Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32302d3230203d3e20323633353336.roa
File:                     3139312e352e3132382e302f32302d3230203d3e20323633353336.roa (raw, json)
Hash identifier:          tr8BP/LoTiU7R00AMebmOh11QcBzRJceooyIwX0u5Rk=
Subject key identifier:   B7:D2:D7:64:F7:B2:34:9F:EE:5B:C4:66:12:A5:44:94:FD:75:EC:5E
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       365B94A79A73A7B6D6E525CF96FAECC995A16ACC
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32302d3230203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:21:15 +0000
ROA not before:           Wed 05 Jul 2023 17:16:15 +0000
ROA not after:            Wed 03 Jul 2024 17:21:15 +0000
asID:                     263536
IP address blocks:        191.5.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5b:94:a7:9a:73:a7:b6:d6:e5:25:cf:96:fa:ec:c9:95:a1:6a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:16:15 2023 GMT
            Not After : Jul  3 17:21:15 2024 GMT
        Subject: CN=B7D2D764F7B2349FEE5BC46612A54494FD75EC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:e0:6d:aa:ef:d9:44:29:13:0e:cb:01:55:
                    46:ef:f8:32:a7:b9:e6:90:ee:7d:32:d5:53:93:99:
                    b3:fa:07:82:52:2d:f0:b9:b4:c8:aa:e4:a9:4b:f6:
                    88:9a:35:fa:65:fe:21:48:97:52:e6:76:b7:3a:1d:
                    4b:53:13:25:c4:ea:8f:93:9e:90:ef:5e:de:c3:5c:
                    f2:db:80:e0:82:6e:4b:be:a9:64:d5:d2:e1:4e:ac:
                    2b:4d:63:69:41:d2:2a:bf:a9:90:66:f5:6c:6d:9a:
                    35:79:10:b2:14:4b:3b:8e:9c:f8:b9:3d:2d:84:02:
                    0b:1b:65:db:d6:8f:5d:24:5c:b1:a0:2d:55:35:c5:
                    64:08:f8:98:0d:43:2d:9e:02:28:f1:32:ab:71:9b:
                    c2:42:02:ee:e0:a0:35:fa:88:74:a6:6b:1f:c1:1e:
                    7d:8d:0b:45:30:93:9f:df:18:cb:fb:89:d1:7e:27:
                    48:d0:29:3b:1b:7f:77:a8:f3:11:67:a1:d2:48:cc:
                    2a:8d:6d:77:58:80:78:dc:cf:ed:ee:f6:ab:69:9c:
                    3d:45:e2:7a:a2:72:9c:50:5c:07:b4:09:43:34:cf:
                    3b:c0:2b:56:17:a3:21:0f:e1:14:b8:9f:13:13:38:
                    42:3f:2d:6b:ca:fd:05:2a:5b:e1:9b:55:fe:e6:d5:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:D7:64:F7:B2:34:9F:EE:5B:C4:66:12:A5:44:94:FD:75:EC:5E
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32302d3230203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:7b:39:09:2f:0d:24:8c:78:40:39:55:65:b8:eb:42:a4:44:
         1e:e8:4a:48:16:e6:d7:f4:58:12:6e:89:eb:c1:46:4e:f4:68:
         f7:91:37:0c:22:40:8d:26:9b:e5:a0:c2:3e:ab:74:15:b1:57:
         59:52:81:56:98:52:35:90:57:69:c6:e0:f5:bc:2a:b0:99:eb:
         18:7f:b9:96:5c:e9:9c:2c:a1:70:f2:18:d2:80:ea:28:28:0f:
         16:0c:f8:23:b5:00:1a:f0:d2:03:c9:e1:bf:43:d7:a8:b8:f2:
         05:1e:25:e0:11:8a:5c:53:aa:0a:5e:a1:96:8e:b5:52:aa:06:
         24:cf:28:0d:5b:a4:6f:9a:c2:12:99:5c:9b:c2:3e:47:06:d7:
         0f:33:b9:d6:83:6a:92:a5:ab:98:6e:ae:88:9b:61:60:25:65:
         fc:9f:ef:28:2e:e4:11:8c:5f:45:bd:48:33:ac:75:2c:80:8d:
         dc:43:63:0d:10:35:6c:ab:38:d4:f7:1c:a2:8c:b5:17:75:84:
         51:68:aa:a9:44:61:78:c0:3a:34:11:5f:db:84:e9:54:8d:d6:
         92:33:79:e3:cf:da:18:59:2c:81:f7:2d:67:6e:5e:11:a8:98:
         32:f9:d2:94:83:8b:fc:14:26:2a:4f:e8:08:20:95:66:e3:60:
         ed:8b:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:03:07 2025 by rpki-client