Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133392e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133392e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          uIuhy+OpHj1dZNGLBYxHYjy3wQi1Z6rSXeoxKXLoSE4=
Subject key identifier:   75:54:DD:98:5C:AA:15:52:AE:2A:D8:C6:40:EE:D1:E5:2A:72:55:8C
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       39E05FD5AD783AC86DBF1EA2DCEFD717519CCC8F
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133392e302f32342d3234203d3e20323633353336.roa
Signing time:             Wed 09 Aug 2023 19:09:48 +0000
ROA not before:           Wed 09 Aug 2023 19:04:48 +0000
ROA not after:            Wed 07 Aug 2024 19:09:48 +0000
asID:                     263536
IP address blocks:        191.5.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e0:5f:d5:ad:78:3a:c8:6d:bf:1e:a2:dc:ef:d7:17:51:9c:cc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Aug  9 19:04:48 2023 GMT
            Not After : Aug  7 19:09:48 2024 GMT
        Subject: CN=7554DD985CAA1552AE2AD8C640EED1E52A72558C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:c7:99:97:07:11:62:ae:89:32:a6:7a:b4:
                    57:cb:65:cb:8c:66:18:a6:9b:14:8c:fc:81:1d:fc:
                    b4:66:b3:ed:e9:a9:8f:24:00:aa:6b:df:97:f0:b7:
                    7c:33:8f:03:b0:94:fc:d3:d6:3d:a1:03:01:55:99:
                    cf:b6:97:e5:b9:13:15:d4:a7:c8:42:04:41:a0:c1:
                    dc:b4:20:61:53:66:95:f4:c1:fc:50:32:4c:df:f1:
                    4b:28:f4:cf:f7:0b:98:3e:e8:43:47:6f:8f:12:85:
                    d0:83:e5:e2:21:9f:92:0c:12:57:d2:7d:42:c6:5a:
                    46:82:ed:d5:5d:7d:c3:9a:e3:8b:c4:d6:14:e1:53:
                    c1:89:42:1c:d9:17:c0:3a:5d:56:71:f8:7a:20:cc:
                    78:9c:e3:dd:da:66:47:e0:11:9c:1d:f3:ad:4b:58:
                    d1:39:95:04:01:2a:4c:9d:9c:d3:8c:a6:33:e9:be:
                    3f:e3:84:b8:44:b9:6c:63:e5:19:af:cb:da:cb:9f:
                    ad:b6:b5:80:10:04:9c:95:f0:9c:a7:fd:54:42:c5:
                    98:ca:48:77:d9:7c:48:c2:d6:f2:c0:ae:30:85:8b:
                    87:15:1e:37:27:a0:1f:66:9f:ac:1a:72:72:fb:ba:
                    7b:09:8d:13:a8:57:74:d6:4e:a2:78:d9:34:d3:15:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:54:DD:98:5C:AA:15:52:AE:2A:D8:C6:40:EE:D1:E5:2A:72:55:8C
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133392e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:64:3f:a9:26:54:e3:81:e5:11:21:fa:47:9a:24:80:d1:c0:
         ad:9b:f8:7a:96:fc:ba:1b:30:4c:54:02:64:7e:e3:52:22:9b:
         1e:01:c4:72:26:d5:e6:2c:03:34:fe:d9:b3:76:a4:06:21:9a:
         b3:86:27:aa:24:84:ee:3f:da:06:24:2e:3b:08:43:6c:03:63:
         88:d7:03:e8:db:21:79:28:07:cf:4e:a6:02:6b:d6:09:3b:f0:
         5c:73:b9:1c:b0:dd:e8:c6:3b:3c:bb:88:c0:68:74:a2:c3:98:
         7e:29:5d:38:e0:80:13:a2:8c:f9:83:31:ea:8a:94:43:e3:b9:
         7d:99:e5:06:44:7c:9f:83:4f:ef:7b:15:4b:22:1c:17:34:33:
         c4:46:bd:47:cb:0f:bc:5c:c3:58:50:9b:ab:04:8c:5c:9a:06:
         e2:13:91:c8:99:37:0c:ef:e4:86:79:5e:7c:51:07:16:d4:63:
         28:2c:e0:97:24:ff:b5:5f:36:95:6e:cc:86:f7:a2:26:53:95:
         07:12:a8:43:a3:02:f8:bb:38:2f:de:28:9c:73:b3:3a:e5:c8:
         65:2d:26:72:41:5b:c7:91:03:03:0c:95:7d:41:66:e2:3b:92:
         da:bf:ae:80:aa:3a:0a:84:77:84:6b:58:cf:ef:49:70:aa:91:
         a8:94:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:57 2025 by rpki-client