Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa
File:                     3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier:          5BNIXTTrvdQeZavAJU3IoQzsBQErJlSa90D93IibKhk=
Subject key identifier:   BD:E6:70:86:C8:1B:46:31:2C:35:88:8F:0B:B7:05:49:11:D4:A9:F6
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       246D94B43B11F6F303DD3D87AA402842DAC8312E
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa
Signing time:             Mon 30 Oct 2023 18:05:00 +0000
ROA not before:           Mon 30 Oct 2023 18:00:00 +0000
ROA not after:            Mon 28 Oct 2024 18:05:00 +0000
asID:                     266635
IP address blocks:        128.201.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6d:94:b4:3b:11:f6:f3:03:dd:3d:87:aa:40:28:42:da:c8:31:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Oct 30 18:00:00 2023 GMT
            Not After : Oct 28 18:05:00 2024 GMT
        Subject: CN=BDE67086C81B46312C35888F0BB7054911D4A9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:cb:0a:68:1b:67:ad:20:88:03:88:4a:81:
                    f6:02:fe:3a:f2:b9:4f:59:fe:b7:d7:48:fb:72:3f:
                    b5:fa:8c:2b:ed:ec:6a:8d:87:25:d9:78:85:ea:cb:
                    a4:60:53:58:9a:14:90:c2:62:0d:9b:b3:5c:f9:b5:
                    99:23:e8:54:20:57:78:68:77:2a:73:e9:33:a5:1d:
                    c8:42:5d:13:89:0e:8a:12:05:d2:68:62:b4:3d:43:
                    6d:eb:4a:df:14:a7:ec:58:89:96:f3:91:bf:a6:66:
                    61:7a:dd:f1:77:b2:22:6d:49:f5:e6:a5:e1:92:03:
                    23:de:92:23:45:a3:c9:11:50:ca:ba:18:18:f0:19:
                    73:39:8c:e2:6a:12:3c:32:42:a9:b0:1e:a6:2c:1c:
                    d9:a7:d9:2e:89:83:b1:45:fa:c9:c5:6a:50:70:1b:
                    a1:e7:8e:36:ad:6d:be:e7:2d:14:f6:ff:db:0e:73:
                    8c:6c:90:24:be:93:42:3b:ea:eb:b4:af:e7:b6:8c:
                    4a:9c:f1:e7:50:76:da:8b:b0:4c:cd:23:40:a2:be:
                    a2:0f:44:2c:8c:ae:d3:d4:cb:89:3f:24:0b:56:d5:
                    00:ea:9e:d9:d0:f1:2f:6d:0f:11:10:1e:ea:8e:3c:
                    15:bf:1e:bf:01:3b:2b:a7:46:da:b1:a2:69:ef:6a:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E6:70:86:C8:1B:46:31:2C:35:88:8F:0B:B7:05:49:11:D4:A9:F6
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:33:25:18:26:63:50:56:27:07:83:59:e1:34:73:fd:5a:
         1b:66:4a:eb:17:0f:5c:17:6b:f6:96:ea:f0:b6:df:ba:2e:06:
         57:a2:88:b2:9d:20:c2:4f:59:ca:76:65:ff:cd:e6:61:89:ac:
         3e:d2:85:f3:13:46:e1:54:1d:74:1d:09:b3:93:05:30:35:2c:
         bf:61:ef:d6:b9:85:f5:42:7d:16:77:77:03:2e:8b:87:a1:36:
         91:45:e9:26:0e:f2:7b:db:e8:1a:e5:af:cc:88:e8:79:29:3e:
         fe:31:bc:68:cf:9f:87:5d:20:e3:eb:ca:22:f5:0b:17:9d:87:
         12:41:fc:4c:5c:f0:3a:7d:e9:7f:62:55:50:29:28:b6:b2:e0:
         d5:a5:e0:4d:3d:ff:56:15:ff:76:62:bf:51:e5:d9:89:bf:30:
         15:11:29:5b:d8:a4:90:ea:2e:9f:81:13:68:54:81:90:c1:ba:
         35:fb:95:3f:dc:df:fb:2b:55:47:db:cc:09:38:78:f1:0a:3a:
         08:8b:5a:ce:8d:8a:01:54:1f:9f:81:79:1e:83:af:ae:8e:01:
         32:f8:53:59:ef:63:0a:7e:58:d6:1c:b6:cc:a3:74:f9:8e:5c:
         4d:27:af:02:6a:e1:14:0d:81:2a:16:7b:86:42:35:7c:5b:76:
         46:3c:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:40:46 2025 by rpki-client