Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa (raw, json)
Hash identifier:          GLGNhQYqJiBsmNmq0ptFK6ZALW5CeGXDNCytMpVi/zI=
Subject key identifier:   6D:36:01:BC:63:1E:4C:DA:2C:66:22:D8:07:17:16:4C:E2:30:5B:4E
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       7E2B3B940BD35E70FC7AF8040C2E8E9DA1D8AE79
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
Signing time:             Wed 29 Nov 2023 22:18:37 +0000
ROA not before:           Wed 29 Nov 2023 22:13:37 +0000
ROA not after:            Wed 27 Nov 2024 22:18:37 +0000
asID:                     266635
IP address blocks:        128.201.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:3b:94:0b:d3:5e:70:fc:7a:f8:04:0c:2e:8e:9d:a1:d8:ae:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Nov 29 22:13:37 2023 GMT
            Not After : Nov 27 22:18:37 2024 GMT
        Subject: CN=6D3601BC631E4CDA2C6622D80717164CE2305B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:15:0e:9e:dc:22:e9:88:e3:3c:7a:33:dc:
                    ce:13:1a:e9:39:79:85:68:3f:25:5f:22:e1:92:f2:
                    12:39:20:8f:71:a9:3f:06:30:d9:f1:b9:9d:db:70:
                    db:e7:dd:7a:a8:6a:5f:7f:84:59:73:f1:79:71:90:
                    87:47:fd:b4:cd:ea:66:34:4c:80:36:e5:88:5a:3b:
                    90:b9:32:77:af:5c:9e:23:99:41:3d:66:66:6c:df:
                    dc:66:86:4d:4d:d5:49:e8:f6:9e:f9:30:ab:ab:50:
                    82:46:93:b5:92:1c:02:72:05:61:8a:bc:ca:58:15:
                    e6:3d:38:1a:be:08:e9:45:5e:ad:a8:02:79:a6:61:
                    ff:c2:c7:ff:48:83:9b:7f:8e:a7:88:64:e5:4c:bf:
                    c2:37:3e:9c:7b:3e:b1:a6:53:3a:8d:d3:99:6b:91:
                    78:c2:e9:33:ae:ff:2e:5c:63:45:85:83:38:8f:da:
                    56:11:cb:56:c9:04:bb:d4:e6:1e:d2:29:a3:b4:78:
                    76:01:f6:e0:e3:c8:f7:d8:9e:f9:3d:a6:e0:c1:6f:
                    4c:cb:ad:ff:fa:af:76:c1:2f:8b:2d:b5:38:c5:ed:
                    c4:11:c1:ac:dc:1a:a5:ec:3d:c0:a2:b7:a8:bd:b1:
                    e6:ff:08:54:91:95:6d:43:d0:2e:09:cb:6d:1c:8b:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:01:BC:63:1E:4C:DA:2C:66:22:D8:07:17:16:4C:E2:30:5B:4E
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:df:10:da:d0:bd:21:a3:3a:51:ee:15:4a:ac:d9:e1:60:0f:
         24:f9:aa:57:75:ea:c8:a6:54:38:f4:2c:3b:e6:eb:01:90:85:
         d6:55:40:5c:5b:30:97:c2:10:ba:01:62:31:c3:e2:cc:8b:cb:
         df:a0:6f:3d:d4:38:e4:18:fe:97:19:9c:72:b8:b7:b5:10:ea:
         ee:61:ea:27:99:c1:b9:f5:fc:0c:d5:7c:90:83:ec:4e:b6:2c:
         ae:e8:ae:96:13:88:e0:1e:0f:05:ca:4b:0f:6f:74:6a:16:22:
         cd:cd:55:ec:91:41:02:7f:3e:60:df:ac:24:c6:bf:84:a8:d0:
         16:cf:e1:2a:8b:29:cf:06:ef:ca:b8:46:fc:7b:3c:81:de:6f:
         e7:2b:63:2b:77:61:ee:f8:d2:45:db:46:25:9e:90:c8:3b:31:
         3b:2a:45:de:68:5e:db:80:45:57:8a:9a:67:9f:14:81:2a:bb:
         78:77:4a:d9:27:c9:e8:33:2d:db:d5:df:29:58:ff:85:30:f2:
         e1:73:6e:c8:82:4b:52:f1:a3:4f:45:d0:11:0a:aa:c8:19:5d:
         64:74:f9:cd:a6:bc:48:a0:b5:51:b5:4f:4b:53:d9:6d:54:d8:
         f3:05:51:1c:a0:29:98:03:42:a7:e7:d9:6c:b2:94:09:79:19:
         4d:ff:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:56 2025 by rpki-client