Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          AaG/llk5PIISibzAAfMDemdtpDwxLfOAvZkr0RfyY6o=
Subject key identifier:   83:AA:91:20:1F:61:A3:79:40:CC:93:BD:83:13:CA:F1:84:4D:97:B4
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       10AF2FA2FFDD6B656087BED83BD5E63FEEB546A2
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:07 +0000
ROA not before:           Wed 05 Mar 2025 20:31:07 +0000
ROA not after:            Wed 04 Mar 2026 20:36:07 +0000
asID:                     262617
IP address blocks:        187.62.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:af:2f:a2:ff:dd:6b:65:60:87:be:d8:3b:d5:e6:3f:ee:b5:46:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:07 2025 GMT
            Not After : Mar  4 20:36:07 2026 GMT
        Subject: CN=83AA91201F61A37940CC93BD8313CAF1844D97B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:8a:25:84:c8:39:94:6b:96:3e:53:1e:43:
                    23:b3:55:44:78:2a:8b:f3:27:89:cf:dc:31:03:b6:
                    68:12:6d:39:8e:39:89:3b:61:97:fb:f0:ee:7a:8f:
                    0a:78:6f:74:dd:a7:74:33:5a:b3:40:52:f7:76:7b:
                    6b:f7:ac:f6:94:68:d4:89:63:83:40:e5:5b:68:cd:
                    86:6b:c5:24:3c:ca:f7:d6:48:2d:ea:7c:66:c7:75:
                    a8:d7:c6:b4:fd:3d:af:b2:f6:80:7c:5f:b0:eb:ee:
                    c5:72:5b:dc:3e:b3:43:9b:1a:fe:a7:39:d7:90:b0:
                    ca:8e:12:6a:ae:f6:53:f1:80:2b:21:42:41:aa:7c:
                    18:8c:0e:d1:2c:d6:fc:1c:61:95:cf:74:cd:14:a2:
                    4f:a6:61:ee:a7:04:8a:09:ee:03:25:75:48:6c:ca:
                    0a:31:98:31:9e:83:ba:1e:8f:15:9d:f1:ca:18:e2:
                    e5:6f:40:48:09:0f:95:f6:aa:53:44:52:66:3b:b2:
                    53:d8:7b:8d:ed:5a:20:0a:e4:b9:3a:83:78:10:e4:
                    8e:e8:95:23:08:99:ed:2c:1e:46:1c:c2:9f:f6:5e:
                    68:e9:f8:db:56:46:6e:66:84:7c:da:a9:bd:4d:2d:
                    34:1f:08:dc:d3:82:1a:77:b5:40:71:67:7e:a7:ea:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AA:91:20:1F:61:A3:79:40:CC:93:BD:83:13:CA:F1:84:4D:97:B4
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:1c:d7:ba:ad:58:6d:83:b5:d4:89:cc:55:f8:99:1c:87:
         d0:cf:18:28:86:43:5d:3d:26:69:4c:05:66:09:99:e2:7a:1f:
         cb:83:5e:6a:c0:21:e2:53:86:1a:a4:8d:3a:b5:5b:ca:33:d0:
         d8:6d:ad:9e:60:16:cd:c5:50:fe:9a:29:eb:4e:db:1d:1d:30:
         bb:c1:31:ad:76:3e:3e:f6:7b:6f:97:12:d0:e9:1e:21:79:b3:
         f6:7e:39:be:84:73:90:40:43:15:ec:d6:2f:75:68:62:45:18:
         f4:97:d2:ff:7a:a9:45:d3:e1:63:1a:4e:f7:ec:3c:49:ac:a2:
         63:a6:31:cc:31:5a:a3:16:31:f5:87:63:3b:1d:11:ff:f0:55:
         98:52:7b:8f:72:99:7d:87:14:37:85:8b:46:e9:65:24:74:f3:
         35:14:11:7d:18:f7:78:42:1e:cd:80:d8:1d:64:a4:97:18:34:
         e3:70:5b:8f:d1:56:d4:f5:fd:b5:63:c4:c3:c4:bc:21:81:e3:
         db:a3:63:9c:54:57:6a:ec:07:82:0d:0e:c6:5f:33:79:2f:4a:
         6e:35:f7:7f:32:2c:47:88:87:31:80:a6:70:02:43:82:9d:41:
         3f:aa:2a:fe:66:71:6d:58:f5:8c:95:1a:88:ad:e8:54:a9:1a:
         1f:51:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:14 2025 by rpki-client