Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3132382e3230312e3137362e302f32322d3234203d3e203238313938.roa
File:                     3132382e3230312e3137362e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          b83vhUZU5735RR9UbsPaGSSs7Dxr3x4B/cE0j2KmZ3M=
Subject key identifier:   AC:87:BB:FC:DC:8C:F5:A3:5A:26:A2:F4:8B:E7:07:1E:D0:3F:8E:9D
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       5FCFD1614BB0694AB053BE120AC316D7C00CCD91
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3132382e3230312e3137362e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:06:46 +0000
ROA not before:           Mon 21 Aug 2023 20:01:46 +0000
ROA not after:            Mon 19 Aug 2024 20:06:46 +0000
asID:                     28198
IP address blocks:        128.201.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cf:d1:61:4b:b0:69:4a:b0:53:be:12:0a:c3:16:d7:c0:0c:cd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:01:46 2023 GMT
            Not After : Aug 19 20:06:46 2024 GMT
        Subject: CN=AC87BBFCDC8CF5A35A26A2F48BE7071ED03F8E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:02:65:e0:35:de:27:a5:67:3f:a1:2a:2d:
                    d1:8b:f6:2b:7a:d7:1b:13:3f:0c:d7:fe:0f:da:50:
                    a3:42:f6:0a:34:cb:8d:1a:15:48:97:70:05:97:8c:
                    e9:2c:35:2e:93:18:c2:08:ab:84:e3:f5:39:4f:55:
                    63:ea:6a:9e:97:b3:3b:e6:cb:93:16:74:2d:72:19:
                    04:70:d3:56:6b:4c:c8:9d:70:8c:6d:0a:7b:8a:b8:
                    67:00:5f:60:0d:78:ed:6e:90:10:ce:ec:48:1c:ef:
                    7d:00:b2:a3:50:94:9e:17:bf:94:8b:b3:b6:fe:95:
                    d1:b9:95:4b:3d:40:b1:2d:3a:e0:28:dd:18:98:04:
                    3d:3a:ca:c7:83:34:4b:9c:ae:38:a4:4a:2a:7a:4c:
                    b9:51:c3:14:cb:e2:d5:06:38:b9:09:14:e1:51:e6:
                    48:2f:fc:f9:91:46:e2:5b:bd:f4:e0:39:c9:fa:49:
                    7f:b4:68:c8:fc:22:a6:ca:8b:10:fa:27:9d:43:d0:
                    bb:84:e3:7a:ee:15:d6:c9:5b:29:8f:25:13:8e:55:
                    19:d4:21:01:3e:13:89:6c:08:7d:ce:cd:cf:b6:8a:
                    a2:44:84:49:a2:81:66:24:52:90:40:a7:c1:77:1a:
                    d5:ba:4c:3a:0a:33:c7:47:af:17:8a:0d:4d:af:95:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:BB:FC:DC:8C:F5:A3:5A:26:A2:F4:8B:E7:07:1E:D0:3F:8E:9D
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3132382e3230312e3137362e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:03:8d:5e:9c:23:49:2e:09:2a:96:aa:ac:7c:54:f9:cf:
         66:51:d6:6b:d7:17:36:b1:4b:71:5f:7d:37:45:92:23:8d:12:
         a2:f3:63:cb:9e:8c:8a:a6:17:32:5b:93:ed:c5:e6:58:e0:09:
         60:26:1e:b0:33:ef:85:a7:35:79:90:1a:40:ef:b9:c2:dd:d1:
         1d:9f:48:96:8f:0d:a4:62:53:1f:22:97:41:44:d5:39:fe:42:
         28:2f:54:55:cc:a8:1a:5f:2e:c7:89:45:59:3c:2b:12:e4:2c:
         92:ce:f3:13:c0:3a:84:59:f5:a9:92:52:87:c9:f5:2a:14:41:
         b6:11:72:ac:70:65:1e:2f:f9:5f:5d:3d:24:3a:41:7d:65:40:
         24:11:4d:72:8e:76:b5:ce:2f:d2:cc:e1:27:f2:ea:43:83:ce:
         63:e1:00:f3:4d:13:5b:59:32:59:7a:b6:d4:da:dd:f7:1c:12:
         68:0e:39:8a:f8:77:8c:b1:cf:b5:6b:8f:a9:8e:60:99:e1:43:
         ca:e6:6e:2e:bd:2d:75:81:bb:a6:9b:18:fa:bb:c4:da:89:c9:
         f4:85:ff:91:e7:f1:e0:d7:22:c4:bb:4f:81:a6:94:30:65:e4:
         57:a4:ad:a1:0f:72:a2:b3:ba:33:60:3c:86:75:61:f4:47:f3:
         93:a6:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:41 2025 by rpki-client