Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32332d3233203d3e20323633353336.roa
File:                     3139312e352e3132382e302f32332d3233203d3e20323633353336.roa (raw, json)
Hash identifier:          Vj/AWX8CtK3eYi89y40SrBkbUYgOvl6YFflGc2Gaxx0=
Subject key identifier:   D8:14:A8:2A:99:5F:3D:1D:B8:B5:81:A9:3E:BE:A3:2E:96:76:A5:F6
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       48504FA79C5A2D548FDDEFC624BDC57BA3A03F29
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32332d3233203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:21:39 +0000
ROA not before:           Wed 05 Jul 2023 17:16:39 +0000
ROA not after:            Wed 03 Jul 2024 17:21:39 +0000
asID:                     263536
IP address blocks:        191.5.128.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:50:4f:a7:9c:5a:2d:54:8f:dd:ef:c6:24:bd:c5:7b:a3:a0:3f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:16:39 2023 GMT
            Not After : Jul  3 17:21:39 2024 GMT
        Subject: CN=D814A82A995F3D1DB8B581A93EBEA32E9676A5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:94:e6:9a:7d:95:6f:49:e6:20:80:61:24:
                    e4:b1:39:7b:3f:93:85:d6:34:57:87:f0:13:00:28:
                    1b:6c:36:35:d4:a9:7a:28:29:17:0e:b3:73:37:e8:
                    30:94:e7:27:33:d5:1f:c6:da:85:c5:92:4a:36:6d:
                    8e:78:0e:10:9a:71:27:83:a6:b3:c2:a4:22:f5:45:
                    42:d5:7a:c4:4d:b9:af:1b:91:b5:5d:f2:3a:f2:42:
                    6e:c6:e5:82:ab:34:5a:d7:c6:d7:60:3f:34:87:de:
                    83:a5:78:d9:ed:24:9c:be:36:9b:03:93:78:62:7e:
                    ee:20:2e:95:55:80:2d:47:15:a0:fa:13:bb:5e:bb:
                    4f:7b:7f:30:5b:f5:77:2d:59:0f:cf:69:4d:4d:5b:
                    b3:c9:0f:9c:a9:c5:1d:f9:6b:9e:1e:2c:34:d6:27:
                    51:a8:cb:34:7f:ff:57:c3:94:35:06:fd:3d:68:10:
                    7d:ed:76:3a:49:a0:be:f2:26:76:0e:5f:f4:d4:12:
                    7f:ff:17:9b:28:80:a7:4b:40:e2:21:10:bb:1c:b5:
                    54:46:37:50:5f:36:4a:a5:17:da:5f:e9:a7:2c:b9:
                    96:e6:dd:f0:77:10:e9:21:1d:fc:13:fa:2c:4d:c7:
                    32:c5:07:19:99:67:2f:3c:78:5b:67:d0:51:bd:a0:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:14:A8:2A:99:5F:3D:1D:B8:B5:81:A9:3E:BE:A3:2E:96:76:A5:F6
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32332d3233203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:bc:a9:1e:34:33:bb:d6:93:2a:aa:95:b8:d9:24:ed:22:
         74:b9:15:40:31:53:77:97:81:e8:c6:ed:87:92:85:5c:ea:44:
         98:1b:eb:d9:f5:33:55:84:22:d1:ee:4e:3e:c5:b4:48:80:c6:
         4c:f5:a6:6c:89:8a:da:02:6b:fd:02:61:d0:db:c9:1e:fd:a4:
         25:e4:c9:38:c7:50:3a:4d:1d:b6:b0:a3:a8:83:a0:f1:20:58:
         59:d1:d0:62:aa:2f:7c:60:06:bf:f5:8f:90:77:80:d0:bd:ae:
         70:e9:76:2d:56:9c:f7:3b:37:69:71:5b:ed:9b:26:44:f9:85:
         51:04:de:4e:a7:72:44:8a:ba:6a:45:48:41:df:6c:41:04:ed:
         7e:b3:28:3f:98:b7:dc:28:30:7e:3b:10:3e:91:b4:62:6f:01:
         25:da:c8:73:b1:b1:a8:7c:bc:33:55:d5:1b:8b:9d:69:c0:f1:
         72:19:88:b3:9e:f2:f8:36:bd:18:08:98:9f:41:96:64:c6:d2:
         9d:c9:8f:be:bc:40:c4:03:28:c5:2d:bc:d1:1a:66:d6:a6:b4:
         c1:20:07:ea:f5:87:22:29:e7:07:08:61:36:07:ee:d1:bb:c2:
         f4:80:9c:32:66:a5:91:7f:e8:0e:2e:28:bb:b0:f9:71:bd:96:
         82:d1:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:42:39 2025 by rpki-client