Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3134322e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3134322e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          InO1il4xOQe4g079Kx0c5RjrOI8HPak3Ih8GZ4y+eE8=
Subject key identifier:   BC:C2:76:55:B0:54:E9:B7:9C:74:31:19:9A:E2:DA:C2:00:F7:40:FD
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       6F04BC3DAD4C0191C272D544A18167BEAB902B59
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3134322e302f32342d3234203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:22:24 +0000
ROA not before:           Wed 05 Jul 2023 17:17:24 +0000
ROA not after:            Wed 03 Jul 2024 17:22:24 +0000
asID:                     263536
IP address blocks:        191.5.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:04:bc:3d:ad:4c:01:91:c2:72:d5:44:a1:81:67:be:ab:90:2b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:17:24 2023 GMT
            Not After : Jul  3 17:22:24 2024 GMT
        Subject: CN=BCC27655B054E9B79C7431199AE2DAC200F740FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:8d:14:1b:f6:9e:c6:fa:47:cf:00:4c:56:
                    24:b2:53:4a:65:fb:7b:98:1a:3a:02:9a:27:b9:8f:
                    3f:f9:f6:17:f5:e4:a5:5a:e4:88:b3:87:a8:cd:ec:
                    7a:db:10:e8:20:ae:5b:42:6f:b7:8f:e8:b0:97:5c:
                    e0:1d:86:f0:87:32:54:76:1a:ea:60:1c:e6:fb:b1:
                    da:eb:1c:73:3c:fe:51:34:ab:23:62:69:bb:35:93:
                    53:e0:7d:0d:67:4a:51:8c:97:a3:7e:ed:41:28:70:
                    98:31:08:5a:44:a7:82:92:11:23:f5:a3:1e:65:12:
                    b5:fc:a4:10:5a:53:21:f5:94:f9:2c:f1:3b:64:b9:
                    2c:be:63:ea:a0:8a:a9:4b:04:c1:f3:25:48:ef:4e:
                    08:dd:c8:ac:23:7d:96:9b:f1:7e:8e:bf:96:98:4d:
                    d7:ca:4e:3b:f4:17:37:31:db:89:78:08:6f:f4:9f:
                    e4:20:b8:a0:6c:82:f2:8f:cf:d2:7b:2e:18:13:d0:
                    94:52:fa:9c:d3:78:be:28:7e:0e:a4:cb:df:b8:6b:
                    a9:ef:4f:f7:b9:08:a6:9d:ec:98:89:dd:23:d4:3f:
                    92:4d:65:ae:b7:26:a5:25:8f:76:8b:c7:55:a8:a5:
                    28:6b:b7:42:ef:b0:f3:9e:bb:45:46:06:10:ac:aa:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C2:76:55:B0:54:E9:B7:9C:74:31:19:9A:E2:DA:C2:00:F7:40:FD
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3134322e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:71:bd:d6:bc:97:e5:15:14:b6:c3:b3:49:ed:62:34:29:
         41:7f:99:99:3a:39:e2:99:53:81:e6:f5:df:b9:be:4b:30:07:
         b1:73:a1:48:e4:47:f3:df:cd:66:ca:fd:d2:2d:6d:1f:de:99:
         2f:af:5f:5e:03:8d:19:6c:a9:9f:9b:c8:c3:14:49:7c:f4:15:
         07:8f:45:a0:9d:14:f9:4e:a1:89:47:b7:2f:81:42:fa:04:12:
         15:8c:d0:84:b4:12:ea:4a:ff:08:9b:08:09:6f:ce:ac:85:30:
         50:ab:08:a8:df:de:30:17:07:4b:c9:6c:97:83:ab:4a:56:28:
         1b:c5:bd:cc:a8:79:82:0a:15:9f:e8:73:41:73:a0:48:22:30:
         b2:22:ee:c1:37:f7:69:fd:60:1f:07:98:08:25:59:98:13:22:
         62:21:8e:31:2f:f6:8b:45:4e:ff:78:9e:5a:3d:d0:fc:5b:70:
         c1:a7:45:69:55:8d:4e:0a:8a:f3:65:04:dc:41:b6:9a:0d:27:
         f4:96:34:90:78:56:b6:3f:8c:83:64:71:58:b4:70:d0:e3:6e:
         d3:bc:90:23:b9:85:33:2c:61:a7:1b:f4:2c:52:6b:af:ab:7a:
         85:48:3a:18:72:c3:4c:85:99:fe:f5:d7:b2:ef:aa:cb:be:c5:
         c4:f8:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:20 2025 by rpki-client