Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133382e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133382e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          5sPdnTixMOP70Ru4xNQlRiO+gIL29nlnp6LBcp/PYro=
Subject key identifier:   1C:39:00:24:31:7B:08:76:B8:D9:EC:C9:A7:B5:FC:11:FE:93:D6:FE
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       3738B7956B68B74EE40130BF5BF6FDACC7492E70
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133382e302f32342d3234203d3e20323633353336.roa
Signing time:             Wed 09 Aug 2023 19:09:42 +0000
ROA not before:           Wed 09 Aug 2023 19:04:42 +0000
ROA not after:            Wed 07 Aug 2024 19:09:42 +0000
asID:                     263536
IP address blocks:        191.5.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:38:b7:95:6b:68:b7:4e:e4:01:30:bf:5b:f6:fd:ac:c7:49:2e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Aug  9 19:04:42 2023 GMT
            Not After : Aug  7 19:09:42 2024 GMT
        Subject: CN=1C390024317B0876B8D9ECC9A7B5FC11FE93D6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:d1:a5:63:af:03:0d:a1:45:66:5b:2f:69:
                    13:7e:34:b4:b5:d5:b4:79:15:d0:44:cc:c0:10:6c:
                    37:23:35:3f:e6:90:5d:9e:fa:c4:d4:a6:df:4b:ef:
                    05:59:e4:74:35:90:7d:1c:6e:5e:2d:86:95:13:8b:
                    eb:d1:8e:87:31:2a:59:58:8c:d9:bc:aa:c6:2e:5b:
                    53:08:97:3f:c8:4a:a5:f7:e5:1e:81:c2:39:24:9e:
                    34:6a:7e:1a:c8:78:76:6b:b1:53:31:60:81:ee:b2:
                    88:58:3d:77:a1:0f:91:ff:c3:a2:03:28:cf:86:84:
                    0c:88:e7:0a:f4:0f:dc:98:08:ff:05:54:b8:0c:68:
                    18:d9:52:ce:9b:f0:72:97:0f:db:a7:81:de:95:95:
                    da:44:4a:a0:9b:36:6e:e6:11:aa:08:db:d8:38:8e:
                    6b:70:5d:95:fb:cd:ca:86:3a:32:83:58:29:3a:d5:
                    9f:72:86:08:7d:51:ee:8d:20:c8:65:13:b7:a1:7a:
                    7c:4a:44:40:93:3c:15:9d:50:3e:d0:f6:9a:8d:8f:
                    11:7a:af:d9:64:94:14:00:0f:66:6b:6a:2a:1d:c0:
                    6f:62:eb:3a:7f:85:d6:8f:0c:ed:78:0b:db:92:cd:
                    92:be:f3:91:69:f7:6a:d0:87:68:70:09:77:4f:a9:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:00:24:31:7B:08:76:B8:D9:EC:C9:A7:B5:FC:11:FE:93:D6:FE
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133382e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:4e:f7:24:c6:ad:e7:b7:03:d2:12:19:85:a7:1a:47:ea:
         c6:e1:a3:44:cf:27:2b:23:a9:7b:b9:57:eb:01:64:54:37:f5:
         9a:e3:b6:2c:0f:3b:76:ef:a7:63:30:53:bb:d1:b3:ef:e7:ac:
         18:b6:28:c6:01:0b:f0:4b:f8:4f:c7:50:5c:fe:8f:03:44:61:
         e7:b5:b4:7d:62:44:7b:5e:b2:92:e2:ec:8e:68:dc:db:1d:d5:
         0d:bb:50:0f:2e:da:83:cd:ae:5e:6e:a3:72:2e:6a:97:6a:93:
         f0:e8:6c:ef:45:a1:f3:f9:2d:a6:50:63:ba:cd:dd:f9:38:cd:
         df:0e:4c:86:5b:29:2d:67:f1:7e:bf:9e:75:8d:2f:50:c6:88:
         98:1a:92:0a:be:1a:20:a3:a6:74:72:7e:b5:06:8a:e8:73:48:
         08:0d:16:df:cd:eb:c6:0c:fc:31:06:3d:01:be:e6:c9:ca:41:
         77:c8:8f:7b:12:7a:96:0b:bd:c1:e7:6b:77:e2:25:34:ac:65:
         06:79:15:d5:35:46:61:3b:78:1d:b4:32:21:58:a7:68:1b:50:
         3a:a3:a0:c5:05:96:fb:89:b0:78:8a:91:72:e9:a2:42:a8:09:
         02:1a:93:1d:cb:02:89:fd:02:72:49:37:d9:b1:95:66:32:a8:
         18:0e:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:29 2025 by rpki-client