Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32332d3233203d3e20323633353336.roa
File:                     3139312e352e3133362e302f32332d3233203d3e20323633353336.roa (raw, json)
Hash identifier:          Q6b4opLTxl4njNl9ESnY7z2pulaMyNyQcHPbKAQslbo=
Subject key identifier:   08:83:40:44:E5:94:E8:7E:A7:23:37:31:C0:58:34:95:93:64:1E:D6
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       0A0047E321648840950DFD1AD606C50B25CA44D7
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32332d3233203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:22:13 +0000
ROA not before:           Wed 05 Jul 2023 17:17:13 +0000
ROA not after:            Wed 03 Jul 2024 17:22:13 +0000
asID:                     263536
IP address blocks:        191.5.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:00:47:e3:21:64:88:40:95:0d:fd:1a:d6:06:c5:0b:25:ca:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:17:13 2023 GMT
            Not After : Jul  3 17:22:13 2024 GMT
        Subject: CN=08834044E594E87EA7233731C058349593641ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:53:29:99:7a:e9:ca:db:3a:7e:7e:55:39:
                    d1:ca:43:10:a2:36:8c:39:dc:62:f6:ec:43:58:8f:
                    c0:57:52:44:13:aa:cf:4d:14:7d:47:30:ea:47:b1:
                    57:13:ed:c3:55:0e:93:17:ca:20:d7:43:57:be:6e:
                    c5:c6:68:55:69:d6:2b:91:e7:be:64:46:09:12:70:
                    ba:d9:cf:5e:0b:07:69:e8:b3:9a:5f:14:ea:10:a4:
                    b4:4a:d6:12:90:6a:7c:0a:51:96:4f:bd:64:48:9f:
                    ec:3f:d1:9a:a7:03:4a:7a:9d:6c:91:8b:50:9c:50:
                    0e:3e:55:45:77:d9:f1:4e:03:f5:e5:89:78:ba:ad:
                    7a:ea:01:c3:15:da:51:a9:e2:5c:d0:55:75:13:7b:
                    e4:a0:df:b7:0d:af:86:f2:30:07:10:d6:fe:56:6f:
                    8e:6f:54:40:2f:45:84:7c:eb:5e:34:e1:e0:70:23:
                    34:3b:02:d9:96:8f:1d:b9:04:fe:df:63:bc:8c:29:
                    39:ab:ae:b1:f9:c4:c0:bf:e2:c7:a0:ac:70:b8:c9:
                    1e:ee:84:4b:e1:25:7a:ce:9c:8c:ed:00:8b:42:63:
                    ff:5d:f1:c1:d2:ef:2a:f6:ea:a3:a1:d8:e5:89:4a:
                    dd:83:3b:bd:57:78:b5:fb:46:e1:d1:25:4a:08:07:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:83:40:44:E5:94:E8:7E:A7:23:37:31:C0:58:34:95:93:64:1E:D6
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32332d3233203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:44:33:30:86:74:6f:a3:c3:82:6d:6f:79:31:46:67:59:0f:
         69:25:28:d2:75:ee:c2:4d:28:7e:b7:d4:e9:6b:2a:05:eb:40:
         73:ff:dc:16:50:35:80:64:bb:db:89:ac:31:bb:9d:7e:6b:18:
         6a:ad:d7:c3:01:25:cd:ca:10:87:b0:f0:62:64:1b:be:54:fa:
         5f:84:45:cd:9a:3c:e6:b7:fc:c7:2e:16:ee:6b:39:5f:1a:79:
         a4:3e:75:83:6e:42:6c:70:be:d3:e8:41:70:17:55:92:55:83:
         a6:91:c0:a6:87:a9:d6:b2:a2:f2:45:1a:64:76:c7:98:d7:e8:
         eb:2b:3e:80:3a:98:12:d6:78:74:bb:a7:06:35:3a:06:f6:48:
         6e:0d:dd:f6:c7:63:78:a1:90:68:13:43:5b:b7:19:15:c9:a2:
         5c:c8:f7:c0:ce:b9:c1:d7:fd:1b:80:bf:d3:da:bc:25:6b:a6:
         fb:fc:e8:12:5e:d3:ce:d2:c8:37:2a:97:7f:ce:b5:d4:92:38:
         af:b8:27:fc:a7:ca:28:f5:76:85:7f:fe:5b:97:ae:bf:02:62:
         e8:27:95:23:20:ba:b8:5f:85:e2:04:5f:7b:44:e9:4c:3b:5e:
         36:b7:72:99:cb:8d:d8:d1:79:91:d9:7d:bf:f0:7d:9f:50:1e:
         e9:49:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:38 2025 by rpki-client