Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/3137302e37382e3132382e302f32322d3233203d3e20323636323739.roa
File:                     3137302e37382e3132382e302f32322d3233203d3e20323636323739.roa (raw, json)
Hash identifier:          zWtIJJ2LdHaBxB8LVQZAZ33AOLVHXfsaCpp7Kqo2uhw=
Subject key identifier:   B2:66:D5:06:4F:7D:7F:70:47:F5:16:FD:64:83:95:AA:6F:92:CD:5B
Certificate issuer:       /CN=5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2
Certificate serial:       2A9E19963494269DD50DBAEC4E1DD07E3C06647F
Authority key identifier: 5B:C9:A4:A7:6F:3F:26:D6:30:8F:79:23:AE:9C:F7:E1:00:89:62:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/3137302e37382e3132382e302f32322d3233203d3e20323636323739.roa
Signing time:             Fri 06 Jan 2023 19:53:24 +0000
ROA not before:           Fri 06 Jan 2023 19:48:24 +0000
ROA not after:            Fri 05 Jan 2024 19:53:24 +0000
asID:                     266279
IP address blocks:        170.78.128.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:19:96:34:94:26:9d:d5:0d:ba:ec:4e:1d:d0:7e:3c:06:64:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2
        Validity
            Not Before: Jan  6 19:48:24 2023 GMT
            Not After : Jan  5 19:53:24 2024 GMT
        Subject: CN=B266D5064F7D7F7047F516FD648395AA6F92CD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:f4:96:4b:41:22:d4:e7:63:5a:cd:cf:8d:
                    eb:ce:1b:03:a1:8e:43:b6:55:76:c2:ed:6f:73:f7:
                    23:48:21:c7:83:ac:26:97:31:d4:62:b0:44:f4:58:
                    b9:9c:2a:ee:d3:00:2d:8e:85:a6:73:33:cd:1b:1a:
                    5d:16:67:2c:12:19:ac:50:b6:8d:80:46:d0:9c:a6:
                    57:34:01:bf:a5:4c:86:4e:a7:a4:36:90:61:cc:d6:
                    83:b2:6b:2f:90:b5:3e:b1:90:62:59:70:ef:52:6c:
                    08:db:1c:08:c5:17:aa:83:fb:1e:ba:b8:5d:7a:81:
                    50:97:6f:66:05:68:18:99:28:bd:9f:12:7c:af:fd:
                    9f:a6:01:2f:32:3e:e9:ec:60:8e:de:bd:a4:e0:7e:
                    c6:8e:48:17:fb:37:8b:be:10:3a:a8:b1:24:60:32:
                    5f:fd:5b:91:3b:31:cb:bf:e9:54:f5:15:00:23:5d:
                    b2:36:29:38:7c:01:24:23:c7:3e:fa:ba:84:9f:e1:
                    3f:0e:34:fe:8e:0a:f9:d3:6e:06:d4:3a:7f:c1:27:
                    2b:25:1b:6a:8d:2d:a6:07:75:95:63:31:b8:7f:81:
                    ea:10:8a:2b:da:38:b6:ec:31:82:ee:31:a2:65:e5:
                    52:d6:7d:1f:40:dc:59:67:ba:3d:86:a7:e3:87:dc:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:66:D5:06:4F:7D:7F:70:47:F5:16:FD:64:83:95:AA:6F:92:CD:5B
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A4:A7:6F:3F:26:D6:30:8F:79:23:AE:9C:F7:E1:00:89:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/3137302e37382e3132382e302f32322d3233203d3e20323636323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:56:33:ea:fb:88:2c:f4:d8:42:0e:d6:6b:3d:e2:70:35:
         36:86:b7:c0:2a:cf:c5:ae:a3:6b:ac:cd:bf:dc:48:f0:f3:ee:
         89:e6:14:26:9e:e9:04:2a:55:84:d0:5a:92:4f:ee:21:6a:91:
         c2:7d:fe:6f:e8:ea:d6:95:17:11:2c:bc:5c:d6:90:70:0a:2b:
         d8:84:e1:4a:26:ec:a5:f7:c9:df:78:4a:74:1f:6f:84:51:73:
         98:26:d4:0b:12:d5:6b:aa:03:da:51:c0:d5:c4:4c:0e:4b:b7:
         13:78:14:34:5e:00:51:43:71:8d:45:5e:92:83:ea:0c:74:ea:
         c8:79:6f:60:fb:83:bd:b0:6b:dd:3e:12:f7:20:7c:28:b5:ed:
         2c:f1:9e:73:ab:2d:e2:7d:2a:dd:d7:b0:21:f1:cf:8f:cc:07:
         fe:b0:26:43:68:8a:8a:ae:df:a5:56:74:99:c1:e9:16:12:c2:
         31:7b:95:44:5e:e6:9a:7e:b8:65:7d:f4:01:89:2c:be:24:0b:
         2f:c2:ca:a1:32:33:e5:e0:b0:1e:60:d5:ad:62:b7:1f:2b:91:
         9a:22:37:13:19:40:c8:7a:06:c8:2e:c3:85:52:48:e6:2a:f0:
         f8:73:ee:be:f3:31:90:89:2d:60:8e:ce:3e:70:fa:39:af:44:
         df:dd:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org