Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32312d3231203d3e20323633353336.roa
File:                     3139312e352e3132382e302f32312d3231203d3e20323633353336.roa (raw, json)
Hash identifier:          lebgtbIOJHMziL6CSwgub/tCp6gAHe5hweSm0TEuDX4=
Subject key identifier:   62:B8:82:4E:83:FD:9C:95:1D:69:F8:59:E7:E4:7D:57:23:8F:A1:66
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       3BCCB196097D0171CF6019534381FFD5838C1E9E
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32312d3231203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:21:23 +0000
ROA not before:           Wed 05 Jul 2023 17:16:23 +0000
ROA not after:            Wed 03 Jul 2024 17:21:23 +0000
asID:                     263536
IP address blocks:        191.5.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cc:b1:96:09:7d:01:71:cf:60:19:53:43:81:ff:d5:83:8c:1e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:16:23 2023 GMT
            Not After : Jul  3 17:21:23 2024 GMT
        Subject: CN=62B8824E83FD9C951D69F859E7E47D57238FA166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:cf:c0:68:07:b7:bd:3d:1c:6e:20:a0:ab:
                    53:e6:ca:6c:34:c9:57:82:84:da:4b:cc:04:80:a1:
                    5b:90:f2:bf:ca:eb:4f:27:9c:6f:87:1d:6b:05:a1:
                    b8:2c:31:97:23:82:48:f4:e5:dd:81:a9:f4:eb:c3:
                    d0:6a:3e:8d:34:24:fd:55:8b:1a:b5:51:07:f5:51:
                    a5:0c:68:ef:30:e8:b3:2e:92:90:5b:e7:79:65:c7:
                    4c:ec:75:a7:cd:ed:ac:54:fd:18:b8:51:3a:79:8c:
                    33:0a:d7:75:e5:15:aa:62:78:d6:b4:19:47:af:74:
                    99:24:1d:83:08:d4:e2:08:07:42:eb:c5:26:0d:8d:
                    bf:57:2f:b7:9e:cb:07:cd:ed:3b:1e:79:70:37:b4:
                    4f:b1:8f:52:5f:1f:6b:ef:43:5c:3c:ad:07:bd:b2:
                    62:f6:12:ad:a7:c5:2d:60:3c:d3:2f:42:30:fb:37:
                    43:63:98:20:8a:ec:ce:2f:b2:fa:5d:fc:cf:48:39:
                    bd:cc:d4:92:4b:09:20:8c:6e:3d:9a:39:80:08:af:
                    1a:b6:67:ce:a2:41:be:98:eb:93:17:9f:1d:ad:1f:
                    43:81:f8:5c:8d:d8:95:78:f3:d4:2e:ac:50:61:1b:
                    21:bb:ff:bc:a6:69:2f:35:04:44:37:3f:cd:fa:0f:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:82:4E:83:FD:9C:95:1D:69:F8:59:E7:E4:7D:57:23:8F:A1:66
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32312d3231203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:61:c8:0d:e0:6d:7f:1d:72:a6:67:ec:34:cf:43:42:a3:
         62:ea:b6:b8:dc:ef:6d:51:c4:b1:ec:2c:e5:11:b2:89:2e:6c:
         00:05:0f:ed:a9:1a:2b:46:d6:b0:79:98:f9:fb:0a:d0:4b:a1:
         45:a7:02:b1:4b:46:2c:3b:6e:5f:ba:74:c5:4a:b9:9b:7f:7c:
         cc:b0:00:7d:cc:65:a4:8c:99:15:cb:d6:ce:f8:ff:9e:68:27:
         c3:b4:7d:9a:08:88:4a:a0:b5:a4:9e:c9:e4:fe:88:98:65:c5:
         a7:5c:86:d3:79:05:fb:30:61:86:48:b0:cd:6a:9a:c8:90:3e:
         b0:26:41:a6:d1:15:48:67:a4:61:41:f5:98:07:ec:da:55:6e:
         d7:2d:ba:e5:45:fd:e7:0b:4c:aa:4f:f3:38:71:af:3b:ed:6d:
         a7:d7:28:0a:3a:be:09:2e:67:36:14:2d:f0:9b:82:1d:e4:f2:
         db:39:52:d5:d7:18:27:fb:34:7a:9a:74:44:ad:96:3d:85:01:
         a8:e1:60:ce:90:6a:2c:00:5a:95:c6:43:3c:ef:30:90:38:51:
         16:ee:8d:93:1e:70:ab:e8:73:ab:f5:e0:b3:84:5f:2f:ef:f7:
         76:a5:45:a5:8a:3b:e3:d3:b8:fd:62:c5:a4:bf:9d:a4:32:61:
         b0:6a:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:08:45 2025 by rpki-client