Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          c8z7Fc0mhraSR3mLvelXxkH3er2h+RXsT4Rz4JjqWjI=
Subject key identifier:   62:73:F0:2F:98:04:FD:C5:0D:94:E8:D9:B6:5C:28:E0:5F:0B:A9:9A
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       23428E7A3C61E9A8BC7F59F7C7D4062CAE3BCD5D
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:10 +0000
ROA not before:           Wed 05 Mar 2025 20:31:10 +0000
ROA not after:            Wed 04 Mar 2026 20:36:10 +0000
asID:                     262617
IP address blocks:        187.62.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:42:8e:7a:3c:61:e9:a8:bc:7f:59:f7:c7:d4:06:2c:ae:3b:cd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:10 2025 GMT
            Not After : Mar  4 20:36:10 2026 GMT
        Subject: CN=6273F02F9804FDC50D94E8D9B65C28E05F0BA99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:5e:a3:48:d0:dc:77:37:15:aa:87:d4:0b:
                    e0:ed:28:56:0a:08:95:f6:fd:8c:27:97:50:58:85:
                    17:1e:74:52:cd:a7:d4:0c:d7:17:bd:48:a0:f6:d6:
                    42:15:84:c9:36:dc:af:1a:31:74:5d:8a:c9:6d:02:
                    26:8c:09:3f:e7:87:bc:b2:52:94:16:5e:27:18:d7:
                    76:5c:c1:cf:d2:34:a8:54:b0:c2:c1:62:75:8c:0d:
                    f3:87:d8:81:b5:30:57:ba:be:86:70:67:c5:e7:85:
                    7d:68:f6:22:07:c7:f1:8d:fc:f5:68:f5:c0:a2:c7:
                    f3:50:b6:81:c8:46:3f:de:1f:a9:a4:81:3d:0d:80:
                    e7:e7:d6:b7:b3:23:ac:60:c1:df:0e:23:5a:dd:50:
                    fc:c6:90:32:20:8a:5e:bc:2e:52:48:4b:49:1d:2d:
                    f7:38:bf:e0:c9:1a:db:e2:7b:6d:37:e5:ea:05:5d:
                    c0:84:e1:80:61:38:f8:40:8c:72:da:f5:9a:c7:64:
                    ca:a3:3d:a3:d1:48:9a:04:ba:15:48:a5:4c:15:d8:
                    b3:3a:cb:d5:2b:5e:20:7d:74:cd:b9:23:fa:ca:0d:
                    cd:b7:e9:a4:b2:0c:b2:bc:d5:99:b6:c7:b3:55:ee:
                    44:3b:dd:94:13:49:ae:07:7c:1e:0a:20:bb:ee:c9:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:73:F0:2F:98:04:FD:C5:0D:94:E8:D9:B6:5C:28:E0:5F:0B:A9:9A
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ee:1c:47:89:30:02:ad:84:fd:f9:de:ba:a3:39:4a:4a:88:
         e2:65:a3:7c:a8:ae:f8:b6:39:e3:c7:1a:97:90:05:bf:79:ee:
         2d:c9:54:51:1e:ef:6c:59:29:f6:ef:ce:d2:28:50:61:32:ba:
         e7:07:ff:ec:86:70:22:8e:ca:19:4e:29:25:59:6f:6b:0d:3a:
         38:a0:19:5a:32:cb:88:41:11:09:13:61:2f:f5:a2:31:39:f3:
         9c:23:00:01:d1:c5:58:8a:17:bf:26:2f:20:e6:e4:a2:de:89:
         8d:fb:4d:e1:55:87:a4:88:dc:bf:5a:bd:63:c5:98:64:a0:af:
         e0:21:f2:4d:b3:d7:00:e3:57:37:eb:f6:ca:ec:b8:e3:da:75:
         44:d3:a2:66:3a:6a:ce:d4:fa:9f:bc:97:6d:4b:87:f0:9c:28:
         23:da:b7:35:c7:b3:e9:45:6f:c0:8f:c9:2b:27:b1:f2:55:02:
         3d:6f:95:a1:09:08:11:35:90:ce:f4:df:55:7f:f5:ae:27:88:
         4b:21:d8:b9:4e:c7:f9:7a:1b:7a:3d:40:cd:4e:ac:2f:24:ec:
         27:3c:49:65:f5:1e:f4:35:c0:eb:29:e7:c3:2f:68:54:d1:c6:
         b7:78:a0:54:6a:7d:f9:5d:ad:ea:84:c1:a0:fc:bc:db:d0:1f:
         b9:9a:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:14:26 2025 by rpki-client