Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133322e302f32322d3232203d3e20323633353336.roa
File:                     3139312e352e3133322e302f32322d3232203d3e20323633353336.roa (raw, json)
Hash identifier:          g1+BcA8jJ6YuTlQOH0DrI6nrwkGsPBMSHp/JRvXbMhM=
Subject key identifier:   E7:27:67:EE:2D:82:CB:B6:A9:0E:73:3C:FC:E3:C3:FE:BB:BE:90:2B
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       6565DE9E6012801AFC46AC048BBF0539709F8483
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133322e302f32322d3232203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:21:57 +0000
ROA not before:           Wed 05 Jul 2023 17:16:57 +0000
ROA not after:            Wed 03 Jul 2024 17:21:57 +0000
asID:                     263536
IP address blocks:        191.5.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:de:9e:60:12:80:1a:fc:46:ac:04:8b:bf:05:39:70:9f:84:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:16:57 2023 GMT
            Not After : Jul  3 17:21:57 2024 GMT
        Subject: CN=E72767EE2D82CBB6A90E733CFCE3C3FEBBBE902B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:cb:33:bd:87:da:ab:10:5c:f4:71:28:70:
                    95:91:23:83:ce:5a:7a:a7:e4:fa:59:f0:36:2b:74:
                    df:36:ee:11:27:05:4f:02:03:9a:65:c9:0f:d8:d4:
                    64:5e:6f:94:60:77:2b:0c:b8:b1:a5:70:80:46:e3:
                    0e:13:79:39:4e:c5:48:78:d8:21:80:d2:ab:c2:5d:
                    16:ad:32:f0:8e:56:aa:fc:bc:ff:c5:2b:ce:4d:5f:
                    af:e5:d4:cb:92:fd:bd:bc:08:87:57:c2:ec:3e:c4:
                    88:e5:34:cf:00:71:67:84:0e:3f:c0:08:43:2f:42:
                    aa:88:a6:a1:fe:0d:b5:f5:d1:06:e6:07:0e:17:0c:
                    48:f1:96:cc:32:49:d4:73:35:d0:3a:98:4d:f8:60:
                    bf:77:36:dd:73:e5:bb:bf:7e:70:78:e7:ad:dc:f6:
                    04:e6:00:fd:bb:4e:38:74:3f:97:1e:7e:af:65:b1:
                    bc:8f:70:5d:d2:05:e4:11:31:89:25:7a:36:32:46:
                    5b:59:2f:f0:9b:7f:e8:45:57:da:d9:f4:af:85:97:
                    f7:80:ed:2a:82:20:7d:f1:34:86:d9:86:6c:9d:d3:
                    a8:52:f5:df:6c:66:78:64:8b:5d:7f:3b:02:ef:80:
                    a6:d1:3c:51:34:74:84:9a:4a:e3:37:ec:da:b0:92:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:27:67:EE:2D:82:CB:B6:A9:0E:73:3C:FC:E3:C3:FE:BB:BE:90:2B
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133322e302f32322d3232203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:21:78:55:93:84:c7:89:35:c9:1f:96:4f:32:f3:59:5c:c8:
         49:b9:f6:8a:56:73:bc:1d:ea:1c:b5:29:94:10:48:1b:b9:64:
         55:13:58:26:ff:c4:50:09:4a:de:52:6b:c9:71:b9:6e:e1:d6:
         98:8e:5e:29:bb:dd:a7:c8:96:e0:ad:43:a6:03:41:b0:16:ba:
         36:aa:b5:41:b2:27:d5:70:9f:1d:a4:8b:8d:f7:83:d6:55:0f:
         c3:27:a2:17:1c:2d:75:c8:76:f7:60:a6:f8:33:ec:ca:4d:50:
         4a:bc:eb:a4:a0:33:0c:47:d1:68:f7:31:6e:04:ed:f0:e1:e2:
         3b:e2:38:ed:da:fa:ea:65:29:0f:56:0a:41:df:a4:83:2d:0e:
         a9:ce:ca:1f:8f:9f:cb:2c:69:ee:2f:46:1a:86:de:37:df:72:
         2a:5d:f2:c6:00:2e:50:5a:a2:4f:3a:24:f1:40:e9:09:9a:bf:
         95:be:30:0e:c9:b9:35:22:49:48:e6:76:41:60:f2:0a:f2:15:
         ca:5f:f5:94:88:05:6c:01:85:7c:5b:f2:55:af:a4:f9:e9:90:
         a1:0f:5f:3b:12:4e:85:c1:b0:6d:72:8e:97:04:32:f4:e1:4b:
         a7:84:18:c8:77:a4:ea:27:f5:2e:8e:fd:d9:3b:44:4d:0f:89:
         81:45:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:06 2025 by rpki-client