5:95
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137302e37382e3136342e302f32322d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:70:e5:f0:ae:8a:a8:a9:59:57:62:1f:c9:17:9e:60:d0:ac:
         28:c8:39:e0:db:e7:7d:4d:21:e9:d1:2b:62:52:95:af:1f:d4:
         13:89:3e:57:75:92:d1:36:14:46:48:b9:85:68:26:53:96:b7:
         a7:c5:83:4f:e7:a9:df:43:d2:ac:43:ce:b1:10:38:50:8f:71:
         6a:fb:8b:58:9b:b0:f5:ff:d1:3f:c7:f7:e7:59:1d:57:71:d8:
         dd:90:e4:23:ea:7b:51:13:83:0d:c0:c8:39:4c:39:8e:3f:57:
         ad:c1:eb:a6:1a:a1:5a:d4:16:ea:b9:bf:80:bd:2b:76:2f:7d:
         0f:24:e5:1b:67:3e:54:7c:ed:d3:d5:3f:4d:b1:27:55:05:f4:
         29:b3:ab:fb:95:f9:85:0c:9f:bc:b0:8a:3f:cb:e6:34:6d:60:
         c8:d9:e3:de:a1:33:89:6b:14:22:8a:26:3d:7e:5d:d0:cb:ab:
         3f:df:fd:eb:a3:e3:02:15:a9:bd:d3:10:72:88:86:f1:f9:39:
         e3:45:8c:0a:b7:88:65:d3:03:bc:f1:13:db:36:3a:c3:ff:a2:
         33:74:9d:f3:88:5d:fd:b4:a7:61:c6:bf:b4:a7:4f:d9:39:8d:
         58:23:64:1c:7d:1c:26:56:d3:84:b4:07:ae:c8:5e:aa:01:c7:
         1e:dc:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org