Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38332e302f32342d3234203d3e20323633303733.roa
File:                     3137302e37382e38332e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          y171+0atUwT76iFzAdbPbnONqt8hm8ILuHeG2S9Aru4=
Subject key identifier:   6F:15:63:3B:8C:DE:3F:D7:BC:55:17:0D:BA:62:0C:57:30:BB:78:AB
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       726D3C9D8F2B78944A93DC25EA8661A6617A43C4
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38332e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:10 +0000
ROA not before:           Fri 22 Dec 2023 20:20:10 +0000
ROA not after:            Fri 20 Dec 2024 20:25:10 +0000
asID:                     263073
IP address blocks:        170.78.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6d:3c:9d:8f:2b:78:94:4a:93:dc:25:ea:86:61:a6:61:7a:43:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:10 2023 GMT
            Not After : Dec 20 20:25:10 2024 GMT
        Subject: CN=6F15633B8CDE3FD7BC55170DBA620C5730BB78AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:bb:54:ff:54:e6:8d:2c:37:be:27:f5:e6:
                    be:8f:cd:e4:ca:00:29:2f:62:25:6d:2b:c8:e0:82:
                    73:25:a7:51:27:4f:fe:64:c2:f0:68:63:9e:7e:13:
                    33:55:b3:e2:0d:a3:ca:18:df:76:72:33:68:ed:42:
                    9e:66:31:3a:7a:6e:4b:2f:b6:40:5b:fa:13:9a:c3:
                    0e:74:84:47:31:98:d2:c6:5c:37:41:5a:f5:75:bc:
                    ff:ac:9a:71:62:4c:c2:00:44:95:87:b1:b1:83:fd:
                    dd:bc:f3:69:92:a9:65:9b:d1:c6:ec:0f:8a:7a:78:
                    9f:9f:08:e4:92:bc:2a:3c:89:cd:7d:65:95:07:d9:
                    07:44:16:3c:0e:ff:1d:01:6a:4b:a7:82:6f:37:51:
                    ee:20:ad:a3:ad:c1:3b:c1:02:3b:4c:75:34:de:d1:
                    ab:23:ae:6a:d2:69:34:e8:b2:39:d6:59:f7:c6:31:
                    2a:2c:ef:be:31:43:a8:73:2e:18:f1:03:d7:40:18:
                    36:68:88:40:51:81:8f:d1:64:b2:86:08:cf:48:64:
                    a5:3d:d7:2d:09:76:60:df:7e:76:9c:df:a1:41:c6:
                    cf:84:00:de:20:85:3f:e2:3a:48:38:1f:05:b7:fb:
                    29:98:77:a5:6d:74:49:c6:6e:56:75:e0:d4:21:20:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:15:63:3B:8C:DE:3F:D7:BC:55:17:0D:BA:62:0C:57:30:BB:78:AB
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38332e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:41:d1:26:3e:ad:9e:39:94:f7:40:75:62:b9:8d:a2:72:9e:
         cc:06:b6:d8:61:ae:cc:28:d5:ef:ae:ac:78:a1:70:12:54:89:
         f8:b4:d5:48:6f:33:64:33:e5:ca:e3:0f:1b:72:3f:db:2f:1b:
         3a:82:93:2a:b7:1a:da:0e:74:a0:6b:51:a2:3a:dc:fb:65:32:
         f9:9d:a9:b2:3d:4e:e6:38:2c:df:1c:f0:06:ad:30:53:9a:a9:
         cd:4f:aa:e7:f1:c3:8d:31:21:d1:1b:fe:e0:f0:83:d9:81:74:
         f2:a4:3a:17:2d:f9:08:61:cd:2f:5b:2c:4e:a5:1b:7e:9e:a0:
         b7:ca:87:1e:cf:39:13:37:18:22:8f:d1:e3:7d:85:ff:ad:fa:
         d2:7f:7d:ca:83:13:73:e8:20:91:f7:51:32:7c:8e:64:3d:08:
         51:b1:cf:8e:70:4a:f6:6a:43:2f:6e:70:83:5b:08:a8:6e:6e:
         24:96:0d:05:44:66:08:2d:56:d0:2b:1a:ce:91:d7:67:6f:05:
         a5:5b:fa:07:bb:1e:84:bd:3e:f3:fb:9d:bd:ae:de:36:3f:b3:
         d2:c4:5c:05:28:06:e1:12:0f:8b:74:e9:dc:40:97:23:d4:24:
         60:be:70:93:b3:14:48:80:c3:48:f5:f5:f2:84:c8:39:49:0b:
         91:36:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org