Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          7j1GGphokegKldsEj7aKHzwm3w4JA+AAeTHGcppgEzQ=
Subject key identifier:   57:16:33:4F:28:44:B0:E6:86:F2:F2:09:03:71:29:3E:8F:5B:CA:2C
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       68789DDF1139E30897DCE9ED4DB5138EC37C44F2
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:10 +0000
ROA not before:           Wed 05 Mar 2025 20:31:10 +0000
ROA not after:            Wed 04 Mar 2026 20:36:10 +0000
asID:                     262617
IP address blocks:        187.62.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:78:9d:df:11:39:e3:08:97:dc:e9:ed:4d:b5:13:8e:c3:7c:44:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:10 2025 GMT
            Not After : Mar  4 20:36:10 2026 GMT
        Subject: CN=5716334F2844B0E686F2F2090371293E8F5BCA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:ba:3a:70:50:c3:be:0c:db:c5:1d:c3:0b:
                    6a:7e:2f:09:eb:97:67:29:ba:87:b8:bb:cd:f3:c2:
                    98:e6:e7:72:c0:a3:18:a3:1e:83:5f:37:dd:23:48:
                    1a:2b:2d:df:d5:38:86:8c:e0:87:b9:83:55:40:4e:
                    b5:51:7f:5e:a0:34:00:1e:58:f2:75:b3:86:70:53:
                    81:bd:06:20:ec:ae:f0:82:fd:25:2c:c3:bf:a6:85:
                    fa:e5:1c:d7:b4:40:b1:c1:7f:96:6c:18:9a:1a:2a:
                    8f:f7:ba:14:e7:55:bb:73:d0:c9:2d:0a:91:c8:98:
                    e2:94:be:67:eb:7e:72:af:23:49:29:0c:ac:b3:46:
                    59:93:cd:f1:89:c5:73:c8:83:9f:b2:5c:9c:fa:9e:
                    ec:1e:1b:79:88:0b:e3:df:96:97:f3:48:43:ed:53:
                    e3:a9:a8:07:d9:ba:3a:29:f1:1c:2e:b2:2a:48:72:
                    d1:41:0e:fb:a8:be:82:b2:72:66:3a:76:d5:23:3d:
                    f3:e4:40:89:c1:37:6e:79:9f:8e:7e:01:c4:ed:ea:
                    2f:3e:39:1a:24:12:74:f8:c3:00:d7:22:d9:1e:f7:
                    f5:ca:a7:65:32:35:5f:ad:76:be:14:92:01:84:72:
                    53:63:77:82:83:96:1a:e7:14:70:5d:2b:ee:72:49:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:33:4F:28:44:B0:E6:86:F2:F2:09:03:71:29:3E:8F:5B:CA:2C
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139322e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:d2:bb:48:c7:ef:71:c3:01:fa:97:ef:d6:42:70:8c:0b:
         33:22:98:f6:7b:12:3b:a6:c2:b6:f5:d8:67:5a:bc:c9:ab:1e:
         a4:0f:c6:9e:c8:ed:33:1e:bc:5b:9d:dd:4d:e1:75:60:3e:ec:
         ca:ac:f8:48:62:c3:c0:fe:6c:85:f7:af:1c:22:ab:64:db:a8:
         ac:7a:68:5b:d9:80:5f:b9:16:e2:e3:b5:c6:d1:ea:fa:9c:3c:
         d4:21:9d:68:80:71:94:ce:c7:29:be:50:ff:35:ce:87:8b:ce:
         11:a2:25:10:55:1a:b3:ad:3d:ca:15:2f:b0:d6:0d:88:90:5a:
         88:4c:0a:eb:58:83:4d:52:35:06:23:b2:de:b8:2c:50:6e:d1:
         25:9d:ed:9e:9d:56:e4:6c:80:77:88:8e:67:45:6c:ff:dd:8f:
         fc:f6:33:71:cb:f0:f2:db:bc:d1:e3:eb:23:f9:a8:0d:8a:99:
         3c:e1:46:ff:c4:d4:e1:10:9d:22:76:ba:dd:d6:f1:31:80:31:
         8d:1a:9c:92:18:d1:46:6b:f8:3e:45:3e:06:98:42:3b:7e:47:
         c3:44:a4:99:be:27:39:16:f9:4a:74:46:a3:5c:a1:d7:a4:8f:
         11:2d:85:32:c5:2b:86:0c:be:49:09:f4:92:1c:19:aa:3a:d7:
         0f:e6:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:39 2025 by rpki-client