Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e31322e302f32322d3234203d3e20323634303936.roa
File:                     3230312e37372e31322e302f32322d3234203d3e20323634303936.roa (raw, json)
Hash identifier:          11Xd4bnAC7hnXl+d7jvAMbeeQEsBPp2140ODc650SLQ=
Subject key identifier:   7B:6A:14:77:CF:D9:DD:E8:30:BC:6D:57:9C:7A:83:A9:36:49:E2:C8
Certificate issuer:       /CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
Certificate serial:       0FB67C8A72B9E8EC91F783B8092D4AF341B06755
Authority key identifier: BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e31322e302f32322d3234203d3e20323634303936.roa
Signing time:             Fri 28 Jul 2023 20:00:00 +0000
ROA not before:           Fri 28 Jul 2023 19:55:00 +0000
ROA not after:            Fri 26 Jul 2024 20:00:00 +0000
asID:                     264096
IP address blocks:        201.77.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b6:7c:8a:72:b9:e8:ec:91:f7:83:b8:09:2d:4a:f3:41:b0:67:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Validity
            Not Before: Jul 28 19:55:00 2023 GMT
            Not After : Jul 26 20:00:00 2024 GMT
        Subject: CN=3082010A02820101009AC3C6F11182A2E15F8D6E3B3A93CF6A9484F93C828ADE7486C34BDA3046F1E5B2E969C7E7B7E918E994470D348F3CA17BF7D2984B5779B6ECB2525FEEE389B3BB5D4947E5FFE3D2683B5ED6EFD45CE14D9E17237C18DD9AC9B5BF2C22F52467B4F7EA22C66D4748DC9AC9F13B088CBD3280844F42D1B6C39BD6BAD5A341DFC190772B5A80384B4B34A4F81EF8F69A138BDA7A48CC3C2026A9B1AEE35D886DD69865293E7D619A824D838170B5D95F4BB66013ED6A6ABCA60E8D45B2041CF5C57BFEE4EBE5216A3E5C0AFF892FA47A603318A47E51F408F8DCDDBA3167D91861162AA0D7804DFEC61FD2C1D75C2153DC9056D9B79F547FAF436BF891665C8C1F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:c6:f1:11:82:a2:e1:5f:8d:6e:3b:3a:93:
                    cf:6a:94:84:f9:3c:82:8a:de:74:86:c3:4b:da:30:
                    46:f1:e5:b2:e9:69:c7:e7:b7:e9:18:e9:94:47:0d:
                    34:8f:3c:a1:7b:f7:d2:98:4b:57:79:b6:ec:b2:52:
                    5f:ee:e3:89:b3:bb:5d:49:47:e5:ff:e3:d2:68:3b:
                    5e:d6:ef:d4:5c:e1:4d:9e:17:23:7c:18:dd:9a:c9:
                    b5:bf:2c:22:f5:24:67:b4:f7:ea:22:c6:6d:47:48:
                    dc:9a:c9:f1:3b:08:8c:bd:32:80:84:4f:42:d1:b6:
                    c3:9b:d6:ba:d5:a3:41:df:c1:90:77:2b:5a:80:38:
                    4b:4b:34:a4:f8:1e:f8:f6:9a:13:8b:da:7a:48:cc:
                    3c:20:26:a9:b1:ae:e3:5d:88:6d:d6:98:65:29:3e:
                    7d:61:9a:82:4d:83:81:70:b5:d9:5f:4b:b6:60:13:
                    ed:6a:6a:bc:a6:0e:8d:45:b2:04:1c:f5:c5:7b:fe:
                    e4:eb:e5:21:6a:3e:5c:0a:ff:89:2f:a4:7a:60:33:
                    18:a4:7e:51:f4:08:f8:dc:dd:ba:31:67:d9:18:61:
                    16:2a:a0:d7:80:4d:fe:c6:1f:d2:c1:d7:5c:21:53:
                    dc:90:56:d9:b7:9f:54:7f:af:43:6b:f8:91:66:5c:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:14:77:CF:D9:DD:E8:30:BC:6D:57:9C:7A:83:A9:36:49:E2:C8
            X509v3 Authority Key Identifier:
                keyid:BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e31322e302f32322d3234203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:d8:78:89:05:f2:33:7b:bb:3d:ce:e1:01:4c:cc:4a:4f:2f:
         72:9f:5e:ab:15:1c:3a:43:12:22:8d:aa:20:48:6e:7e:61:c2:
         b9:5c:fb:89:cf:82:0e:ad:df:7a:5e:d2:24:99:1c:f4:b5:7c:
         d4:3b:96:c3:a7:fc:b4:58:dd:7c:e7:0b:fb:01:71:8d:a3:49:
         a7:4a:c5:67:d2:d7:31:54:8a:38:28:69:43:f0:e8:d0:0c:d9:
         80:37:80:f9:b3:25:ad:1a:6b:be:44:e8:7c:23:06:98:2e:eb:
         55:68:03:c3:b7:ba:f9:e6:4b:7b:b6:c2:bf:00:c0:8c:d8:4d:
         a8:ac:c4:e9:a4:c2:33:3a:62:da:a8:1f:7e:1d:ee:0e:e5:19:
         30:c9:bd:42:2b:8d:cb:d9:9d:ce:6b:7c:55:cf:f8:ce:4b:7d:
         02:cf:c0:67:cb:19:93:7f:9a:e9:2a:d6:fc:73:06:5b:53:14:
         5b:e4:27:05:0a:cb:f9:2a:59:a3:27:ef:2c:e7:ad:ad:8f:ed:
         6d:2e:ba:40:f9:15:1e:29:a8:56:b4:ff:6f:17:1f:5d:cc:2f:
         56:ab:49:46:a0:7b:b6:3c:4f:46:ab:06:5b:09:aa:9f:79:e5:
         40:76:f5:12:4d:72:66:e5:80:49:6d:cb:9c:c3:f3:36:74:93:
         43:ff:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:21 2025 by rpki-client