Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32332d3233203d3e20323730373634.roa
File:                     3138392e3132372e3136342e302f32332d3233203d3e20323730373634.roa (raw, json)
Hash identifier:          ngngLSueok2JHiKpOLWmliqST/bKG+YFsW7v8l1iP9I=
Subject key identifier:   D5:67:67:C7:AB:6F:83:B2:38:58:C1:AC:4E:93:6E:3E:2F:33:85:11
Certificate issuer:       /CN=7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23
Certificate serial:       2AD0A92DC6B33B483647988E00EF468ECF35EAA8
Authority key identifier: 7C:B7:E9:AD:98:2E:B7:29:13:84:E5:05:B5:9C:E3:BB:EE:DA:3A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32332d3233203d3e20323730373634.roa
Signing time:             Wed 11 Oct 2023 04:39:04 +0000
ROA not before:           Wed 11 Oct 2023 04:34:04 +0000
ROA not after:            Wed 09 Oct 2024 04:39:04 +0000
asID:                     270764
IP address blocks:        189.127.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:a9:2d:c6:b3:3b:48:36:47:98:8e:00:ef:46:8e:cf:35:ea:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23
        Validity
            Not Before: Oct 11 04:34:04 2023 GMT
            Not After : Oct  9 04:39:04 2024 GMT
        Subject: CN=D56767C7AB6F83B23858C1AC4E936E3E2F338511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:c7:b5:64:ac:85:c7:1f:5a:0c:d6:b3:fb:
                    7f:5d:52:0f:7d:21:34:35:d4:1f:dd:7e:a7:7b:a4:
                    ad:e3:38:eb:11:93:4a:40:ed:af:6c:94:84:54:7d:
                    5b:e9:d1:ac:ed:f9:7a:33:0a:29:c1:1e:bb:5d:ef:
                    f8:4c:8d:0e:e7:df:ba:56:d6:1c:c5:c1:3d:49:82:
                    eb:a1:31:d3:ef:1e:2e:b5:30:01:96:cb:37:e3:c7:
                    28:0f:8e:db:a9:dc:30:81:d8:21:35:65:df:51:ad:
                    e5:cc:80:8f:1f:f5:1a:df:84:06:f7:5a:8b:f3:e3:
                    ca:a9:ee:93:87:bf:94:fb:95:0b:51:8e:c7:fe:89:
                    0a:19:27:b7:c4:08:2c:9e:0a:c8:43:9a:52:30:80:
                    51:f5:34:f2:fb:19:dd:c9:57:2d:54:f0:e1:9b:cd:
                    22:45:78:c9:00:73:bf:94:e9:d2:5f:3a:e9:02:96:
                    eb:ea:00:62:83:83:a9:57:cf:e7:c1:81:a8:ab:05:
                    5b:f2:bc:b5:84:62:41:79:02:8d:74:f8:6e:58:40:
                    07:ae:62:ea:ea:2b:47:7d:af:91:15:48:54:e1:73:
                    c0:ec:14:14:d5:b6:3e:e3:d1:8e:72:73:3b:18:fb:
                    2b:9f:e0:6a:2e:26:f4:20:62:8f:55:81:b8:86:80:
                    91:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:67:67:C7:AB:6F:83:B2:38:58:C1:AC:4E:93:6E:3E:2F:33:85:11
            X509v3 Authority Key Identifier:
                keyid:7C:B7:E9:AD:98:2E:B7:29:13:84:E5:05:B5:9C:E3:BB:EE:DA:3A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32332d3233203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:ca:86:d1:40:57:ed:ed:03:b4:50:e3:b3:81:17:d2:9d:
         05:32:86:ba:1e:f4:22:1f:ef:7c:1f:ed:57:69:a0:3f:4f:7b:
         5b:81:48:91:80:5d:31:b2:d7:83:8f:dd:c9:66:19:93:1f:fc:
         26:f7:f4:1e:f2:74:a4:cb:94:69:dd:c3:01:56:8e:3f:4b:b0:
         00:4a:45:19:f9:50:65:74:ba:46:63:a6:14:a6:52:2b:64:d9:
         fb:85:5d:fa:94:72:7d:23:de:f4:a7:eb:70:fb:86:8f:1e:7b:
         71:0e:37:3b:00:51:04:2a:92:de:33:91:d6:99:2b:6f:16:af:
         e4:29:6a:c0:ce:73:93:e6:76:ca:0d:88:47:70:3d:30:74:e4:
         8c:a3:85:2f:e6:07:b0:93:c5:42:1b:0b:ca:f6:d9:96:ab:6e:
         60:2d:06:fe:fa:89:04:77:11:d4:7b:a9:2b:85:97:f1:fe:15:
         aa:31:83:31:20:3c:e4:3a:6a:96:ff:1c:85:ca:4e:db:74:d8:
         40:b8:5e:40:40:af:7d:ff:82:c5:e8:b0:09:9c:2d:17:ff:17:
         a1:1f:08:46:e7:61:91:7a:62:4f:fb:0b:ad:e3:ac:6b:a3:09:
         3b:a1:56:da:ce:e7:0e:39:32:6d:7b:6b:65:fa:d4:d1:95:9a:
         70:f1:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:48 2025 by rpki-client