Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32342d3234203d3e20323634343938.roa
File:                     3137302e37382e33322e302f32342d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          NX/1ZS1CjRbEWCjV2n6C18yVWeBtDFztJziG9ZOpXcw=
Subject key identifier:   7F:50:CB:59:12:03:28:AC:04:ED:93:91:7D:1E:AE:7C:4F:FA:5E:0D
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       52A42E1C2BC0FFF3C74A8EBF9BF2F00A88A9BABF
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32342d3234203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 14:08:53 +0000
ROA not before:           Thu 18 May 2023 14:03:53 +0000
ROA not after:            Thu 16 May 2024 14:08:53 +0000
asID:                     264498
IP address blocks:        170.78.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a4:2e:1c:2b:c0:ff:f3:c7:4a:8e:bf:9b:f2:f0:0a:88:a9:ba:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 14:03:53 2023 GMT
            Not After : May 16 14:08:53 2024 GMT
        Subject: CN=7F50CB59120328AC04ED93917D1EAE7C4FFA5E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:8c:6a:ba:f7:86:3a:8c:24:00:31:49:85:
                    1b:92:3a:01:c5:db:09:cc:f1:8e:69:c2:85:4f:92:
                    7d:4e:59:b9:71:9c:1f:91:22:b7:ea:bf:75:03:41:
                    4c:a7:9d:9d:f3:8c:33:2f:a7:75:89:25:07:ef:2c:
                    1c:aa:2e:99:a8:bc:b1:bf:a5:ab:c9:1b:94:25:1d:
                    50:ee:c0:d8:a8:8b:3e:05:e9:27:39:90:69:b8:52:
                    40:69:e9:f9:1f:2f:53:7d:e1:2a:23:2a:c1:07:56:
                    41:09:00:d3:5c:04:00:2c:0a:87:7d:0c:fb:60:fc:
                    ea:ed:c0:8b:b1:a3:d8:01:f7:95:cd:f6:9b:35:c6:
                    39:e6:cd:2e:9c:04:fb:a5:5c:39:54:69:23:c8:42:
                    7d:58:9a:48:bb:5d:4e:a2:1c:fd:35:2b:af:8b:57:
                    db:2b:c2:92:bc:12:8f:dc:6b:61:c7:71:a3:96:52:
                    c7:ec:92:89:e6:24:b4:e0:c8:2f:96:3f:60:cc:56:
                    4e:14:f7:51:b8:de:5c:11:57:23:1a:74:59:37:4f:
                    c9:06:17:e0:8b:7c:b5:cd:a6:e2:e4:d6:43:43:eb:
                    4c:42:18:f9:f3:c5:7a:29:84:8e:57:ab:f3:de:da:
                    a0:04:06:6f:30:fa:fb:c8:c7:28:c7:5d:48:03:9f:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:CB:59:12:03:28:AC:04:ED:93:91:7D:1E:AE:7C:4F:FA:5E:0D
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33322e302f32342d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:70:47:a2:68:d4:5d:e1:36:f2:c2:df:bc:e2:e0:bd:9f:c5:
         49:5c:fd:8c:25:73:e9:e8:26:78:9b:24:74:cf:b7:b8:f3:40:
         0b:74:d7:fb:49:51:13:65:20:14:77:4a:0b:5f:14:1f:2b:ff:
         69:20:d4:b3:9c:c3:c7:a1:e7:cd:45:e4:80:f8:0e:21:5f:0d:
         ab:07:56:45:ff:bb:71:2c:f1:96:d8:68:7f:4d:ee:28:9c:d9:
         90:e6:23:05:85:4d:ab:3d:68:86:42:40:a5:3a:42:28:11:f4:
         57:fc:59:ab:22:74:64:c6:30:8e:5e:ce:88:33:78:c7:a4:e8:
         67:b5:a0:1a:6f:e0:c2:4a:8f:6a:1c:32:b1:2f:51:25:7c:f7:
         ab:50:76:8b:b8:17:30:2c:34:ab:d8:06:80:b9:c5:0f:f6:1d:
         aa:96:f3:be:c9:21:cf:42:1e:be:32:0b:c8:26:25:98:d4:77:
         6b:43:2c:19:d2:08:5e:3a:78:96:f0:95:95:5c:ee:52:c5:3c:
         70:42:c6:35:33:5b:85:3b:e1:53:8d:23:27:00:ec:32:77:62:
         17:4f:66:ee:7e:d0:f0:d6:1c:01:90:ca:65:ae:d1:25:d6:01:
         6f:cd:b1:00:ff:87:f8:26:9d:a4:a5:50:d2:7f:38:4e:9e:da:
         bf:99:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:25 2025 by rpki-client