Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa (raw, json)
Hash identifier:          1bndCfEfyJduuo6QuXD3C3khsgcAQnw0aAwiVr0+BkM=
Subject key identifier:   94:00:DA:C3:4C:DD:88:42:5B:A9:93:4A:00:3B:AC:03:28:E0:5B:7C
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       501AE52E560DC94ED48AFDD7436C4330C79D342F
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa
Signing time:             Wed 29 Nov 2023 22:18:38 +0000
ROA not before:           Wed 29 Nov 2023 22:13:38 +0000
ROA not after:            Wed 27 Nov 2024 22:18:38 +0000
asID:                     266635
IP address blocks:        128.201.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1a:e5:2e:56:0d:c9:4e:d4:8a:fd:d7:43:6c:43:30:c7:9d:34:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Nov 29 22:13:38 2023 GMT
            Not After : Nov 27 22:18:38 2024 GMT
        Subject: CN=9400DAC34CDD88425BA9934A003BAC0328E05B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:1a:83:f7:ee:64:bc:97:ef:f0:cc:15:39:
                    3e:a0:3c:f2:8d:35:b3:e1:71:d4:1a:e2:5b:8f:c7:
                    7c:ed:b5:4a:b2:cb:d4:46:b8:e0:07:37:93:d7:6e:
                    06:6c:9a:b4:42:76:bb:f0:4c:87:b3:98:1b:85:c5:
                    76:89:06:6d:06:ea:5f:f0:59:ed:69:44:30:7b:61:
                    bb:f7:69:4c:77:b6:72:27:ff:9c:a1:28:e7:8f:0c:
                    34:e0:39:3f:47:37:03:1e:11:0f:b9:04:25:08:3a:
                    2d:5e:17:d4:35:50:a0:63:b9:45:cd:e0:d1:4c:3c:
                    f9:e2:aa:bf:ce:b1:3f:22:48:f8:97:5d:68:57:a4:
                    45:90:ae:cd:11:57:31:55:8f:7d:2f:0e:6a:4a:53:
                    0a:31:49:6d:4f:58:47:21:f8:b1:20:19:85:e7:4d:
                    7e:b7:70:ec:fb:15:cd:79:a8:16:e0:16:04:31:be:
                    a2:56:c0:e7:47:da:b8:5b:51:37:a7:37:ce:90:58:
                    be:db:3e:6b:9c:da:55:90:40:04:13:2e:71:7c:68:
                    71:50:fe:b5:b7:7b:38:25:43:fc:3d:d0:f6:83:61:
                    da:d7:b9:cc:a6:90:09:d3:d9:9b:bb:6a:31:f1:37:
                    93:ff:c1:15:3c:1f:28:4b:fd:ec:4f:28:f3:fc:64:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:00:DA:C3:4C:DD:88:42:5B:A9:93:4A:00:3B:AC:03:28:E0:5B:7C
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:3b:46:96:d9:32:59:e7:97:ab:f2:de:e4:7f:3f:07:5a:
         5c:3a:15:c4:e9:5b:5d:f0:83:40:7e:ce:a7:67:32:33:ea:c6:
         6a:2a:a9:65:0f:7b:86:70:2d:65:7e:bc:5b:b9:19:b6:3f:c7:
         2e:18:5e:eb:6d:8c:d7:86:db:6c:58:96:aa:c0:fd:98:78:49:
         cd:78:82:3c:6f:4a:15:77:6f:d4:5c:e4:7f:64:ab:f5:4f:24:
         de:29:c0:a3:c5:7a:fd:3c:21:51:21:a6:f4:b0:0f:37:41:9c:
         a8:db:64:92:60:f1:38:a7:c4:e0:1e:67:24:67:94:16:54:b0:
         5b:f6:1d:1e:fe:b0:c3:d9:44:5b:64:56:20:2f:f9:5e:35:49:
         53:68:b5:38:aa:95:82:40:b7:22:ba:8d:79:4a:f5:f2:8a:b4:
         6b:88:b7:c2:c8:64:d2:0d:88:74:ae:e5:b8:b6:d0:99:b3:3b:
         61:77:30:a7:79:0b:2c:d6:56:73:c8:c2:84:dc:16:4d:11:fb:
         b2:63:24:76:91:13:03:29:38:15:a6:1a:d3:72:f7:22:9a:8c:
         76:98:3d:28:ac:79:4b:c2:bb:b6:07:37:3f:66:9d:a4:3d:9e:
         d9:94:c4:3e:cd:f8:eb:9d:8f:66:b7:55:3f:01:97:c4:c1:cf:
         3b:1e:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:17 2025 by rpki-client