Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32332d3234203d3e20323634343938.roa
File:                     3137302e37382e33322e302f32332d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          eIhCb+Ud0op2QWBbHPLJ99v//I0Ps87fcfUa1SYeA3E=
Subject key identifier:   D9:AE:AE:CD:C7:E2:E6:D8:2B:87:8E:7F:87:AD:9A:E2:DA:A7:8A:A7
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       3C514D65D125FC8C296B848A51FE18FFB44A32E1
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32332d3234203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 17:06:27 +0000
ROA not before:           Thu 18 May 2023 17:01:27 +0000
ROA not after:            Thu 16 May 2024 17:06:27 +0000
asID:                     264498
IP address blocks:        170.78.32.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:51:4d:65:d1:25:fc:8c:29:6b:84:8a:51:fe:18:ff:b4:4a:32:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 17:01:27 2023 GMT
            Not After : May 16 17:06:27 2024 GMT
        Subject: CN=D9AEAECDC7E2E6D82B878E7F87AD9AE2DAA78AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:4b:89:18:71:e9:f1:0c:11:21:32:d3:28:
                    9a:bd:82:c2:07:e8:f7:88:95:4e:66:95:fd:28:b3:
                    21:f6:15:3d:83:c6:da:a0:24:a4:e3:c6:e3:b9:e1:
                    ac:92:53:27:92:9b:9c:fb:a1:ad:48:ec:9b:b3:f8:
                    63:d7:e4:77:da:0d:30:79:c9:49:b6:b0:92:47:5c:
                    e8:71:45:f3:ab:e6:81:81:34:1d:e1:c5:80:4a:70:
                    41:aa:da:d4:90:b5:fc:c1:99:4c:3c:e4:1a:fa:9f:
                    96:5a:14:be:31:aa:b9:06:11:20:83:6b:d9:ae:6a:
                    cc:49:49:ae:d3:41:29:ef:2a:a1:5a:d4:ba:58:7a:
                    c3:52:86:14:c8:4e:89:56:ef:ed:53:4b:dd:76:4f:
                    19:60:ef:a8:7f:ae:17:15:ec:e1:ce:97:e3:5d:55:
                    8b:f7:3f:45:83:90:27:fe:d8:c9:1b:2f:ca:f0:12:
                    4e:5a:59:38:c9:60:9b:25:e0:5c:86:62:57:87:46:
                    6b:00:7d:5f:bf:18:44:fc:d5:ad:aa:f7:c3:a7:8f:
                    42:f8:25:75:4a:9c:78:39:41:d8:a2:99:d6:f2:22:
                    1c:46:1c:84:ad:b1:09:a6:92:9d:da:8b:a2:44:f1:
                    01:52:ee:a8:49:43:66:a8:fd:f8:c6:6d:bd:4b:48:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AE:AE:CD:C7:E2:E6:D8:2B:87:8E:7F:87:AD:9A:E2:DA:A7:8A:A7
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32332d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:63:ff:7b:db:a4:0f:83:eb:68:f9:4b:27:e5:a5:4a:da:5a:
         1c:47:09:9d:4f:2e:23:bd:f2:4d:a4:bc:12:60:bc:30:2d:eb:
         f6:61:7c:6d:a4:d7:6f:06:78:ae:b2:e9:3f:14:26:e2:1a:b0:
         db:68:f0:13:f9:5a:62:bc:b1:3f:e1:5e:0c:ce:ab:c0:2f:6e:
         30:72:de:9b:16:fd:34:69:55:fb:1e:44:ff:01:81:fa:dc:65:
         02:5d:18:31:31:21:ad:b5:a4:84:9c:a4:80:52:96:4a:be:6d:
         e5:4b:1e:fe:08:40:5a:b5:99:47:2e:fc:53:b1:8c:f9:1c:46:
         b5:4e:84:c3:5d:db:6c:b5:5a:69:d8:ef:16:63:65:46:38:d3:
         62:25:a0:73:ef:23:42:ff:7b:66:cf:80:b1:53:ee:9d:e3:ad:
         31:b3:09:cc:c0:6c:4c:4f:26:3b:e8:d9:7e:7a:d7:36:00:01:
         e3:e1:e0:6f:ca:de:c3:36:71:e0:bf:46:2e:96:2f:1f:dc:fe:
         54:b1:7c:c9:a8:37:dc:8d:a3:43:a8:f7:f4:0d:ed:fb:37:91:
         0b:ef:fc:3d:b9:48:d3:68:61:92:7e:4f:be:dc:e0:75:3c:b0:
         9f:c9:28:ea:92:df:6a:70:47:f9:2b:0e:f4:7c:53:ef:0a:ba:
         c7:00:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org