Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          CGiD6lmbw1cY2SgmtyI6lq3MqzbstFuLK8zilmZiOLw=
Subject key identifier:   4D:F1:C3:00:AC:1A:8E:48:5F:FC:2B:DF:0A:E7:19:62:85:46:8F:83
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       28BEE11D66A55D8A7AE5C8E0873702E430682D89
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:00 +0000
ROA not before:           Wed 05 Mar 2025 20:31:00 +0000
ROA not after:            Wed 04 Mar 2026 20:36:00 +0000
asID:                     262617
IP address blocks:        187.62.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:be:e1:1d:66:a5:5d:8a:7a:e5:c8:e0:87:37:02:e4:30:68:2d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:00 2025 GMT
            Not After : Mar  4 20:36:00 2026 GMT
        Subject: CN=4DF1C300AC1A8E485FFC2BDF0AE7196285468F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:69:50:17:42:8e:02:32:a5:d4:a4:f9:c2:
                    a1:cd:6a:5b:42:c3:3f:80:17:0f:73:8c:98:31:e3:
                    75:50:a2:66:b2:89:cf:d8:6c:4d:ee:b9:38:f7:67:
                    db:20:69:33:68:d4:d2:45:18:1b:12:9b:ad:7c:4d:
                    4d:15:71:90:0c:8c:90:ae:73:a4:b3:3a:aa:87:19:
                    e0:27:2c:f5:aa:9f:40:b1:53:6f:1d:25:b8:84:9f:
                    2f:c4:1a:0c:42:da:df:2c:9a:74:56:f7:34:36:2b:
                    c9:11:20:d5:06:04:13:67:d8:6d:f6:6e:6f:a4:7b:
                    a4:d9:54:7b:02:f6:ad:c7:73:be:08:fb:00:f3:7a:
                    44:a1:5a:d4:5f:77:b3:64:79:38:f4:68:91:c5:b2:
                    1d:4f:8d:94:35:ae:73:47:d4:1c:c4:32:57:b2:3d:
                    81:d8:68:e1:c7:84:c0:4a:60:2f:38:10:df:f3:c2:
                    4e:af:7e:66:c8:7d:8e:ae:c7:79:0d:55:4e:f1:5e:
                    72:cc:1a:d1:96:34:42:34:30:d7:ec:e8:6a:bd:1b:
                    23:43:69:fe:6f:b6:fb:22:b6:a9:67:f9:67:4d:96:
                    a4:88:f1:2e:2d:3a:48:f1:76:ad:89:6d:8e:5b:08:
                    b8:0a:85:45:fc:7b:8a:eb:02:9c:91:3c:56:f5:ba:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:C3:00:AC:1A:8E:48:5F:FC:2B:DF:0A:E7:19:62:85:46:8F:83
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:17:df:68:e4:c6:6d:8f:77:8d:28:38:ec:80:73:fb:61:
         70:d6:9c:37:b9:34:96:0a:e6:9a:f8:10:78:60:24:42:e1:60:
         ad:cc:68:10:4d:cd:4e:62:11:f0:29:d3:d1:a6:ef:4b:98:83:
         cb:68:ba:4e:8a:fb:1a:04:e0:2e:db:40:08:30:4a:1f:52:00:
         73:71:5b:2e:a0:83:87:7f:8c:a9:ab:fd:0a:60:8d:8e:de:6f:
         50:0f:3f:ab:00:ee:01:80:8b:35:a7:84:ed:38:11:c3:32:9a:
         e7:0f:52:d7:6a:9b:8e:ac:0d:e2:62:8e:3b:15:93:20:db:96:
         e8:e1:e0:5c:ae:cd:ac:b3:34:6b:bb:dd:48:5e:8b:b3:13:b6:
         6a:6d:18:9d:9b:1c:06:86:b8:bd:1c:a9:a2:10:45:81:b7:de:
         ee:eb:13:89:05:65:bb:60:70:7e:d7:da:76:77:fd:8d:8b:9a:
         26:00:e6:6e:06:5e:f1:64:34:1f:d0:81:90:01:7b:94:ab:96:
         4a:8c:e2:06:a5:22:e3:7c:23:e5:9f:16:73:f0:c0:10:4c:3e:
         e3:43:07:53:cd:37:09:0d:2b:ad:5c:3c:dc:d1:84:ac:cb:02:
         1a:8b:80:13:47:d1:84:a1:6b:37:61:e0:1a:41:fc:24:dc:8d:
         e2:93:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:37:00 2025 by rpki-client