Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33352e302f32342d3234203d3e20323634343938.roa
File:                     3137302e37382e33352e302f32342d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          77FcA18lCvkWemUHbjfwgcD17m7gPsZ8LdfZiC8ptSE=
Subject key identifier:   70:21:C1:F2:54:33:A1:09:79:2A:52:2F:9A:87:31:68:5C:EA:6C:B1
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       7268E473FCF15ACAB2AF2B6E5239680AACC56A34
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33352e302f32342d3234203d3e20323634343938.roa
Signing time:             Thu 20 Apr 2023 19:16:56 +0000
ROA not before:           Thu 20 Apr 2023 19:11:56 +0000
ROA not after:            Thu 18 Apr 2024 19:16:56 +0000
asID:                     264498
IP address blocks:        170.78.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:68:e4:73:fc:f1:5a:ca:b2:af:2b:6e:52:39:68:0a:ac:c5:6a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: Apr 20 19:11:56 2023 GMT
            Not After : Apr 18 19:16:56 2024 GMT
        Subject: CN=7021C1F25433A109792A522F9A8731685CEA6CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:49:ec:96:47:b4:49:5b:4b:a3:72:fe:4c:9b:
                    1c:5a:a3:ea:39:40:82:6e:8f:16:11:5f:e4:b4:0c:
                    ae:97:a0:25:a3:71:3d:30:79:a8:ab:c1:7a:6c:a7:
                    74:46:55:d2:83:83:6d:cd:55:a0:b5:26:f1:1b:8c:
                    1c:f2:ad:91:c2:99:7e:fd:cd:7b:8c:3f:46:f3:1d:
                    05:58:07:a7:98:2e:45:91:55:69:97:e6:c9:9a:42:
                    4d:37:82:b2:68:29:95:68:c2:81:e8:b6:4c:74:64:
                    27:f6:51:0f:b6:94:96:64:7d:0b:7d:40:c3:82:9c:
                    04:86:f2:a7:1b:19:df:81:4a:43:b3:35:c1:9b:ab:
                    18:11:e4:c6:09:0e:dd:b0:f2:5e:8c:a8:14:60:71:
                    6d:79:e5:1f:06:26:fd:6f:ba:b1:d4:56:74:9a:5a:
                    ad:7e:80:18:e2:b8:19:61:6f:a7:d6:03:f8:75:b7:
                    58:e3:ea:a7:ba:d2:08:05:91:6f:c5:e7:c2:25:a8:
                    a9:12:e4:f7:80:72:6b:e3:e3:e2:0c:98:47:e7:9a:
                    7e:a0:51:0c:28:1f:56:aa:2a:74:f2:a7:6e:29:99:
                    8d:db:23:f4:d7:da:82:30:b8:6e:62:3f:0c:2d:bc:
                    8c:7d:19:6d:20:8c:46:dc:85:1a:72:b5:3a:40:e3:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:C1:F2:54:33:A1:09:79:2A:52:2F:9A:87:31:68:5C:EA:6C:B1
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3137302e37382e33352e302f32342d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:eb:08:23:c1:78:0d:76:40:2c:76:f4:2e:20:cf:94:a1:37:
         44:43:b2:43:29:2e:fe:8b:24:a3:21:43:30:5c:05:62:8f:95:
         b3:12:dd:ce:f5:e7:74:e7:97:9e:16:93:9f:31:75:ad:34:75:
         1f:ac:a9:7d:4d:a2:63:f3:2c:74:3e:c9:50:82:89:4e:cf:bd:
         37:00:23:20:1f:00:ca:e9:90:cd:42:35:56:0f:2b:22:77:56:
         52:0e:68:ee:5a:4a:0c:78:c9:3e:3f:9d:27:86:9a:97:6e:d4:
         5b:3c:d1:3d:03:55:75:35:cc:7c:ff:9c:71:74:3a:5f:5e:dd:
         63:66:51:84:2d:c6:f2:1f:24:9c:e0:2f:d7:33:94:55:e0:87:
         50:14:24:56:be:11:08:3e:bd:e1:50:d5:ad:87:46:2f:26:6d:
         b4:4c:77:50:c5:83:07:dd:a8:eb:dd:79:f7:b5:33:cb:90:c9:
         13:0b:a7:8e:80:82:07:57:50:fa:3e:39:10:b6:dd:d5:31:c3:
         14:81:79:3d:d8:33:88:64:53:ec:1f:cc:6e:f8:50:e9:63:8e:
         1d:1e:d2:4f:77:6a:5a:dc:6e:0a:ba:8b:1f:a1:5d:b3:6a:2f:
         8d:1e:e7:5c:87:93:98:4b:28:29:8b:3b:af:f3:0f:97:0b:30:
         f8:ae:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:48:03 2025 by rpki-client