Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa (raw, json)
Hash identifier:          lnI6uJEbG6Sfjsg4gArPanrSvzPlIi0PTbHtKIzq32c=
Subject key identifier:   B5:5C:C4:FA:63:42:1B:8B:82:B6:51:35:2C:13:AF:58:DD:E6:91:31
Certificate issuer:       /CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
Certificate serial:       77DF8DC967D3C769877DD8EADB5C9860CA6B0182
Authority key identifier: 78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa
Signing time:             Tue 31 Dec 2024 16:16:51 +0000
ROA not before:           Tue 31 Dec 2024 16:11:51 +0000
ROA not after:            Tue 30 Dec 2025 16:16:51 +0000
asID:                     61785
IP address blocks:        201.131.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:df:8d:c9:67:d3:c7:69:87:7d:d8:ea:db:5c:98:60:ca:6b:01:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
        Validity
            Not Before: Dec 31 16:11:51 2024 GMT
            Not After : Dec 30 16:16:51 2025 GMT
        Subject: CN=B55CC4FA63421B8B82B651352C13AF58DDE69131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:71:60:58:41:76:95:6a:f8:a6:b2:56:34:
                    53:a3:53:a0:10:d4:0e:1c:67:15:9d:4a:9a:f9:50:
                    14:34:de:cc:92:b4:3d:95:30:38:aa:11:23:4e:b6:
                    33:99:00:aa:22:cd:89:5e:e4:09:c7:73:53:73:ac:
                    0b:be:ab:e7:4e:1a:cf:84:42:43:00:97:43:96:a1:
                    ac:9c:1e:b5:d1:59:7c:44:87:e9:c6:96:54:c5:ab:
                    58:d8:c9:cf:92:6a:e8:bd:ef:32:0e:50:3c:cc:25:
                    c1:a8:a1:7d:18:66:8f:4d:35:ee:11:c1:cd:d0:9f:
                    6d:6e:9d:70:fc:ba:0e:e7:c9:43:02:2e:0f:eb:5c:
                    2b:a3:17:2b:bd:18:8f:f2:70:2f:35:cb:20:55:b1:
                    ca:69:91:ae:36:df:67:02:57:a6:fd:24:5a:36:e4:
                    6c:07:20:62:ab:1f:51:26:7b:e9:83:4d:74:13:b2:
                    d4:49:5d:03:6f:2c:bd:5f:53:89:07:bb:f0:7a:21:
                    1e:54:af:5d:32:4a:d8:5d:66:86:94:4b:5b:53:22:
                    6f:c7:b3:49:c8:56:46:2d:d6:25:87:04:f5:76:25:
                    5b:76:8b:35:15:8e:5b:94:a6:73:f1:0d:cf:0c:2b:
                    be:fb:c2:eb:eb:f7:6c:6f:2c:e7:1e:55:d7:c3:d4:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5C:C4:FA:63:42:1B:8B:82:B6:51:35:2C:13:AF:58:DD:E6:91:31
            X509v3 Authority Key Identifier:
                keyid:78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/78DCBCCBBA458183D7705328DD214CA0953E3E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:9e:24:ed:ab:cf:f0:a2:9e:43:9d:87:77:cb:95:0c:8f:b8:
         28:f4:9d:31:84:38:df:b1:8b:5a:71:7b:03:6d:36:44:66:35:
         08:a3:7e:f9:d9:16:4e:c1:a5:0f:59:3a:13:fe:96:70:df:ae:
         4b:6f:52:1f:bc:c2:1c:3a:e2:d2:29:08:34:24:ea:94:d1:7a:
         77:52:0b:5b:f9:a8:20:06:92:6f:8d:54:0b:ab:68:3a:17:05:
         ba:09:6e:be:d2:a6:b2:3e:51:6c:4a:01:d6:01:85:74:9c:2e:
         c6:cb:53:f0:fb:24:c7:5e:a0:24:b3:e3:fd:f6:0f:e6:f7:f5:
         46:8a:9c:b5:c9:cf:f3:2f:51:ce:cf:ad:1a:07:2c:a1:97:13:
         f7:83:ad:ca:41:93:e2:aa:dc:a0:fa:9c:60:b3:f6:3f:8c:8a:
         de:01:e4:9b:e4:a6:e7:4a:15:a4:c1:2f:4a:38:b3:61:d0:d2:
         54:dc:f4:4e:1c:ea:6c:ef:0c:d6:ef:ce:68:2d:13:ae:41:72:
         c6:42:a2:a1:72:68:59:45:50:2d:02:8f:61:1c:df:40:71:89:
         1b:72:a9:d4:bd:c1:c4:e9:5d:e1:21:bb:02:e0:2b:43:f8:84:
         27:8e:d1:51:2e:02:50:53:f2:da:66:b2:a1:b8:64:d8:32:5c:
         cd:84:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:30:07 2025 by rpki-client