Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
File:                     3137302e37382e38302e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          Xyjj+aYgbFpeplh4xNG2NuPkjQQmrzntTL8tRpeAwJI=
Subject key identifier:   5C:C5:01:B2:FB:AC:68:8F:C9:6F:BA:C4:77:DA:CE:B2:51:4C:A9:2F
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       541269AFF2AC068BD03CA9A32E6C765BC3C640B0
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:18 +0000
ROA not before:           Wed 05 Mar 2025 22:05:18 +0000
ROA not after:            Wed 04 Mar 2026 22:10:18 +0000
asID:                     263073
IP address blocks:        170.78.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:12:69:af:f2:ac:06:8b:d0:3c:a9:a3:2e:6c:76:5b:c3:c6:40:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:18 2025 GMT
            Not After : Mar  4 22:10:18 2026 GMT
        Subject: CN=5CC501B2FBAC688FC96FBAC477DACEB2514CA92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:ba:f6:c0:d6:4e:7d:bf:14:d4:76:e2:e6:
                    16:cb:6e:c4:50:11:20:82:79:0b:45:44:16:23:cd:
                    64:50:f4:c9:6f:b4:db:37:ec:1c:c8:76:92:79:f9:
                    d7:25:ea:ff:d8:80:a0:b8:c4:6d:3a:2b:78:42:19:
                    c4:a1:a7:cc:1d:b8:29:65:b5:f5:2a:3f:9b:15:04:
                    5b:b2:50:50:7f:92:1b:01:97:1b:fa:f2:70:6e:9b:
                    d7:67:f8:b4:74:44:5d:69:af:85:21:93:05:9e:32:
                    65:8c:7d:12:14:42:af:48:e1:88:45:61:0d:70:44:
                    24:e0:f6:b3:53:b6:cf:cc:58:7b:7b:dd:ec:86:0c:
                    00:a8:f6:b6:22:3e:12:f1:04:a4:b4:aa:1b:ee:4a:
                    ba:2c:9a:0f:02:04:70:39:45:37:39:23:54:83:3d:
                    b8:f0:5b:9d:98:5f:e7:65:f5:e8:63:9c:02:b7:f3:
                    95:3e:76:b4:91:51:8d:e6:b1:5d:f8:2f:12:8d:69:
                    88:9b:1c:97:ef:98:e4:ac:32:02:5d:bc:dd:b8:c9:
                    06:a1:57:94:3f:51:67:2c:09:cf:e8:78:94:84:a6:
                    bf:d9:e1:fa:59:2d:4e:f4:4c:c1:f7:d6:57:9d:97:
                    9d:c2:dc:c0:39:62:e3:11:14:5f:aa:5d:ce:f1:59:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:01:B2:FB:AC:68:8F:C9:6F:BA:C4:77:DA:CE:B2:51:4C:A9:2F
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ed:4e:b0:4a:53:7f:a8:f0:5d:6c:6a:d4:66:20:4b:2c:47:
         1c:bb:48:cb:eb:c7:17:1b:5d:70:bd:7a:79:09:b5:aa:31:ec:
         a0:75:35:42:c0:1d:ad:47:54:c8:ed:03:76:0c:00:cd:ea:ad:
         39:c6:8d:e6:bc:ca:8c:b8:b0:74:ef:a3:e0:03:a3:d8:f1:c1:
         34:61:02:99:a4:43:ad:01:83:1b:f1:39:9e:0e:64:83:71:39:
         10:b4:73:ad:b4:53:ca:7c:59:e2:f8:5b:34:fe:ea:03:d4:14:
         ba:ec:b4:35:68:76:80:38:34:4e:18:04:6c:0b:65:28:9b:0f:
         b7:82:ba:b4:f4:81:a2:9d:d1:48:fd:ec:94:29:34:63:38:b6:
         0a:0b:9f:4c:b1:35:91:7c:86:a4:91:27:8d:b1:35:7f:7d:57:
         a6:7d:5a:d9:d1:23:ad:96:d2:43:30:bb:ae:50:c8:0d:39:a4:
         93:c1:e2:03:88:eb:a5:47:c7:76:5f:7a:0a:c7:7f:74:63:45:
         6f:34:41:d2:ad:e8:2f:2a:5a:6c:23:ad:53:e0:b6:00:e7:30:
         e7:3b:92:cd:d5:28:79:d2:47:8f:a3:72:7e:2b:d5:9c:e9:55:
         d5:36:60:c1:a0:08:6f:33:e5:1b:8b:d6:ed:38:f4:5a:29:1e:
         af:ef:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:57:32 2025 by rpki-client