Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa
File:                     3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa (raw, json)
Hash identifier:          Kly0aCH8xhQCdYf15Rb1J1K4eirB3BVsPNNl6zjTCjI=
Subject key identifier:   D3:1A:AD:F8:29:69:42:00:06:30:A0:D2:EA:3A:70:8D:E0:38:D5:62
Certificate issuer:       /CN=D7777CF78CDF2EE6438090DAD56980390A48B2FD
Certificate serial:       48E9C18F4FE2CC1BF0324D62AA91FB9F46E380B2
Authority key identifier: D7:77:7C:F7:8C:DF:2E:E6:43:80:90:DA:D5:69:80:39:0A:48:B2:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa
Signing time:             Mon 08 Apr 2024 17:09:26 +0000
ROA not before:           Mon 08 Apr 2024 17:04:26 +0000
ROA not after:            Mon 07 Apr 2025 17:09:26 +0000
asID:                     266279
IP address blocks:        170.78.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e9:c1:8f:4f:e2:cc:1b:f0:32:4d:62:aa:91:fb:9f:46:e3:80:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7777CF78CDF2EE6438090DAD56980390A48B2FD
        Validity
            Not Before: Apr  8 17:04:26 2024 GMT
            Not After : Apr  7 17:09:26 2025 GMT
        Subject: CN=D31AADF8296942000630A0D2EA3A708DE038D562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:3a:e7:29:8f:6e:a2:29:f9:73:e3:32:1c:
                    23:2c:09:0a:22:89:a9:a7:40:29:21:be:51:64:a1:
                    f1:07:f0:86:12:38:41:a2:cd:e6:18:a6:56:e0:6d:
                    5d:0d:38:2e:c7:ce:3c:7d:fe:93:cd:8d:d8:c0:3f:
                    db:0a:ab:1e:b2:67:d2:6f:30:bb:d7:7c:74:95:c7:
                    eb:d0:e8:50:3f:57:e3:c4:24:cf:a3:2e:be:ee:80:
                    9e:25:6b:15:46:2f:ec:32:4f:b5:b0:00:f8:11:3d:
                    eb:18:07:29:43:af:ce:17:fe:a6:13:3f:8e:6e:b6:
                    33:fe:07:b6:02:40:2e:11:dc:d5:f2:1a:8e:12:ce:
                    58:cf:04:9b:e0:8a:7f:3b:53:82:74:11:9c:19:4b:
                    05:4e:36:8f:ec:87:0e:66:c7:ed:ef:17:98:d5:02:
                    a7:7f:89:53:92:03:e3:cf:33:0c:bd:e9:31:68:c7:
                    36:23:e3:51:cc:98:8b:24:be:a0:27:7e:8d:00:b0:
                    db:a9:ff:2f:ee:7a:43:8d:91:46:71:2a:5c:c3:f2:
                    6b:79:15:75:29:54:5a:9d:9f:7b:65:e0:5f:1d:62:
                    49:12:ca:3a:60:1e:d6:19:26:ca:67:e7:24:86:18:
                    66:3b:aa:f8:d9:5a:9b:05:be:ce:c4:0a:3a:82:dd:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:AD:F8:29:69:42:00:06:30:A0:D2:EA:3A:70:8D:E0:38:D5:62
            X509v3 Authority Key Identifier:
                keyid:D7:77:7C:F7:8C:DF:2E:E6:43:80:90:DA:D5:69:80:39:0A:48:B2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:9d:0e:d8:d8:e8:0f:f5:20:8e:41:4e:c9:74:df:cf:34:
         12:f1:c1:fb:54:17:ed:b2:0b:9a:b2:33:32:bd:16:ab:c0:08:
         e7:f9:72:88:12:95:f1:8e:f4:f0:17:86:31:90:82:2c:b4:c6:
         23:2a:b9:6b:5a:2a:af:16:ba:cc:27:50:1b:b5:a0:bf:9a:6e:
         b5:f2:8a:2a:6a:6e:35:46:b8:19:9c:c4:ad:14:cf:b6:f3:4e:
         86:94:c7:ff:86:3a:4d:f8:36:82:cb:be:1d:32:a7:9c:b6:97:
         18:60:6a:3c:5d:7d:92:c8:21:a1:c6:84:29:12:fe:a4:bf:11:
         1c:e3:42:1e:7e:7e:12:cc:3c:b0:de:58:e9:62:08:72:d1:04:
         70:4a:a4:c9:b5:e7:09:6d:de:94:e2:0b:ea:4c:d5:fa:7b:eb:
         9b:93:86:97:aa:4b:f6:10:d2:01:01:bb:01:45:66:f6:05:b7:
         41:74:3d:cc:70:da:28:66:83:a2:e0:5e:c4:56:68:3a:7a:1f:
         ec:2a:8b:e6:b0:47:56:4c:72:5e:6a:75:47:5d:17:98:95:b9:
         f9:e2:c4:46:8d:72:19:15:e7:65:3c:01:3c:31:1c:d8:2f:4c:
         09:86:02:5a:46:91:9b:3f:6d:07:cf:ad:18:97:67:7f:70:9b:
         f1:07:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org