Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3138372e312e3137382e302f32342d3234203d3e203231353734.roa
File:                     3138372e312e3137382e302f32342d3234203d3e203231353734.roa (raw, json)
Hash identifier:          XFNDcmeIb+hU7NbmDStwppfh4JfXKDzvt2SkHsEKJmQ=
Subject key identifier:   3C:60:DD:61:3C:19:8C:88:69:69:8B:68:31:C3:3E:95:CF:F2:D2:18
Certificate issuer:       /CN=BD88CE604EA701BD2303A3A26D97C728956C0781
Certificate serial:       7888BBE33C5EEE85849E5201C2FC1720B31B77C1
Authority key identifier: BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3138372e312e3137382e302f32342d3234203d3e203231353734.roa
Signing time:             Tue 07 May 2024 18:17:31 +0000
ROA not before:           Tue 07 May 2024 18:12:31 +0000
ROA not after:            Tue 06 May 2025 18:17:31 +0000
asID:                     21574
IP address blocks:        187.1.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:bb:e3:3c:5e:ee:85:84:9e:52:01:c2:fc:17:20:b3:1b:77:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD88CE604EA701BD2303A3A26D97C728956C0781
        Validity
            Not Before: May  7 18:12:31 2024 GMT
            Not After : May  6 18:17:31 2025 GMT
        Subject: CN=3C60DD613C198C8869698B6831C33E95CFF2D218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:a9:bb:83:6f:cf:5d:03:e7:70:c3:3d:b7:
                    34:85:0f:85:71:62:b5:6f:0a:ac:d7:89:98:ea:fb:
                    22:e1:da:27:c3:8a:2a:f1:2d:e2:b5:81:9d:0e:a7:
                    f3:a8:f4:eb:30:cc:78:70:0e:96:67:7a:47:82:ea:
                    04:58:b9:df:aa:5f:eb:cf:a6:37:ea:29:a1:5b:c1:
                    a1:0f:da:8d:0c:a7:23:33:24:d9:07:58:f8:d8:bc:
                    23:d1:b5:d2:49:0c:2a:2b:79:b4:c4:26:6d:3b:79:
                    00:36:91:1b:28:66:75:e8:54:50:7e:6c:a6:2b:18:
                    af:d1:de:e0:79:8e:9d:b8:20:d8:f5:a8:c0:87:84:
                    32:d7:2a:34:44:8e:54:4b:48:3d:3a:4a:94:66:c6:
                    be:86:33:5c:92:99:0b:61:b1:e5:75:32:13:4b:a4:
                    3c:ae:09:e4:9a:6b:1b:88:70:6b:1b:ec:84:fb:a6:
                    91:4f:41:39:81:26:86:d8:20:1b:b3:28:26:4a:27:
                    2e:bf:19:9b:19:1f:e8:24:40:4b:5f:39:a6:79:b9:
                    a7:e0:99:fc:22:79:55:18:5c:3a:69:a1:c1:69:c6:
                    66:ec:22:42:05:c5:48:d9:54:a3:4a:55:f3:62:fc:
                    4d:b8:71:b5:c6:81:93:db:58:26:89:17:03:47:2a:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:60:DD:61:3C:19:8C:88:69:69:8B:68:31:C3:3E:95:CF:F2:D2:18
            X509v3 Authority Key Identifier:
                keyid:BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/BD88CE604EA701BD2303A3A26D97C728956C0781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3138372e312e3137382e302f32342d3234203d3e203231353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:16:50:7d:a7:cd:7d:b8:c1:c1:fe:4a:6f:7f:46:d4:0e:4f:
         d7:28:08:11:b7:7b:17:8f:f2:2f:95:38:cd:7e:ad:19:6c:db:
         56:9d:36:9d:8f:cc:c9:c9:b7:2e:f4:04:ae:11:c9:fe:68:ed:
         68:8f:c8:32:7d:21:ae:de:bc:a5:42:81:e9:7f:0c:c1:6c:a1:
         0f:1e:5c:e5:01:85:fd:dd:9e:5f:35:b8:63:cb:46:92:7e:2f:
         65:9e:e5:74:d4:45:9f:1c:05:23:25:70:7a:f8:37:eb:25:b4:
         cf:5f:40:1d:fd:af:6f:9e:21:40:e1:9c:72:31:77:b4:ca:54:
         11:a4:68:b8:90:25:07:c2:34:12:f4:fc:f7:d7:ed:89:cc:a1:
         4a:e3:a5:6a:d6:88:90:8c:51:25:0f:7f:42:0e:12:a5:c8:7f:
         c8:1c:0d:83:7a:05:e7:ba:05:ed:57:41:70:6a:64:6f:d5:77:
         dc:55:c7:57:d1:3e:82:28:5c:d2:86:e3:82:9d:56:1f:a0:94:
         24:f9:2f:45:d2:fa:af:90:58:a4:c6:b7:1e:ae:e9:d4:71:e7:
         de:05:2e:5c:70:44:3d:9f:c2:14:67:55:19:c0:70:c7:aa:21:
         d8:28:af:16:8c:7d:a3:72:b9:12:42:86:cc:f8:fd:35:f4:6a:
         04:0e:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:55:59 2025 by rpki-client