Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          RFjcEYs7HdIfm6keooYkaeg9Jen5kOONwGTPqMFLAU0=
Subject key identifier:   B8:71:12:3F:D5:0C:68:2A:F8:AB:6A:AC:60:F2:A1:BD:83:35:4D:7C
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       08188FDB28EB5244E7825C824665587F12C2EAC2
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:04 +0000
ROA not before:           Wed 05 Mar 2025 20:31:04 +0000
ROA not after:            Wed 04 Mar 2026 20:36:04 +0000
asID:                     262617
IP address blocks:        187.62.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:18:8f:db:28:eb:52:44:e7:82:5c:82:46:65:58:7f:12:c2:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:04 2025 GMT
            Not After : Mar  4 20:36:04 2026 GMT
        Subject: CN=B871123FD50C682AF8AB6AAC60F2A1BD83354D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:7c:3a:2d:32:71:da:6b:c1:6c:7d:08:c3:
                    ef:a6:d3:6b:a7:7b:bf:55:44:97:87:73:5a:c1:9e:
                    32:b8:aa:b4:d1:e2:83:ca:90:89:73:cb:b8:fe:5e:
                    03:cc:c9:23:89:90:37:2c:14:89:bc:5a:fd:46:cc:
                    20:40:14:1b:40:d3:1f:77:17:ac:3a:8a:dc:18:93:
                    29:70:dd:8a:60:96:6c:4f:54:de:fd:9c:41:f0:28:
                    68:45:d9:ec:0b:eb:92:05:35:2a:53:ba:50:0f:0c:
                    c1:8d:0c:ae:ef:50:e7:16:d3:14:93:8d:49:81:6d:
                    ec:c1:09:63:65:1d:fa:ac:db:5f:df:36:a3:7b:8b:
                    14:cc:45:d0:b6:68:fe:c6:ae:69:70:2c:82:70:06:
                    74:07:e0:1f:b2:ea:c2:b4:88:1b:57:ea:f4:2d:42:
                    34:e4:c9:0b:d9:81:80:a7:b0:09:1e:6e:a8:44:84:
                    76:42:63:d5:05:dc:97:2d:e8:cc:03:fd:0e:a7:d4:
                    ee:20:1a:67:f0:55:e4:aa:ee:53:45:08:a7:cd:70:
                    54:b8:39:d9:7a:42:8f:39:89:17:c4:33:ea:a8:80:
                    53:56:02:c1:2c:42:5b:fb:56:c3:d1:6e:fd:ef:91:
                    6e:7a:cb:ad:e1:d7:ae:de:9c:3d:b0:2a:06:8d:23:
                    77:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:71:12:3F:D5:0C:68:2A:F8:AB:6A:AC:60:F2:A1:BD:83:35:4D:7C
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139342e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:71:c7:eb:f9:53:ed:65:c7:54:12:55:47:b0:15:32:69:2e:
         6c:88:98:a1:67:33:6f:e6:33:b2:d5:57:5c:c3:c6:36:14:b6:
         5d:a2:c5:47:77:f4:91:f6:47:81:38:29:cb:69:2c:44:44:4f:
         34:b7:b8:85:1e:5c:a6:c4:fc:f0:7a:09:8c:35:0c:cd:e4:35:
         b1:41:e4:5e:8d:b5:ea:70:59:98:1d:60:c7:f6:3b:1e:bc:80:
         78:c1:e6:1a:b0:94:7b:62:81:e8:94:7f:cd:4c:7d:2d:47:c1:
         b5:f1:f3:d5:22:1b:0e:38:f9:7c:dd:ba:5d:f4:61:20:ae:80:
         98:18:16:21:d4:fd:e5:39:76:2a:cd:74:96:8a:e2:c8:1e:1f:
         45:75:94:0a:84:20:30:e7:fa:cc:f9:a1:68:52:f4:5e:b5:d4:
         39:76:e9:9e:e1:fd:49:9c:78:96:97:82:dc:1d:54:20:9b:10:
         bd:1c:df:59:4a:17:0e:a2:84:06:8a:23:62:8a:ef:a2:e2:ea:
         c1:bc:59:54:22:30:f3:b3:6d:00:14:35:98:d5:5f:66:4c:4f:
         cc:aa:b7:2e:79:9b:44:71:d9:6e:93:c7:45:57:bf:93:59:b5:
         c9:12:64:ed:27:e0:b1:66:2c:f8:8d:f2:4e:6f:9b:05:5d:4f:
         d3:3f:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:35 2025 by rpki-client