Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          2umagJXTuPGUv3HVsyAdOHBCBhiuJ93cu4RLiXJWSCk=
Subject key identifier:   B1:28:39:5A:0A:FE:4C:04:44:B1:0F:A7:1E:70:3C:5E:15:3A:0D:2F
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       45E8F7FDC1E3A13B8F1D0D8143EA15F295270C17
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:51 +0000
ROA not before:           Wed 05 Mar 2025 20:30:51 +0000
ROA not after:            Wed 04 Mar 2026 20:35:51 +0000
asID:                     262617
IP address blocks:        187.62.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e8:f7:fd:c1:e3:a1:3b:8f:1d:0d:81:43:ea:15:f2:95:27:0c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:51 2025 GMT
            Not After : Mar  4 20:35:51 2026 GMT
        Subject: CN=B128395A0AFE4C0444B10FA71E703C5E153A0D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:15:34:c4:58:13:ef:df:76:e1:71:8a:bb:
                    a5:7c:cd:f6:e8:3a:01:48:a1:7e:25:24:d7:16:f0:
                    f5:f6:fd:65:33:7f:bd:b6:d1:70:6c:0e:ef:19:6d:
                    dd:7a:f9:1d:ce:24:5d:90:16:bc:aa:c5:4b:ed:83:
                    9b:16:bf:d5:70:fe:db:ff:df:85:4e:ee:ae:54:d7:
                    96:8d:2d:6d:ba:93:88:e3:a9:d2:27:b9:62:06:91:
                    76:4f:bd:79:ff:ae:73:bf:75:c0:29:ff:ac:27:b6:
                    80:d5:7c:2b:74:1a:d9:df:59:e9:28:57:ca:8a:f2:
                    39:94:66:5e:73:4c:58:18:cc:50:82:0c:40:d0:dd:
                    26:ed:4c:cd:99:3b:1b:06:f4:dd:8d:c2:4c:72:ac:
                    02:37:37:af:10:9d:81:3f:9d:08:05:2b:47:31:ea:
                    5e:6f:f1:9d:0d:43:89:89:9e:27:fd:da:cc:38:75:
                    e1:e9:d1:c9:6c:75:7f:1e:da:42:e5:8a:6d:e2:b6:
                    b2:7e:51:c5:4f:3e:1c:66:34:d5:05:b6:59:ee:60:
                    81:3a:ae:86:df:d4:9d:81:57:53:92:1e:eb:e7:fb:
                    d8:d3:9a:ba:b0:70:ac:48:65:24:2a:38:0a:a3:b2:
                    f0:f8:fe:d8:9d:e1:7a:8c:19:59:87:38:05:17:94:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:39:5A:0A:FE:4C:04:44:B1:0F:A7:1E:70:3C:5E:15:3A:0D:2F
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:16:92:a5:dd:5d:38:62:8b:c8:b7:e7:79:45:42:17:76:d7:
         ed:44:8c:7d:8c:40:70:2c:20:9a:27:d0:0c:9f:89:04:c8:48:
         b4:fa:2b:d3:84:8b:a4:94:c7:a3:51:26:5c:ec:db:38:91:8a:
         c2:33:e0:42:fc:f0:cb:f2:8f:6c:53:87:07:0c:44:e3:a2:6c:
         44:7f:80:40:87:35:67:4c:41:9e:67:4a:0f:83:1b:4b:87:01:
         a0:e9:f3:a3:ee:20:f0:00:fe:0a:9f:af:a7:7d:c3:10:29:af:
         26:cf:5c:d3:b3:f2:78:e2:a3:f7:73:02:09:66:d1:53:49:79:
         9d:ec:4d:e7:4e:9d:be:af:43:fb:8c:0f:a3:0c:64:bb:e1:a8:
         a8:95:2e:1e:13:f5:3e:57:40:18:f6:d4:1d:35:95:aa:53:86:
         5b:b9:be:a2:a4:96:bb:3d:f8:b0:a9:58:ba:9d:27:ce:fc:2c:
         9d:0e:a5:ad:fd:d0:9a:5f:93:6a:f1:89:40:79:d9:33:78:7c:
         fd:ac:3f:6c:da:18:ec:57:07:05:cf:fe:f8:16:65:8d:50:9f:
         cc:05:3d:b8:32:31:6d:e2:9b:88:c1:18:9e:3f:88:44:ba:92:
         41:de:2a:2a:3b:ef:bc:a5:6c:2b:0e:23:b1:46:36:ee:5d:fc:
         7e:5d:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:00:02 2025 by rpki-client