Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          aLNw5HJLe0/OpEG5nEkajPcCxvI0MY8hAEH4Hzekyso=
Subject key identifier:   A5:E2:A2:A6:9F:3C:27:12:17:75:D9:9A:2C:74:B2:75:6A:49:50:34
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       27F30BF5B787DAF47A7D582F158F2DD695928C8A
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:56 +0000
ROA not before:           Wed 05 Mar 2025 20:30:56 +0000
ROA not after:            Wed 04 Mar 2026 20:35:56 +0000
asID:                     262617
IP address blocks:        187.62.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f3:0b:f5:b7:87:da:f4:7a:7d:58:2f:15:8f:2d:d6:95:92:8c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:56 2025 GMT
            Not After : Mar  4 20:35:56 2026 GMT
        Subject: CN=A5E2A2A69F3C27121775D99A2C74B2756A495034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:77:3f:ad:a6:c5:f5:e9:fd:14:50:0d:c1:
                    47:50:d1:74:26:98:1a:58:71:bf:8b:67:64:fe:0f:
                    9e:d4:ac:7b:e4:dd:2b:6a:f1:eb:a8:df:c7:e2:8b:
                    6a:c7:e8:60:33:13:b1:a0:8b:9e:22:70:bb:c3:70:
                    d6:ad:4b:af:dc:00:79:d4:1c:5e:49:d5:ca:44:8d:
                    61:cc:f2:8c:45:eb:54:df:44:54:dd:54:3f:1d:72:
                    fd:16:33:fa:1b:64:58:da:00:5c:ae:3c:56:76:24:
                    ba:02:ae:17:64:7c:16:4d:15:07:d2:9a:c0:32:64:
                    26:ce:cf:c9:ba:e5:41:2c:6e:c5:bb:f2:ed:56:5c:
                    43:37:a6:0f:8f:23:a6:46:d3:67:7f:c1:8d:64:9f:
                    52:6a:71:c7:87:05:3a:70:2f:7d:2c:3d:46:a8:f2:
                    63:79:e8:79:e9:1a:8c:0a:89:a8:77:29:29:4f:d2:
                    91:7e:06:50:3a:d7:cf:fe:0d:2c:ca:9b:e4:ab:62:
                    c6:98:c9:a0:dd:64:6d:82:db:c7:91:f1:26:2e:f2:
                    34:5f:f9:e8:cc:e3:c9:72:e9:c9:b1:61:50:b5:7d:
                    03:b0:aa:8c:c8:4e:6b:ae:e8:84:c4:5a:ea:bc:12:
                    2c:f8:1a:ec:e8:85:2b:df:2f:04:0e:c5:b4:e0:f3:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E2:A2:A6:9F:3C:27:12:17:75:D9:9A:2C:74:B2:75:6A:49:50:34
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:80:9a:38:6c:d7:a5:f1:37:a9:76:5d:a0:19:e5:12:c1:
         aa:c3:e1:0a:6b:7b:94:a0:de:68:4c:b2:c7:f7:67:ad:37:da:
         a8:24:e5:9d:25:28:4c:66:3a:c4:0a:61:00:fd:e7:e4:57:a2:
         46:80:fc:80:e1:1d:4d:4d:84:ce:ba:25:6f:63:f9:27:47:f9:
         16:a5:b6:f5:39:1b:0c:4f:9d:58:b9:55:c0:2e:eb:7c:22:7b:
         60:a7:e8:11:2c:60:73:aa:55:9b:7e:fa:c2:bf:f7:4f:34:89:
         87:6f:4c:e3:11:52:4f:2a:d3:66:c3:df:eb:83:19:77:71:79:
         32:c0:b9:6c:df:b3:f9:ef:82:10:53:ea:27:2e:7c:42:29:e0:
         f4:46:00:e8:45:d3:b5:fe:be:07:35:93:9c:cd:ec:cb:56:6e:
         58:66:a3:cd:5a:a9:9e:95:02:14:33:62:d3:47:74:7c:52:76:
         e7:c5:50:ca:06:07:aa:e7:76:57:25:8f:9f:bf:9f:76:33:2c:
         aa:24:51:d9:5a:ee:4f:ba:28:dc:ed:5b:4b:3e:3a:20:23:b4:
         9d:84:e9:c8:7c:76:73:8f:45:6d:59:4d:da:2a:1e:f7:a4:cd:
         42:ba:2b:af:81:31:0e:d4:57:2e:7e:da:ad:de:78:81:ba:17:
         5f:05:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:43 2025 by rpki-client