Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39332e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          L8oiVQ4xUopHmRVn7hS8KkenUeha/1S2BhHRAqayA08=
Subject key identifier:   CA:DE:3D:75:ED:F6:AC:03:64:E5:24:89:BC:90:C1:53:82:97:99:BA
Certificate issuer:       /CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Certificate serial:       476611A6971CBCC5B0716F525E5B344C7FC0EE21
Authority key identifier: A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
Signing time:             Thu 26 Dec 2024 15:00:32 +0000
ROA not before:           Thu 26 Dec 2024 14:55:32 +0000
ROA not after:            Thu 25 Dec 2025 15:00:32 +0000
asID:                     265500
IP address blocks:        170.78.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:11:a6:97:1c:bc:c5:b0:71:6f:52:5e:5b:34:4c:7f:c0:ee:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E125638591A773701BFD72EE9FA738B6EAA454
        Validity
            Not Before: Dec 26 14:55:32 2024 GMT
            Not After : Dec 25 15:00:32 2025 GMT
        Subject: CN=CADE3D75EDF6AC0364E52489BC90C153829799BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:13:81:c7:f0:cd:2a:54:33:7d:1e:61:84:
                    14:a1:03:be:9d:9a:ee:10:d9:c7:ad:39:4f:c4:80:
                    2b:6b:17:f1:98:69:4d:e4:bd:30:1b:55:f3:6c:d3:
                    42:c0:e7:cc:71:dd:9d:d4:6d:25:49:31:ec:f7:80:
                    40:e4:5a:bc:66:c8:fd:3a:cc:70:87:16:a0:5e:e0:
                    b0:d1:b5:e1:ee:4b:e7:da:15:11:9d:5b:47:51:8d:
                    52:d8:a0:49:57:e7:c5:e2:90:bd:88:bc:26:e6:5c:
                    ef:cf:80:69:ff:c6:f8:03:63:84:a9:f0:5c:77:a3:
                    a5:dd:e5:7a:3d:12:51:18:e8:af:aa:75:9e:a8:b5:
                    c0:5b:1a:f1:d5:57:85:a0:20:f8:7b:1a:b2:4a:92:
                    e3:a7:84:6f:dd:ad:ed:80:56:b2:c0:4b:9a:ea:aa:
                    0b:ad:c8:d3:67:be:68:54:a5:8f:39:31:53:33:61:
                    bd:04:6b:93:dd:72:dd:41:b8:0c:42:b1:a3:b3:79:
                    30:6a:19:04:89:64:10:21:16:59:69:6b:82:a5:b9:
                    90:70:07:c1:dc:48:16:fd:02:9d:b1:5e:1c:7a:f8:
                    b3:6c:3e:af:2e:73:a4:a6:b2:45:d4:75:25:96:92:
                    51:98:f1:98:3b:57:e7:5e:06:18:df:5b:f6:5b:79:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:3D:75:ED:F6:AC:03:64:E5:24:89:BC:90:C1:53:82:97:99:BA
            X509v3 Authority Key Identifier:
                keyid:A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:2e:02:1e:97:70:87:32:11:24:0a:1a:8b:63:88:bf:b3:
         1d:19:86:be:ea:cd:da:24:6a:64:27:4d:fa:94:d3:fd:ec:b2:
         44:24:3d:8f:4c:ef:0c:bb:7a:91:12:6c:71:01:4c:b1:76:83:
         0e:7c:eb:7e:7d:51:d8:60:2c:ea:05:b6:56:95:ba:72:af:c1:
         70:87:6b:ee:77:ac:8f:ea:d8:39:b8:42:47:62:ab:ae:45:19:
         d1:a6:e7:0c:ad:fe:a1:74:6d:e6:b4:44:4d:c8:d6:f4:9b:46:
         60:16:5c:0b:92:b8:19:a2:95:8c:25:dd:7d:b2:64:f3:2a:e5:
         9c:d9:af:c1:d6:51:ee:0c:89:df:39:bd:9e:e9:a4:49:94:a2:
         d9:d2:ea:60:98:6d:fd:87:9a:d6:bc:81:cc:20:12:c1:62:36:
         73:c3:4d:a0:ba:f1:90:94:f7:b3:5d:52:49:45:a2:82:60:05:
         01:a6:3e:bc:23:af:02:a6:51:fa:3e:b0:53:d0:1d:66:7a:78:
         d8:f1:7b:94:20:f5:94:71:b6:30:44:22:f6:ae:88:c1:1e:5d:
         37:9e:87:8a:6a:d6:fb:4e:a7:21:fc:c4:4b:64:ec:6e:d9:fc:
         04:65:0b:73:e8:cf:cf:8e:6a:df:12:80:19:11:4a:c3:a2:b8:
         c0:d3:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:45:45 2025 by rpki-client