Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130372e302f32342d3234203d3e20323732373031.roa
File:                     3139322e3134312e3130372e302f32342d3234203d3e20323732373031.roa (raw, json)
Hash identifier:          Cyof1B+3BGUznk6arGBHy8/1soVt8lQzDQ6cHV0kKcY=
Subject key identifier:   77:DF:D1:44:51:BC:F2:E3:BF:D5:D1:7F:08:4A:56:D4:31:B2:0B:E6
Certificate issuer:       /CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
Certificate serial:       3AB1E58BDFCC1BCFF2750389BD2C83AF8C7DD7BB
Authority key identifier: 6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130372e302f32342d3234203d3e20323732373031.roa
Signing time:             Thu 06 Apr 2023 22:17:48 +0000
ROA not before:           Thu 06 Apr 2023 22:12:48 +0000
ROA not after:            Thu 04 Apr 2024 22:17:48 +0000
asID:                     272701
IP address blocks:        192.141.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b1:e5:8b:df:cc:1b:cf:f2:75:03:89:bd:2c:83:af:8c:7d:d7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
        Validity
            Not Before: Apr  6 22:12:48 2023 GMT
            Not After : Apr  4 22:17:48 2024 GMT
        Subject: CN=77DFD14451BCF2E3BFD5D17F084A56D431B20BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:c5:47:30:eb:3b:78:a2:fe:63:a5:d8:8a:
                    92:fd:6a:2b:68:6a:06:fc:b2:36:de:1f:6f:f9:24:
                    a4:24:67:0e:67:65:3e:86:55:87:ff:da:f8:d9:f9:
                    66:7e:bf:2e:38:73:05:7c:f4:bd:4a:a3:ba:70:25:
                    3b:6d:76:ce:dc:20:95:8b:0b:53:0a:4b:93:70:36:
                    bf:9b:85:8f:1a:b4:86:65:c8:5b:e7:1a:cc:38:95:
                    a8:61:81:5d:84:93:ff:7b:f9:09:35:4a:8d:8d:06:
                    8c:84:d4:2f:29:00:bf:6e:dc:9d:20:17:e0:00:fe:
                    9a:35:d8:4b:d1:96:10:c3:aa:8a:f4:36:9d:ff:7c:
                    98:3b:d6:e4:4a:2b:92:60:05:50:ea:09:c8:7b:f4:
                    ef:47:dd:65:2b:f5:9f:aa:1a:7a:b9:6b:d0:a7:86:
                    48:a0:f8:87:a1:b2:a6:8d:b3:65:8e:db:bf:20:dc:
                    7f:6d:98:45:d9:4d:74:3c:04:51:21:24:c4:b6:6a:
                    5d:e7:b3:d4:3b:72:12:1b:97:56:25:00:8a:75:8d:
                    79:20:36:da:0f:c2:b9:ae:2a:36:96:7b:7b:99:38:
                    b0:04:cd:19:0d:9f:ab:c4:7c:c0:de:d5:e9:88:42:
                    da:d2:d3:f0:7f:75:47:b0:74:d8:83:95:6b:30:22:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:D1:44:51:BC:F2:E3:BF:D5:D1:7F:08:4A:56:D4:31:B2:0B:E6
            X509v3 Authority Key Identifier:
                keyid:6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130372e302f32342d3234203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:74:12:56:84:ea:7d:d8:17:18:fa:01:47:1d:cc:9b:e6:46:
         5e:51:c4:be:14:aa:05:7d:5b:a0:bb:aa:c0:1e:44:e3:a7:34:
         6a:9e:cc:34:f5:a0:d2:b1:3d:7e:45:5e:c5:17:a0:d4:a2:17:
         a9:89:6b:5d:f3:59:67:c2:20:74:81:47:91:51:2b:25:ca:1f:
         2f:6b:28:86:c3:e7:b3:a3:6e:4d:67:7a:1c:a4:6d:ce:59:86:
         35:14:3c:13:ca:71:33:5a:df:49:e7:8a:6a:59:dc:f7:9c:5b:
         d2:38:fa:e8:6d:e7:d9:29:37:3e:15:ca:5b:4e:c9:7c:1a:e7:
         d6:83:2d:36:0d:e4:65:7a:f3:50:70:4c:08:92:0d:75:5b:60:
         50:01:74:74:11:31:96:2b:8d:94:52:a4:f5:91:ec:8f:53:b4:
         b1:4c:3c:fc:ae:d0:5b:b2:82:aa:20:5f:d0:52:c9:2f:50:7f:
         bd:f0:f0:14:79:15:18:50:23:90:6e:21:c6:28:8e:ed:ad:b6:
         ae:c8:e9:93:c9:e3:c1:d0:c5:4f:73:f8:91:d3:3c:0d:5c:21:
         42:79:1b:2b:a0:e1:a3:2c:79:49:eb:74:3a:4b:4c:f3:fc:da:
         91:2f:32:ad:d0:97:e1:a1:b0:91:2b:15:91:ee:5d:70:88:78:
         8e:0b:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:36 2025 by rpki-client