Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          drbVe7tH//i+k0m7ixl6wYhw6XzOwlESKUG7PpXBdX0=
Subject key identifier:   11:CC:A6:C6:C5:7D:B7:05:73:E6:E2:B0:77:6F:9E:C8:D0:42:47:35
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       4773280D4FD722D0A76B23DD7B6D5CE799A60127
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:52 +0000
ROA not before:           Wed 05 Mar 2025 20:30:52 +0000
ROA not after:            Wed 04 Mar 2026 20:35:52 +0000
asID:                     262617
IP address blocks:        187.62.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:73:28:0d:4f:d7:22:d0:a7:6b:23:dd:7b:6d:5c:e7:99:a6:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:52 2025 GMT
            Not After : Mar  4 20:35:52 2026 GMT
        Subject: CN=11CCA6C6C57DB70573E6E2B0776F9EC8D0424735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:32:b0:40:f7:cd:ec:f0:f9:8f:c8:b0:e5:
                    6a:f4:b5:75:8c:59:49:7e:af:d4:d1:9e:41:bf:35:
                    5b:c7:83:ba:c0:20:8d:08:90:c5:be:74:68:f2:74:
                    b6:b8:2e:e1:51:be:b9:21:1d:85:c4:db:0d:22:6d:
                    8b:65:45:4c:34:98:70:79:94:c6:1e:5b:38:a9:f4:
                    22:a2:31:75:03:d2:84:43:42:e3:e9:9c:56:e6:df:
                    16:1c:9b:1c:72:ff:c7:0a:75:76:a2:8f:ea:9d:35:
                    b8:7e:46:c9:3f:c6:4a:07:c6:ab:d5:ca:38:7b:07:
                    d0:7e:47:d6:1d:1c:ee:d2:38:de:7f:be:ca:7f:0e:
                    b4:b4:a9:59:d5:d3:24:37:cf:fd:cf:ef:89:57:ca:
                    8c:3f:36:7f:56:3e:7e:a4:2c:a9:7a:51:31:e6:52:
                    9d:93:c2:04:32:c9:71:da:02:58:76:3c:96:5e:da:
                    b7:dc:74:31:06:2c:d0:33:14:33:ad:44:90:0d:f3:
                    4d:2e:f3:67:d5:29:52:85:42:cf:6b:e9:13:79:00:
                    ed:4d:8b:02:08:02:a5:9b:4c:b7:bb:4a:ce:39:a0:
                    26:bf:fc:69:8b:c2:1a:c8:f5:93:dd:b0:24:06:98:
                    dd:78:76:b6:e4:d6:da:02:0d:2c:1e:34:ba:bf:38:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:A6:C6:C5:7D:B7:05:73:E6:E2:B0:77:6F:9E:C8:D0:42:47:35
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:52:2f:fa:79:81:f2:22:84:4a:55:42:f1:f2:98:f3:2a:
         9b:8b:c1:89:e3:20:9b:17:a3:51:e6:c8:9d:f1:43:50:51:ad:
         60:c2:ee:26:4a:57:5d:2f:09:a9:c1:44:10:1c:17:5a:b0:5e:
         de:3d:fd:19:ae:9c:98:d1:66:40:ac:59:11:38:c2:e4:83:52:
         d4:07:1a:05:19:35:38:f5:13:3b:0e:cf:21:f5:ca:c5:87:41:
         92:3a:07:73:88:51:85:db:84:c0:d2:2c:7e:8a:d7:2e:ee:10:
         9d:97:b3:52:8c:22:27:a6:69:90:63:d7:96:07:99:32:cc:7c:
         fd:a2:86:1d:74:28:63:68:1d:15:d3:73:e7:4f:c0:6b:0a:b8:
         d1:99:2e:fd:ad:be:22:d2:37:a2:82:78:f9:10:01:51:0b:9a:
         80:64:32:f6:f2:e9:21:f1:8e:ef:41:58:49:d2:8f:d9:88:c8:
         99:d8:e9:bc:e6:e1:9d:08:1c:ee:ce:ec:eb:8a:a8:e2:21:51:
         1f:4c:63:3a:dc:55:85:96:5b:fb:71:d2:df:11:e9:1a:54:41:
         7d:0d:16:0e:27:d6:72:94:c1:af:21:49:77:97:e7:55:aa:f3:
         07:3b:48:28:2d:8e:66:5c:48:02:b1:a9:c7:b9:ab:85:15:3b:
         4a:3a:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:54:29 2025 by rpki-client