Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33342e302f32342d3234203d3e20323634343938.roa
File:                     3137302e37382e33342e302f32342d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          VU2iGXLkgr1XaZ/RrCGwk/iAhDy6omaa0jNrF+gPjPY=
Subject key identifier:   AF:10:B8:19:4B:75:1C:6A:6E:84:6B:B2:10:79:F7:E5:D0:6A:59:1C
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       6E978743A2FF663A35241182DCE0D9C18BC72341
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33342e302f32342d3234203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 17:10:01 +0000
ROA not before:           Thu 18 May 2023 17:05:01 +0000
ROA not after:            Thu 16 May 2024 17:10:01 +0000
asID:                     264498
IP address blocks:        170.78.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:87:43:a2:ff:66:3a:35:24:11:82:dc:e0:d9:c1:8b:c7:23:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 17:05:01 2023 GMT
            Not After : May 16 17:10:01 2024 GMT
        Subject: CN=AF10B8194B751C6A6E846BB21079F7E5D06A591C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:33:ae:8c:2b:97:7c:14:af:d4:f6:75:a5:
                    44:bb:fc:d2:07:2b:2d:51:f9:c6:9f:b7:c2:7a:6e:
                    28:ac:1d:c4:2c:6e:b6:64:11:f5:78:d1:16:ac:f3:
                    42:5a:43:65:cc:15:f0:b5:e6:fc:c7:a9:06:07:4d:
                    f4:b0:23:06:d6:57:df:1a:59:b0:b8:e4:39:5b:23:
                    fb:dd:22:d9:79:da:12:65:6f:8e:96:5c:70:07:13:
                    ae:17:5e:c7:78:af:f6:85:19:81:d5:a9:4d:e5:28:
                    67:d4:3a:0d:7e:08:7d:25:23:8a:b4:31:c8:d9:14:
                    fc:7b:f3:cd:5a:2e:aa:b9:bb:7c:09:8c:cf:f5:8b:
                    7f:2d:3e:d6:f3:fd:00:16:75:73:f8:74:83:ff:a2:
                    f0:f5:09:68:5c:45:3d:1f:e8:a5:54:3b:c0:45:ff:
                    c8:eb:7b:2e:eb:c0:b1:9e:c6:5d:ae:74:ec:20:dd:
                    21:6a:08:83:cf:a2:f2:15:1e:e5:58:9c:67:75:3a:
                    57:8c:66:86:68:f4:5c:7a:dc:4c:f4:45:35:f0:2d:
                    e9:4e:2f:ad:4f:fd:85:1e:bc:1a:f8:03:74:2c:ea:
                    9c:f8:15:ed:37:f6:de:89:09:fb:35:13:76:e7:b3:
                    f1:a5:ad:1d:df:c0:14:fa:a1:65:06:07:9c:48:5a:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:10:B8:19:4B:75:1C:6A:6E:84:6B:B2:10:79:F7:E5:D0:6A:59:1C
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33342e302f32342d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:01:fa:21:f6:2d:f5:3e:bd:07:ca:84:61:36:32:c5:de:4b:
         6c:f2:cc:0b:4c:03:4c:8d:86:8f:5c:38:81:bb:9b:8d:dc:71:
         58:20:0c:6e:e9:8f:40:78:3e:e8:94:9c:4d:f6:df:ab:68:cb:
         c6:a3:4a:b6:28:d9:b4:9f:7c:fc:4b:9a:bc:4a:c1:e7:24:94:
         40:df:36:6e:52:99:60:e0:46:d4:bb:05:66:f3:19:e7:f9:66:
         0b:74:b5:a8:17:fe:5c:b0:b2:18:e7:fd:6a:87:55:bd:e7:35:
         dd:46:a5:80:b1:61:ca:c3:29:f2:05:19:0a:96:85:e9:69:d6:
         97:b1:e2:66:35:2b:fd:2c:c7:cf:46:80:b1:18:a2:bd:e0:2e:
         9d:90:c4:63:66:d7:91:35:ab:a9:5b:dc:74:e4:a9:e7:f0:9b:
         32:37:f8:ec:d8:fd:31:17:aa:ee:70:9c:22:74:a6:fe:62:ea:
         77:9f:ac:3b:46:2c:0d:f5:bc:ae:dd:cd:a5:f3:17:9b:14:b1:
         8c:57:e4:65:a1:51:b7:65:98:21:8a:5f:5e:1c:ed:0e:4f:2d:
         5c:e1:c1:47:9d:bc:45:d4:40:d3:45:68:b7:e3:87:23:02:d6:
         a4:21:3d:01:bd:c7:99:2e:c8:6c:aa:ff:b8:ab:7d:33:51:f0:
         ce:e1:78:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbpeHQ6L/Zjo1JBGC3ODZwYvHI0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCODM1RjYzOEI5NDVBMTdDMkIzRENFRDc4QjlBMDRF
OTQzREJBRjAeFw0yMzA1MTgxNzA1MDFaFw0yNDA1MTYxNzEwMDFaMDMxMTAvBgNV
BAMTKEFGMTBCODE5NEI3NTFDNkE2RTg0NkJCMjEwNzlGN0U1RDA2QTU5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeTOujCuXfBSv1PZ1pUS7/NIH
Ky1R+caft8J6biisHcQsbrZkEfV40Ras80JaQ2XMFfC15vzHqQYHTfSwIwbWV98a
WbC45DlbI/vdItl52hJlb46WXHAHE64XXsd4r/aFGYHVqU3lKGfUOg1+CH0lI4q0
McjZFPx7881aLqq5u3wJjM/1i38tPtbz/QAWdXP4dIP/ovD1CWhcRT0f6KVUO8BF
/8jrey7rwLGexl2udOwg3SFqCIPPovIVHuVYnGd1OleMZoZo9Fx63Ez0RTXwLelO
L61P/YUevBr4A3Qs6pz4Fe039t6JCfs1E3bns/GlrR3fwBT6oWUGB5xIWsudAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrxC4GUt1HGpuhGuyEHn35dBqWRwwHwYDVR0j
BBgwFoAUHLg19ji5RaF8Kz3O14uaBOlD268wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzliV3JZN1ZKY2RnN3ZpNHNqTkpZRWU1QmRHeVA3ZlhzRlplVzZkdGQz
WVkvMC8xQ0I4MzVGNjM4Qjk0NUExN0MyQjNEQ0VENzhCOUEwNEU5NDNEQkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDQjgzNUY2MzhCOTQ1QTE3
QzJCM0RDRUQ3OEI5QTA0RTk0M0RCQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5YldyWTdWSmNkZzd2aTRzak5KWUVlNUJkR3lQN2ZYc0ZaZVc2ZHRkM1lZLzAv
MzEzNzMwMmUzNzM4MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzQzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk4iMA0GCSqGSIb3DQEBCwUAA4IBAQANAfoh9i31
Pr0HyoRhNjLF3kts8swLTANMjYaPXDiBu5uN3HFYIAxu6Y9AeD7olJxN9t+raMvG
o0q2KNm0n3z8S5q8SsHnJJRA3zZuUplg4EbUuwVm8xnn+WYLdLWoF/5csLIY5/1q
h1W95zXdRqWAsWHKwynyBRkKloXpadaXseJmNSv9LMfPRoCxGKK94C6dkMRjZteR
NaupW9x05Knn8JsyN/js2P0xF6rucJwidKb+Yup3n6w7RiwN9byu3c2l8xebFLGM
V+RloVG3ZZghil9eHO0OTy1c4cFHnbxF1EDTRWi344cjAtakIT0BvceZLshsqv+4
q30zUfDO4Xgu
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:21:11 2025 by rpki-client