Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
File:                     3137302e37382e38302e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          yntiR9sMAMEqnmP4kf+8eU146VZtsUFMmuW1taIen8w=
Subject key identifier:   6B:4F:44:D1:3B:F3:CB:A6:68:A9:75:56:41:8E:59:9A:32:A0:45:51
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       41C99723FCFB607593BB2D7B38915E19BC3E692D
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:07 +0000
ROA not before:           Fri 22 Dec 2023 20:20:07 +0000
ROA not after:            Fri 20 Dec 2024 20:25:07 +0000
asID:                     263073
IP address blocks:        170.78.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c9:97:23:fc:fb:60:75:93:bb:2d:7b:38:91:5e:19:bc:3e:69:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:07 2023 GMT
            Not After : Dec 20 20:25:07 2024 GMT
        Subject: CN=6B4F44D13BF3CBA668A97556418E599A32A04551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:69:f4:f7:fb:c5:30:63:52:4a:5a:f2:d1:
                    15:ca:a0:d0:c9:77:ed:6d:e0:9a:0e:03:d8:63:b5:
                    03:dd:8d:dc:cb:73:cc:12:64:3f:33:40:6d:b3:38:
                    14:98:b5:2d:b2:63:62:ab:4f:99:d4:82:64:5d:86:
                    4b:4b:6d:83:23:a8:43:60:ad:98:c8:0e:23:79:6a:
                    83:3b:58:e3:75:6b:ce:10:1f:52:9e:e0:ca:a7:87:
                    ff:5d:4c:d3:e9:5d:5e:f0:31:fd:55:cf:49:02:2a:
                    c3:cb:9e:78:8b:43:b1:85:a2:21:1d:d8:21:11:db:
                    57:97:38:ba:d4:66:2a:54:4b:af:9e:33:e1:6a:7a:
                    23:36:5f:bc:e3:30:88:a2:55:26:bc:5f:ad:9f:6b:
                    32:b7:da:59:27:20:6e:a6:27:b1:d6:a9:de:58:01:
                    83:de:32:11:94:a6:2d:1c:5e:ab:40:49:b9:77:c2:
                    4f:8c:76:bb:47:9a:ef:39:19:cd:78:fa:4e:ff:f3:
                    a4:7f:27:c3:6c:4c:0e:c7:88:3c:c1:b4:f2:01:46:
                    7f:dc:81:40:82:8d:ca:5e:4f:45:cb:fb:3f:0e:d1:
                    e2:4f:f2:4f:ef:ec:72:18:23:cc:c4:cf:96:81:6b:
                    03:8c:9b:e4:35:16:cc:a7:2d:f0:01:9c:30:47:87:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:44:D1:3B:F3:CB:A6:68:A9:75:56:41:8E:59:9A:32:A0:45:51
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:34:8b:e7:55:ac:ef:f9:a2:d3:9a:ab:1f:c9:5b:e7:6c:
         d0:9a:f5:5a:db:3a:70:6b:aa:5d:c2:ec:3d:b0:60:f6:64:ce:
         b5:7a:2b:2c:d6:11:e4:e7:30:81:c7:3a:5c:6b:b6:69:38:9c:
         10:0b:f0:f8:d2:1a:1a:9f:5f:1c:95:18:47:de:3e:79:0d:39:
         bf:94:e8:da:a4:bc:7c:ea:ac:60:51:f4:06:cb:4b:40:c2:29:
         84:96:82:e9:ed:43:e7:b6:0c:4c:68:1d:34:dc:32:ba:18:1f:
         11:f1:43:5a:71:86:3f:65:73:82:7a:45:92:85:83:c0:b3:3a:
         76:c8:3e:c1:df:13:2d:38:9d:79:58:78:e4:eb:b9:57:54:32:
         58:a8:29:40:b9:92:73:5b:30:41:45:38:6f:8f:ef:8f:f6:bd:
         db:25:9b:2c:48:5f:80:fa:f2:2d:b9:77:15:71:f5:6f:d9:27:
         43:3e:b9:ef:1c:a9:5f:25:2e:4e:e3:0a:4f:a8:96:2c:e8:11:
         5e:f1:73:93:2f:f1:5b:81:a5:b2:46:8f:e1:94:e1:0e:88:d8:
         75:f2:a0:0a:14:40:7e:7f:63:63:14:2f:8c:1b:4e:f5:48:7f:
         3c:70:71:0f:28:dc:23:58:4c:c6:7b:7f:9e:44:95:44:81:8c:
         4a:2a:9a:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQcmXI/z7YHWTuy17OJFeGbw+aS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDdaFw0yNDEyMjAyMDI1MDdaMDMxMTAvBgNV
BAMTKDZCNEY0NEQxM0JGM0NCQTY2OEE5NzU1NjQxOEU1OTlBMzJBMDQ1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDncmn09/vFMGNSSlry0RXKoNDJ
d+1t4JoOA9hjtQPdjdzLc8wSZD8zQG2zOBSYtS2yY2KrT5nUgmRdhktLbYMjqENg
rZjIDiN5aoM7WON1a84QH1Ke4Mqnh/9dTNPpXV7wMf1Vz0kCKsPLnniLQ7GFoiEd
2CER21eXOLrUZipUS6+eM+FqeiM2X7zjMIiiVSa8X62fazK32lknIG6mJ7HWqd5Y
AYPeMhGUpi0cXqtASbl3wk+MdrtHmu85Gc14+k7/86R/J8NsTA7HiDzBtPIBRn/c
gUCCjcpeT0XL+z8O0eJP8k/v7HIYI8zEz5aBawOMm+Q1FsynLfABnDBHh8b7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUa09E0Tvzy6ZoqXVWQY5ZmjKgRVEwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzMwMmUzNzM4MmUzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk5QMA0GCSqGSIb3DQEBCwUAA4IBAQChmjSL51Ws
7/mi05qrH8lb52zQmvVa2zpwa6pdwuw9sGD2ZM61eiss1hHk5zCBxzpca7ZpOJwQ
C/D40hoan18clRhH3j55DTm/lOjapLx86qxgUfQGy0tAwimEloLp7UPntgxMaB00
3DK6GB8R8UNacYY/ZXOCekWShYPAszp2yD7B3xMtOJ15WHjk67lXVDJYqClAuZJz
WzBBRThvj++P9r3bJZssSF+A+vItuXcVcfVv2SdDPrnvHKlfJS5O4wpPqJYs6BFe
8XOTL/FbgaWyRo/hlOEOiNh18qAKFEB+f2NjFC+MG071SH88cHEPKNwjWEzGe3+e
RJVEgYxKKpqZ
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org