Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa (raw, json)
Hash identifier:          Kb5p+RVApNhsmRYET8+PaEJ42sC/JSGpE3HvXUCO0H0=
Subject key identifier:   8F:94:F6:7F:4C:8A:B5:6E:FB:08:E3:7D:5F:9D:67:10:A1:64:EB:31
Certificate issuer:       /CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
Certificate serial:       077BBAF59F0D00300CA760C5E26D87B8507F719F
Authority key identifier: 78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa
Signing time:             Tue 31 Dec 2024 16:16:52 +0000
ROA not before:           Tue 31 Dec 2024 16:11:52 +0000
ROA not after:            Tue 30 Dec 2025 16:16:52 +0000
asID:                     61785
IP address blocks:        201.131.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:ba:f5:9f:0d:00:30:0c:a7:60:c5:e2:6d:87:b8:50:7f:71:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
        Validity
            Not Before: Dec 31 16:11:52 2024 GMT
            Not After : Dec 30 16:16:52 2025 GMT
        Subject: CN=8F94F67F4C8AB56EFB08E37D5F9D6710A164EB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:e9:9f:5e:97:e2:d1:28:0d:4c:0a:f3:20:
                    d0:1f:9e:1d:40:17:a9:c2:ea:98:af:c7:8c:0d:00:
                    b9:0e:70:32:87:4c:23:a8:c5:7b:ab:74:55:bb:1b:
                    14:cb:16:b2:c1:25:9a:3c:71:43:4e:98:7a:a9:13:
                    bf:be:74:c9:aa:76:9b:5b:0c:b6:f9:bb:87:76:6d:
                    43:0a:c9:ae:ac:c6:4d:c0:ee:0b:47:83:00:f6:8b:
                    53:49:55:41:a2:cc:71:6a:b8:91:36:7b:23:42:24:
                    ed:bb:39:84:20:56:5d:54:92:a3:e5:a5:98:fd:80:
                    41:5b:ac:ae:dc:30:05:02:0c:9a:84:32:de:07:d1:
                    e9:f6:ae:cd:bb:31:98:aa:39:e3:08:62:de:7f:db:
                    70:85:a9:6d:10:5d:4b:4d:0a:c3:05:3d:10:70:b6:
                    8c:85:76:c9:19:91:3d:bc:a1:ed:ba:d5:8b:44:7f:
                    cc:43:a8:9c:a5:de:71:55:45:86:54:e9:25:b5:0f:
                    af:e5:99:b4:01:91:4d:62:65:e9:b8:40:90:39:f4:
                    02:8b:eb:9b:c4:21:23:6f:98:b8:47:30:e7:cb:86:
                    ec:86:35:57:a8:ce:fe:8b:1d:e1:04:6a:7e:67:e7:
                    13:95:56:31:9b:0a:27:7a:f8:ee:d4:95:22:c2:72:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:F6:7F:4C:8A:B5:6E:FB:08:E3:7D:5F:9D:67:10:A1:64:EB:31
            X509v3 Authority Key Identifier:
                keyid:78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/78DCBCCBBA458183D7705328DD214CA0953E3E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:08:63:cf:b1:4a:8c:a0:cb:9c:f7:e9:34:6d:51:1d:a0:2f:
         31:60:a8:d2:6c:06:78:06:e1:20:96:86:14:85:80:3c:48:68:
         40:1e:0f:61:5b:76:11:36:2e:0a:26:26:91:1f:a6:a8:84:d1:
         21:cc:14:2f:92:90:1f:00:81:bf:c8:cc:2a:71:a4:23:79:96:
         5a:ba:94:1d:d8:14:b8:01:aa:c3:8d:56:0d:03:17:d2:30:21:
         69:68:93:d8:69:a9:88:7b:e0:84:07:bd:8c:5d:d4:0c:05:c6:
         40:c7:07:ee:2f:e6:22:5b:b8:a3:be:f7:41:db:42:77:44:de:
         39:61:11:63:56:45:5a:2f:e0:18:08:19:85:6a:d6:65:23:1c:
         c3:66:46:15:20:ec:a2:30:0e:fa:7f:73:61:cf:27:7e:b3:9b:
         08:30:89:99:f5:a4:ec:14:b2:c6:5a:34:de:ac:50:95:e8:79:
         52:05:b7:e1:df:2a:a7:93:7e:f2:78:8b:e6:b0:89:e2:b4:e9:
         4e:b8:ff:65:ab:f8:f2:50:99:81:3a:cf:e7:ce:3b:26:d2:90:
         31:e9:ba:59:21:43:ca:9d:0a:d6:01:2d:2a:1e:13:a7:f6:a2:
         bf:65:1c:af:c8:4f:89:f1:40:df:22:fa:4e:af:a8:b9:f0:21:
         15:24:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:18 2025 by rpki-client