Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/3132382e3230312e35342e302f32332d3233203d3e20323636363238.roa
File:                     3132382e3230312e35342e302f32332d3233203d3e20323636363238.roa (raw, json)
Hash identifier:          U0CVsT7VK6HLrT+3bkwYAG722S62ME1fJ6W7P3MpUKk=
Subject key identifier:   6D:E6:07:9B:65:4A:B4:88:BB:A6:87:99:8D:7A:D7:D5:44:1E:17:95
Certificate issuer:       /CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
Certificate serial:       612071EFD41EFE17ECEBE74539EAA11F2B35AB30
Authority key identifier: B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/3132382e3230312e35342e302f32332d3233203d3e20323636363238.roa
Signing time:             Sat 30 Dec 2023 16:00:00 +0000
ROA not before:           Sat 30 Dec 2023 15:55:00 +0000
ROA not after:            Sat 28 Dec 2024 16:00:00 +0000
asID:                     266628
IP address blocks:        128.201.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:71:ef:d4:1e:fe:17:ec:eb:e7:45:39:ea:a1:1f:2b:35:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
        Validity
            Not Before: Dec 30 15:55:00 2023 GMT
            Not After : Dec 28 16:00:00 2024 GMT
        Subject: CN=6DE6079B654AB488BBA687998D7AD7D5441E1795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:e2:38:24:b0:f0:00:51:74:db:23:95:13:
                    dd:35:a2:d5:ca:08:54:8c:e9:30:6e:d8:08:46:f1:
                    d3:f2:6c:04:57:24:18:cf:a4:2f:65:ac:24:e0:fe:
                    c6:54:fc:54:db:fb:97:07:29:06:91:fc:87:24:9b:
                    a1:aa:bd:53:83:25:25:fc:4c:1f:cf:30:4c:74:d7:
                    66:08:d0:38:40:93:29:99:3b:01:b4:81:c2:a3:4e:
                    c3:28:51:97:37:bf:91:db:47:92:a3:da:c8:09:40:
                    19:b4:08:41:f4:14:a9:07:0e:9b:ac:b8:66:9e:b5:
                    c2:4d:5d:f4:f6:9f:46:8c:17:67:fb:74:7c:d7:46:
                    18:db:b7:d0:0b:2f:14:bb:e2:d8:66:42:b3:89:46:
                    be:fd:6d:1c:4c:e7:b4:6f:e3:97:83:1c:73:4b:31:
                    d7:28:04:09:fe:52:05:79:1e:3a:61:54:ef:79:83:
                    62:14:44:23:6d:a3:7f:bd:2a:14:19:ef:94:d4:48:
                    fc:45:9d:bc:c3:ba:9a:03:9a:eb:7f:c0:c1:cc:40:
                    45:5d:7a:a8:e7:f2:68:c7:36:2c:b8:81:49:23:35:
                    bb:ff:d8:55:a1:b8:80:0b:53:cc:da:28:34:15:6b:
                    7e:6e:da:09:fc:1f:d2:37:05:70:ba:70:46:cc:e0:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E6:07:9B:65:4A:B4:88:BB:A6:87:99:8D:7A:D7:D5:44:1E:17:95
            X509v3 Authority Key Identifier:
                keyid:B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/3132382e3230312e35342e302f32332d3233203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:82:6e:a2:06:d4:96:17:00:5a:e3:8a:b4:19:b3:62:f3:
         c8:5d:b9:9f:cd:68:7f:07:66:d2:48:05:61:43:ad:90:90:54:
         5e:be:4b:85:49:38:6d:5e:aa:15:87:9f:21:ea:4d:c3:55:8d:
         02:8f:5a:79:7a:92:c7:e5:d2:fc:c4:93:d1:c7:42:80:16:70:
         bd:1d:19:4b:8a:2b:f6:94:52:66:1b:31:cc:b7:b9:16:fd:31:
         0e:ba:f7:9a:21:2f:65:4e:79:05:61:3c:15:2f:30:bf:56:8f:
         ea:50:7e:42:16:38:1f:77:73:6f:5f:44:6b:bf:d0:7e:ca:a8:
         35:8c:6b:e8:d7:ac:31:76:b4:63:e6:bb:6a:7b:a6:a4:82:de:
         35:2a:44:d1:74:fb:9b:d7:a0:5c:08:65:dd:40:bb:35:d2:9d:
         0a:03:5b:58:12:3a:d6:64:d7:48:8a:bc:46:ae:cd:9e:55:58:
         41:5e:2a:a3:9c:f4:5d:12:61:08:75:f8:7d:11:23:e8:42:14:
         46:3a:02:3a:33:e4:1f:e8:61:e6:56:c0:2f:12:0c:f4:f9:92:
         a7:d7:32:d2:d9:60:ea:09:6a:50:bb:4e:07:a8:cd:38:f4:c6:
         66:b2:3a:91:40:81:71:d1:19:55:9d:1d:71:b7:95:4c:df:e2:
         87:bb:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:17 2025 by rpki-client