Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135382e302f32332d3233203d3e20323636363335.roa
File:                     3132382e3230312e3135382e302f32332d3233203d3e20323636363335.roa (raw, json)
Hash identifier:          FcA6dIVoMHp7Ohj+0+hvpVdDCeyi4hQpk0dAY9+a5fw=
Subject key identifier:   82:A9:2B:56:18:9D:AC:69:97:E4:B0:73:0D:92:CF:39:C1:D6:8A:F4
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       7F8A69DFC4F25660B2D87FBB1F80F58DA6EB5D30
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135382e302f32332d3233203d3e20323636363335.roa
Signing time:             Wed 29 Nov 2023 22:18:37 +0000
ROA not before:           Wed 29 Nov 2023 22:13:37 +0000
ROA not after:            Wed 27 Nov 2024 22:18:37 +0000
asID:                     266635
IP address blocks:        128.201.158.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8a:69:df:c4:f2:56:60:b2:d8:7f:bb:1f:80:f5:8d:a6:eb:5d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Nov 29 22:13:37 2023 GMT
            Not After : Nov 27 22:18:37 2024 GMT
        Subject: CN=82A92B56189DAC6997E4B0730D92CF39C1D68AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:96:0e:21:a1:83:78:1b:87:ad:11:d5:10:
                    76:c0:68:cd:26:4e:fd:f9:7f:63:cf:d0:5f:07:85:
                    94:97:e8:c4:b3:ba:59:7a:07:af:85:ed:ef:33:5f:
                    3e:f7:1f:10:ef:af:2d:73:fe:c8:22:03:79:e9:db:
                    ad:ee:02:21:44:ff:12:e0:57:6e:2a:4a:ee:14:77:
                    d5:27:15:45:2a:92:2f:b8:77:7e:a6:2c:78:f1:25:
                    90:e3:9f:34:da:f8:e4:3b:7b:80:8c:3d:7e:fd:de:
                    3e:f9:50:6b:84:34:2f:bb:24:18:ee:de:e9:1b:44:
                    f9:df:12:ce:32:f3:87:18:9c:1d:ab:e7:c5:19:8c:
                    33:5a:73:e0:1e:d8:7d:0d:73:58:7e:6f:55:d1:73:
                    36:e8:52:d5:c6:0a:8f:ab:f6:83:5c:1f:93:9a:fb:
                    12:fb:21:e6:85:e8:4b:80:81:9a:09:4b:ed:d3:01:
                    47:02:38:96:bb:bf:3a:b7:89:a9:ce:29:62:d9:2f:
                    82:9a:c3:1f:9d:cc:4d:bc:9c:e5:d9:6c:70:09:e5:
                    bc:9a:81:0a:80:e2:85:54:14:de:52:b0:fd:dc:9e:
                    c0:0a:90:01:c7:21:37:54:0d:ac:a6:c1:eb:69:04:
                    46:fb:ce:04:b1:f1:22:eb:08:0e:f2:98:dd:7a:53:
                    6b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:2B:56:18:9D:AC:69:97:E4:B0:73:0D:92:CF:39:C1:D6:8A:F4
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135382e302f32332d3233203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:c9:b9:4c:11:74:ee:2b:25:a8:0d:d2:97:e5:cc:fa:72:
         df:e1:08:0e:84:25:96:b7:cd:93:f6:a1:85:8f:e1:82:96:9c:
         d9:3c:92:23:b8:f7:e9:84:0d:28:34:9d:91:45:27:59:27:77:
         5d:f2:e8:29:13:3a:c9:06:dc:06:0a:3c:8b:2f:59:8d:ca:e6:
         02:32:57:fe:f1:d9:11:21:ff:dc:f1:44:84:10:d2:90:ca:c2:
         67:af:33:11:f7:85:b7:db:97:52:ea:4a:1a:04:67:28:a6:78:
         6e:10:15:ef:7f:e3:da:c4:ee:be:47:35:78:34:ef:2e:a7:64:
         66:38:3b:14:70:bf:ae:92:f8:48:12:4f:95:f4:50:13:45:31:
         0d:20:04:fe:f6:ae:b3:24:52:ee:61:2a:fb:c8:f6:d4:3d:e8:
         9d:1a:6a:24:71:a9:e5:5d:f4:d5:30:b5:c1:be:27:5a:dd:d6:
         1b:5e:c1:cb:7a:c8:88:28:7e:0e:50:cf:39:22:02:f9:e1:30:
         06:45:80:42:82:a7:c9:1d:c9:dd:31:3a:57:a8:47:4e:cc:32:
         f2:b6:f1:94:6e:be:21:62:47:b4:cc:f5:87:bf:fc:25:93:70:
         27:f9:cd:85:23:52:96:8f:da:a0:63:da:19:80:37:65:9c:22:
         43:93:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:27 2025 by rpki-client