Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa
File:                     3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier:          uC8qrugRPrmw2aL0VOaN+mge/WIUhrsvT1fu9aVsPPM=
Subject key identifier:   B6:99:B7:BE:6A:75:71:1F:DB:2A:B2:7F:B2:33:9C:09:BB:7E:12:D9
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       2CF985BE6763E0444F60F5DCAFF6DF9449D620AE
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa
Signing time:             Mon 30 Oct 2023 18:04:39 +0000
ROA not before:           Mon 30 Oct 2023 17:59:39 +0000
ROA not after:            Mon 28 Oct 2024 18:04:39 +0000
asID:                     266635
IP address blocks:        128.201.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f9:85:be:67:63:e0:44:4f:60:f5:dc:af:f6:df:94:49:d6:20:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Oct 30 17:59:39 2023 GMT
            Not After : Oct 28 18:04:39 2024 GMT
        Subject: CN=B699B7BE6A75711FDB2AB27FB2339C09BB7E12D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:0f:b1:b1:e7:a0:f7:d9:aa:e8:87:29:62:
                    ed:99:d0:fb:a0:76:16:75:bb:87:2c:38:41:18:ef:
                    fd:3c:e1:17:ab:6f:b4:25:f6:fc:02:27:7a:44:81:
                    ab:17:60:1a:9d:d3:a0:45:c5:54:ca:f8:b7:07:aa:
                    83:23:73:b6:26:b6:66:cd:af:48:71:ea:bc:2c:07:
                    4e:2f:05:33:e4:d2:ec:f8:b8:74:96:4d:28:d9:7f:
                    26:88:95:a5:d8:bb:fb:f6:1f:1b:6a:da:5f:d2:ab:
                    96:38:bd:94:1f:aa:7d:ca:4c:9b:63:b5:38:da:a8:
                    1f:d5:2d:aa:cf:b5:bf:69:09:c0:6b:77:84:4a:b5:
                    54:94:a6:ce:e2:3d:8b:26:0e:ad:b8:87:67:90:7b:
                    ae:2a:ea:bc:a9:e4:63:e2:2f:23:df:cf:1b:87:42:
                    a1:fd:5a:1d:47:3e:d1:87:15:64:c5:4c:2a:21:50:
                    1f:80:6d:e4:26:63:53:ec:ba:fe:2a:79:d9:02:41:
                    9f:1c:9f:d9:86:23:69:4d:b0:36:2e:93:6e:00:6f:
                    b0:ea:1e:e5:68:a3:39:93:be:a8:24:bb:f9:c7:c4:
                    8c:41:e3:28:80:71:63:ea:55:74:32:ab:72:b2:01:
                    23:b2:30:7b:31:82:e5:a4:68:77:91:e3:1c:9c:b5:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:B7:BE:6A:75:71:1F:DB:2A:B2:7F:B2:33:9C:09:BB:7E:12:D9
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:0b:47:53:fd:a3:13:9a:6c:eb:a1:1a:b0:0c:bc:7c:33:
         6e:13:2c:52:5e:31:5a:ce:ee:e8:55:be:71:47:7c:c0:c5:a0:
         21:2a:33:6e:18:a5:26:50:b3:f8:c7:65:f5:f6:74:6a:1c:48:
         f4:af:f0:77:d5:94:a5:66:42:82:73:ad:7f:3e:4c:dd:92:9a:
         6e:bb:01:33:d5:24:80:0a:96:12:0d:b2:d0:27:40:7d:5f:f1:
         a4:9e:44:42:93:30:f7:54:6a:43:10:a0:41:99:8e:4d:0f:1b:
         4f:07:f0:1a:a9:14:42:82:3e:bc:d4:12:29:70:03:7b:c5:a5:
         f4:c0:03:89:5b:db:91:b7:27:56:a8:34:46:fa:21:67:e1:14:
         60:5d:5f:68:bd:b5:f0:cd:a5:8d:b9:6c:30:e6:f6:b1:d0:e8:
         b0:bf:c0:40:4f:81:8c:88:b3:a2:0f:16:f2:5b:a9:b1:07:4d:
         d8:98:8e:82:98:91:03:fa:2b:d8:77:d7:87:a3:86:4d:55:2b:
         f1:9f:48:63:dd:84:0e:d3:aa:3c:f5:1c:23:26:c0:18:b9:a8:
         4d:dc:0b:4a:0c:da:1c:19:ea:90:4e:e5:6f:74:53:89:3b:40:
         be:c0:bc:66:d5:69:72:72:7c:b7:a7:20:cf:49:ad:34:2f:e8:
         32:18:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:55 2025 by rpki-client