Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32322d3332203d3e203631373937.roa
File:                     3134332e3133372e302e302f32322d3332203d3e203631373937.roa (raw, json)
Hash identifier:          O7knyz3IoU+l70x3BWFFAkxdJrvsOj6mEVhxM6JaaRw=
Subject key identifier:   F1:0C:10:35:D6:84:69:70:F4:FD:3D:8F:E0:FB:6D:39:EF:F9:19:45
Certificate issuer:       /CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
Certificate serial:       4B0F4226752BE9F7759E032B9A76A9B35BC4D089
Authority key identifier: BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32322d3332203d3e203631373937.roa
Signing time:             Thu 31 Aug 2023 14:08:18 +0000
ROA not before:           Thu 31 Aug 2023 14:03:18 +0000
ROA not after:            Thu 29 Aug 2024 14:08:18 +0000
asID:                     61797
IP address blocks:        143.137.0.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0f:42:26:75:2b:e9:f7:75:9e:03:2b:9a:76:a9:b3:5b:c4:d0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
        Validity
            Not Before: Aug 31 14:03:18 2023 GMT
            Not After : Aug 29 14:08:18 2024 GMT
        Subject: CN=F10C1035D6846970F4FD3D8FE0FB6D39EFF91945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:2b:ff:4e:c6:08:fb:0d:70:32:0e:54:b5:
                    ac:e3:f0:63:3a:b0:c0:86:51:c7:f4:c0:9c:05:7e:
                    5b:ad:78:fd:c9:95:27:b2:59:eb:65:c0:cf:c8:97:
                    e8:55:5e:59:b9:91:19:30:a5:a0:61:8e:e8:c2:5e:
                    79:45:18:3b:89:c6:13:80:e4:41:45:7b:a4:a7:25:
                    7b:29:81:92:51:c0:4d:1c:61:df:f5:0c:37:7f:67:
                    d0:bf:8a:20:45:eb:ae:ce:fb:99:33:46:14:b8:40:
                    c7:f8:85:5c:41:85:fa:9b:81:99:77:58:79:6e:c6:
                    98:d9:bb:6c:b5:78:cf:25:c9:ef:d8:ee:ce:76:d0:
                    78:61:89:1c:20:2d:4f:a0:7e:18:ed:c0:a3:0e:28:
                    51:62:e5:3b:3f:ba:41:ed:75:74:cc:49:26:1d:84:
                    1a:ae:d8:6c:2a:fa:bb:92:74:3c:59:7b:ca:ec:42:
                    6d:ff:f3:09:f1:9b:9a:a3:06:7f:5b:af:ef:04:70:
                    4b:2a:18:ec:ef:a6:cc:88:38:68:1e:d3:ce:d2:10:
                    32:14:c6:39:e0:3f:1e:5e:fc:ec:96:db:a8:02:dc:
                    3c:33:46:fb:ca:da:14:a6:65:11:0c:30:5b:06:c7:
                    0e:71:08:0e:59:54:0a:b4:b1:40:77:ba:63:4f:71:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:10:35:D6:84:69:70:F4:FD:3D:8F:E0:FB:6D:39:EF:F9:19:45
            X509v3 Authority Key Identifier:
                keyid:BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32322d3332203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:0a:19:15:be:be:ea:c8:fe:7c:a8:95:90:b7:28:42:e3:
         be:ad:c5:8c:70:83:bd:2b:24:42:de:9d:c4:65:4c:22:67:04:
         6e:ea:ee:92:b8:14:b1:b4:f5:08:0d:fc:4b:c7:06:58:0e:5b:
         e6:9b:cd:80:4e:fe:2e:79:5c:d2:07:69:6d:05:78:10:7f:06:
         b2:8b:09:b4:3c:da:df:1d:ea:25:95:16:82:ec:ea:8f:60:87:
         51:83:38:a5:85:61:db:2b:37:c8:9b:7d:72:9b:8d:31:bc:40:
         51:e4:4d:2b:28:f5:7a:03:78:15:65:34:6c:04:3e:f3:97:a3:
         f6:ee:b9:cd:7f:66:ae:ae:39:6d:54:7f:1d:88:0f:0c:18:60:
         fe:9d:6b:3b:06:de:26:b4:b7:84:58:c2:e8:42:23:d0:a6:4f:
         2a:a2:2c:7c:c8:ff:e0:01:86:f7:7f:1a:a5:3b:2b:74:ea:09:
         ea:1c:b0:84:02:94:51:5f:75:a6:f3:28:5e:b4:7d:3c:75:cd:
         13:2e:3f:0f:d0:69:b9:8b:8f:5c:b2:2d:a5:15:7d:e8:22:05:
         ab:74:dd:9a:76:48:70:aa:37:f5:0f:9a:d5:4d:4a:d3:e0:94:
         78:e8:e0:9c:fd:f8:4c:ae:0a:65:83:19:5e:b7:a0:84:6a:33:
         87:e4:a4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:17 2025 by rpki-client