Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa
File:                     3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa (raw, json)
Hash identifier:          5jjX0kC4AMxWGnDU8abeDghQusW0lhlE09qhra+3fsI=
Subject key identifier:   BD:74:F0:D7:97:78:A6:F7:77:B5:06:3B:D3:BA:BF:9B:CC:E7:DF:41
Certificate issuer:       /CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
Certificate serial:       0C5A086D871E88908D2B163356BA01C402825761
Authority key identifier: 7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa
Signing time:             Tue 14 Jan 2025 02:24:27 +0000
ROA not before:           Tue 14 Jan 2025 02:19:27 +0000
ROA not after:            Tue 13 Jan 2026 02:24:27 +0000
asID:                     265121
IP address blocks:        143.208.116.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5a:08:6d:87:1e:88:90:8d:2b:16:33:56:ba:01:c4:02:82:57:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
        Validity
            Not Before: Jan 14 02:19:27 2025 GMT
            Not After : Jan 13 02:24:27 2026 GMT
        Subject: CN=BD74F0D79778A6F777B5063BD3BABF9BCCE7DF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8b:a4:6f:a0:8d:a7:8f:0c:c7:bd:42:f2:8c:
                    3b:1a:fd:05:81:71:5e:2d:6f:d3:6c:9d:20:5c:51:
                    d3:b2:73:f1:ef:77:27:b7:ae:9c:00:8f:45:51:00:
                    57:fd:24:ab:c1:23:c9:18:af:26:57:29:2f:88:b6:
                    e7:9b:d4:25:6a:4a:81:b0:49:8d:12:30:c2:96:98:
                    e3:07:b3:41:70:ae:b3:e3:82:90:60:3e:94:b1:3a:
                    de:77:5e:40:11:e4:76:0d:c4:db:8a:87:b3:b4:94:
                    ad:dc:b5:4c:32:c3:ec:70:d5:20:2a:c5:57:15:bb:
                    9e:b4:55:19:50:e9:e8:1e:fe:7d:4f:05:46:79:b1:
                    21:b3:49:5d:b9:10:a5:3a:1d:3c:cf:d8:dc:55:99:
                    e0:88:bb:4f:d5:fb:e7:72:a6:0c:d0:98:c3:6e:05:
                    51:18:62:d7:71:61:4c:0c:ad:88:9f:5b:37:ac:48:
                    43:2b:11:0b:ff:6e:96:ff:3c:2a:a3:12:1c:31:e2:
                    da:6f:6a:ac:cc:2a:9a:a3:9a:bc:a6:fb:e5:2b:c7:
                    c5:66:6e:de:b6:57:2c:6b:94:59:c9:2a:11:77:83:
                    db:a5:3a:d4:58:c7:5d:91:2f:b3:98:72:cb:00:83:
                    38:1b:59:92:bd:f6:d2:04:a3:7f:3c:13:ed:31:a2:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:74:F0:D7:97:78:A6:F7:77:B5:06:3B:D3:BA:BF:9B:CC:E7:DF:41
            X509v3 Authority Key Identifier:
                keyid:7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:61:d9:8e:e8:07:14:f5:fe:8f:b0:0c:c8:ab:d7:0a:72:f2:
         d8:55:b4:72:7f:8e:7d:95:c1:41:6e:eb:f5:5a:c6:60:37:99:
         9f:ea:16:34:34:fd:82:0a:5c:1e:83:07:f5:ea:5d:64:0a:ec:
         bc:50:7f:7c:77:21:f1:76:0d:29:b1:a4:8b:cf:f7:47:ed:5b:
         0b:8b:2e:8f:36:f1:86:b8:c3:dc:51:29:08:ae:bd:5d:98:f1:
         13:11:cb:a3:64:9d:22:2a:8a:eb:ab:23:25:2a:8b:87:6c:e3:
         81:cc:79:ca:0a:db:a2:8a:a6:70:8a:49:64:fe:c2:e1:58:b5:
         7e:28:f8:79:dd:d3:c7:e2:71:7d:97:d7:2d:e2:68:29:be:c0:
         50:42:77:d1:52:3c:4e:c9:86:6d:81:1e:f7:a5:97:2c:e6:fd:
         20:46:d4:d7:3d:6c:2d:b3:14:8b:2e:e4:a3:ec:a3:a9:ad:77:
         9f:01:cc:d9:14:85:a4:ab:e0:66:67:8e:fa:cf:06:78:9c:35:
         4a:b5:ff:74:57:4e:d1:de:a4:05:6a:55:10:31:36:40:85:7a:
         66:40:66:5a:62:fc:06:39:02:df:e3:a6:d5:0e:35:ce:c1:a7:
         27:66:07:60:21:b9:7a:46:6c:35:8d:1a:ea:eb:16:49:d0:7c:
         f8:54:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:49 2025 by rpki-client