Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3134332e3133372e3234302e302f32322d3234203d3e203238313938.roa
File:                     3134332e3133372e3234302e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          HNeqKMy09+C0wo6N2oS1rKRtZdPFU2SG7jZRLY9O2lY=
Subject key identifier:   FC:B7:21:35:5F:8A:6F:85:BB:57:E4:2E:F8:F5:C5:19:F5:52:EC:9B
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       62A7542253F4C17E9F94E6E77A09FD70861ADCF5
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3134332e3133372e3234302e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:26:55 +0000
ROA not before:           Mon 21 Aug 2023 20:21:55 +0000
ROA not after:            Mon 19 Aug 2024 20:26:55 +0000
asID:                     28198
IP address blocks:        143.137.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a7:54:22:53:f4:c1:7e:9f:94:e6:e7:7a:09:fd:70:86:1a:dc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:21:55 2023 GMT
            Not After : Aug 19 20:26:55 2024 GMT
        Subject: CN=FCB721355F8A6F85BB57E42EF8F5C519F552EC9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:5d:1a:67:63:5c:23:c5:45:70:ba:b1:c1:
                    32:11:a3:34:d8:d1:e1:33:94:28:76:72:3b:0e:62:
                    85:39:c7:c3:c8:d9:c6:b2:67:8a:9a:0d:89:1c:99:
                    38:59:88:6c:0b:80:9a:37:e9:29:eb:6d:e3:0a:90:
                    3a:b1:83:b0:e2:61:72:86:bf:f1:c9:14:05:ac:5f:
                    05:af:30:6b:d8:c9:c5:84:94:d1:d0:8e:34:f3:15:
                    94:f2:06:25:29:20:6a:14:3f:f3:17:c7:38:bc:51:
                    11:d4:8a:94:07:c3:11:f6:14:e7:24:1f:15:af:ea:
                    3b:79:ff:37:97:3a:cb:5f:0a:88:ce:55:9a:49:17:
                    85:b7:39:09:45:75:de:ff:7e:7c:e0:ca:28:79:e4:
                    c9:a8:8d:d8:ef:78:21:94:d9:5c:df:57:e0:dc:ae:
                    13:ae:ab:58:53:2c:cc:38:b2:12:9a:02:d5:7c:5b:
                    95:d7:4e:56:05:cc:d9:29:15:26:aa:72:36:34:db:
                    11:ee:ea:32:92:04:c8:7c:e8:2e:c1:e0:1e:4d:79:
                    26:96:e3:4a:1e:1b:cb:9b:79:32:b5:43:59:63:c5:
                    e2:cc:31:47:1f:e7:35:02:13:d3:76:f2:96:09:6d:
                    b7:f0:70:de:af:86:39:a9:f5:4c:15:f3:39:f9:fd:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:21:35:5F:8A:6F:85:BB:57:E4:2E:F8:F5:C5:19:F5:52:EC:9B
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3134332e3133372e3234302e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:83:c6:76:85:88:d5:41:fc:9a:10:98:f1:0e:86:c4:71:
         bb:5b:5d:82:0f:15:4e:18:40:2b:a6:d1:ce:b1:7b:a3:dc:15:
         5c:61:b2:8e:52:e9:72:a4:25:69:8c:62:db:5b:08:d2:e2:1c:
         9d:45:a3:cd:83:e6:78:18:3a:a3:f3:4f:a9:b0:f0:c8:4f:bc:
         92:48:f8:e5:89:3a:e0:14:a6:62:cd:e9:ac:f7:89:1e:ec:63:
         8b:6b:1a:87:25:25:a6:6f:d1:7b:59:11:84:cb:62:90:8b:22:
         f3:9c:8d:7e:1f:d1:78:89:a3:d7:5e:92:bf:87:ec:88:94:a4:
         69:0f:f4:c0:af:3f:6d:f1:33:66:25:21:cd:93:a4:a5:ab:65:
         46:9b:6e:20:7c:a7:3c:7b:51:0c:3f:e6:d3:58:27:da:fb:bc:
         42:f6:f2:66:bd:70:4e:8e:6f:f9:58:62:c9:92:44:d7:99:60:
         b4:ac:33:59:84:80:ba:75:0c:04:54:9e:37:4b:11:8c:b1:74:
         6a:63:00:29:2b:6e:f2:e6:01:91:e2:c8:ab:c0:34:37:fe:88:
         d5:c5:f7:4b:61:58:49:d3:23:33:f8:e0:db:fd:1f:0a:51:58:
         e4:f6:56:fe:af:37:42:00:36:6d:d0:61:fb:f3:6f:84:ea:03:
         77:1e:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:12 2025 by rpki-client