Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33332e302f32342d3234203d3e20323634343938.roa
File:                     3137302e37382e33332e302f32342d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          FvaVoxRJE9uZH/z+5Yp4gnmwowv/pxKu/LfNcArQ/eg=
Subject key identifier:   94:4C:CA:A0:6E:B0:85:0C:D7:62:69:D2:32:94:AD:C0:81:BB:89:9B
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       6C236C5EB069322C510E27E46787652A11C6946E
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33332e302f32342d3234203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 14:08:54 +0000
ROA not before:           Thu 18 May 2023 14:03:54 +0000
ROA not after:            Thu 16 May 2024 14:08:54 +0000
asID:                     264498
IP address blocks:        170.78.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:23:6c:5e:b0:69:32:2c:51:0e:27:e4:67:87:65:2a:11:c6:94:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 14:03:54 2023 GMT
            Not After : May 16 14:08:54 2024 GMT
        Subject: CN=944CCAA06EB0850CD76269D23294ADC081BB899B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:46:36:60:9d:44:a7:53:89:36:8c:dc:ad:cf:
                    88:ac:02:c9:4b:09:89:91:3a:dc:86:ab:a1:44:73:
                    f8:69:40:7f:36:a5:42:ab:05:75:98:51:b2:0b:29:
                    ca:68:f5:88:04:73:af:c3:b2:93:5e:81:a2:b9:c5:
                    c2:08:ba:f4:af:c2:40:ad:b8:b2:e7:e0:46:18:52:
                    dc:c1:e7:6c:66:12:25:e0:73:51:ef:4a:3b:1d:79:
                    4e:07:82:83:e2:c4:71:9a:af:54:62:4e:27:1c:bd:
                    07:0e:c7:87:09:0d:a1:a9:a3:a0:73:79:19:7e:c5:
                    a6:25:eb:66:47:5d:e8:f3:bd:b6:1c:5c:9b:5c:c9:
                    d8:ab:3d:e4:f4:78:af:d0:56:f7:bb:2b:16:30:1b:
                    f2:6a:5c:38:24:ae:f5:a7:e4:9d:73:3d:28:69:cb:
                    d3:29:7d:4f:d1:c5:79:e9:ef:da:0a:28:41:9e:fe:
                    0e:21:a5:df:34:ee:b9:74:a2:63:2e:9a:7f:b5:61:
                    14:80:14:87:c9:77:e2:55:cc:b5:fa:4a:82:fb:18:
                    8d:38:1f:e1:47:75:65:26:95:53:91:86:26:cd:f1:
                    81:15:e1:60:e5:e1:c1:79:1e:96:6f:6c:7a:fd:e0:
                    89:10:aa:ad:e7:de:38:dc:e6:9c:ad:09:d2:ca:8a:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4C:CA:A0:6E:B0:85:0C:D7:62:69:D2:32:94:AD:C0:81:BB:89:9B
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33332e302f32342d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:85:5f:06:08:6d:ac:67:0a:88:b3:6b:df:f4:c2:e1:0a:d7:
         03:98:fd:20:c1:fb:98:eb:fe:66:01:cf:d9:3d:8a:9f:ea:a9:
         4e:fa:bc:21:8b:bf:02:71:43:68:15:99:f4:d6:f2:9c:2d:31:
         00:59:f5:96:b4:5e:cc:25:5a:19:7b:0a:1d:30:a1:e0:0f:c2:
         0b:ce:90:df:02:af:a9:f7:e1:e1:12:63:f1:37:78:c6:78:3b:
         ef:d4:e3:63:3c:3c:66:92:00:59:87:1a:8a:b7:71:2c:87:53:
         07:0a:f9:51:af:70:b1:0d:11:eb:09:22:49:88:54:be:16:5e:
         14:d1:c9:1c:c6:63:11:83:f2:c6:4a:dc:ab:d5:2b:50:2f:2c:
         78:6d:a4:ad:7a:1c:b6:1f:14:b1:42:f2:2e:47:8e:c6:de:9c:
         c5:a8:74:4a:14:c2:9d:80:c9:7c:71:3c:c9:ab:8f:99:8f:cf:
         06:1f:c7:82:45:5c:bf:92:2c:02:97:f1:7f:8b:0b:dc:a9:96:
         d4:f6:a2:aa:b8:20:82:87:92:39:2a:ea:6c:92:fe:25:fa:8d:
         92:94:de:d3:ce:3d:db:d6:11:fb:90:12:0f:f5:87:9f:09:3e:
         76:eb:25:5c:54:17:06:09:86:e3:c1:5f:4c:65:05:12:c7:a8:
         2f:ac:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:23 2025 by rpki-client