Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137302e37382e342e302f32322d3332203d3e203238353938.roa
File:                     3137302e37382e342e302f32322d3332203d3e203238353938.roa (raw, json)
Hash identifier:          2eZitXm45NSmJ+CtISFa8TrjSdiJg9JKO+8mX4+1keA=
Subject key identifier:   87:49:65:B6:1E:98:7D:49:E9:E6:57:14:43:F3:B0:03:7C:AE:76:74
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       09B476DE2233033DAD13E2B8FD2B3AAE47BF7C4C
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137302e37382e342e302f32322d3332203d3e203238353938.roa
Signing time:             Fri 20 Oct 2023 22:59:09 +0000
ROA not before:           Fri 20 Oct 2023 22:54:09 +0000
ROA not after:            Fri 18 Oct 2024 22:59:09 +0000
asID:                     28598
IP address blocks:        170.78.4.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b4:76:de:22:33:03:3d:ad:13:e2:b8:fd:2b:3a:ae:47:bf:7c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 20 22:54:09 2023 GMT
            Not After : Oct 18 22:59:09 2024 GMT
        Subject: CN=874965B61E987D49E9E6571443F3B0037CAE7674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:f0:86:05:63:b8:26:10:42:da:f6:cb:cb:
                    b7:c6:4b:e9:7c:c1:fa:37:ca:c7:30:f1:1c:53:7e:
                    4e:02:8e:6d:76:93:58:f8:a2:89:56:c6:1c:a6:97:
                    d5:1d:03:65:c4:0e:0b:a2:be:22:8b:ca:ef:5b:90:
                    83:e2:5c:ea:4b:3d:18:99:55:53:8c:e1:9e:f2:bf:
                    95:59:31:c9:e4:6d:a5:c8:ab:7b:c0:a0:21:d8:66:
                    90:88:15:27:d0:8a:02:4a:7d:64:a1:ab:75:77:44:
                    f8:01:19:7a:7b:ac:12:ea:bf:90:2c:ee:07:a3:aa:
                    03:43:41:f1:00:ce:6c:5f:10:06:57:f6:ab:ca:07:
                    8b:b3:26:b6:8d:b2:ed:ae:a9:d2:ec:29:40:55:92:
                    a7:90:70:71:03:f7:71:08:7d:40:1c:12:c3:ad:8c:
                    fd:58:98:e2:51:84:d4:e5:a1:c1:96:fa:97:f8:7a:
                    73:c4:09:27:5f:04:ed:18:cb:a5:8a:52:f5:8f:82:
                    92:a4:ab:42:3d:db:fd:c1:c8:e1:c0:63:fd:98:fd:
                    dc:07:b7:0c:cc:70:29:b0:43:39:68:a4:01:7d:7a:
                    75:21:bc:04:64:ae:50:34:2c:34:84:52:de:ce:58:
                    ab:a0:d0:2a:d8:59:1a:4a:23:16:92:c0:51:aa:71:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:49:65:B6:1E:98:7D:49:E9:E6:57:14:43:F3:B0:03:7C:AE:76:74
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137302e37382e342e302f32322d3332203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:51:21:3e:41:af:6c:74:41:10:92:db:54:e2:97:7a:7e:90:
         a2:4e:29:82:73:22:4b:3e:38:8d:51:22:a6:1e:49:f0:42:6b:
         7d:4d:00:60:92:3a:83:1e:38:f4:1f:0f:27:6a:e7:0a:ad:91:
         9b:74:31:50:ee:ea:21:57:c0:7b:2f:a3:c0:6c:c3:bb:89:40:
         f1:b7:0e:79:ae:2e:85:47:dc:2b:04:d5:e7:b7:9d:43:c8:53:
         26:dd:b5:97:40:02:35:a7:af:e9:3d:80:95:cf:5f:4a:20:ef:
         f2:11:6e:f8:df:57:3b:86:c0:71:92:8e:0e:a9:83:b0:6e:8e:
         a6:95:71:c9:51:c2:c6:46:aa:8e:f7:fb:ca:86:b9:42:a5:32:
         6f:62:07:30:19:91:30:4e:e7:05:1f:31:3a:37:33:dc:93:ac:
         c0:df:52:e7:97:b5:bf:d7:9d:2f:12:e6:21:78:1c:03:59:8d:
         7d:3f:de:56:64:99:5e:ad:28:76:f8:a1:07:ac:fd:b9:a8:4a:
         58:bd:3a:50:91:44:ae:45:39:51:2e:40:cb:86:d7:85:18:2c:
         19:a6:e5:d9:ca:a8:20:4f:80:76:e9:b0:8e:70:98:81:eb:a4:
         b3:fa:60:d2:0a:72:ea:74:76:38:f0:ca:ad:3d:fc:51:27:fc:
         26:61:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:48 2025 by rpki-client