Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpyc4PMU31o4oxY7ZxhQ5mfxBwnminPwWaVqQ5JCErCs/0/3134332e3235352e3234322e302f32332d3233203d3e20323635313537.roa
File:                     3134332e3235352e3234322e302f32332d3233203d3e20323635313537.roa (raw, json)
Hash identifier:          UUSaCkIpljTLhVxa5pvpjaAtnefLs0IAqZCy4aXsIho=
Subject key identifier:   89:A0:3D:C4:CB:DC:C3:61:54:D3:13:82:52:B3:4A:7B:AA:69:FE:4D
Certificate issuer:       /CN=AD78BBB17720B7F21D2E35A534FFFB6D0DC07FB1
Certificate serial:       47DBC9E2651C808808E2A0E8581EE7EE0E365756
Authority key identifier: AD:78:BB:B1:77:20:B7:F2:1D:2E:35:A5:34:FF:FB:6D:0D:C0:7F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD78BBB17720B7F21D2E35A534FFFB6D0DC07FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpyc4PMU31o4oxY7ZxhQ5mfxBwnminPwWaVqQ5JCErCs/0/3134332e3235352e3234322e302f32332d3233203d3e20323635313537.roa
Signing time:             Fri 14 Jul 2023 14:21:55 +0000
ROA not before:           Fri 14 Jul 2023 14:16:55 +0000
ROA not after:            Fri 12 Jul 2024 14:21:55 +0000
asID:                     265157
IP address blocks:        143.255.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:db:c9:e2:65:1c:80:88:08:e2:a0:e8:58:1e:e7:ee:0e:36:57:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD78BBB17720B7F21D2E35A534FFFB6D0DC07FB1
        Validity
            Not Before: Jul 14 14:16:55 2023 GMT
            Not After : Jul 12 14:21:55 2024 GMT
        Subject: CN=89A03DC4CBDCC36154D3138252B34A7BAA69FE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:e5:82:71:67:00:2a:00:38:13:cb:91:a9:
                    2f:dd:46:15:bc:4d:31:e1:21:bf:27:09:77:20:74:
                    83:bd:de:50:99:2c:44:7e:65:2b:d9:37:74:85:20:
                    93:d6:93:10:f3:20:0e:03:cf:ff:ff:2f:19:18:73:
                    32:dd:ad:ad:09:43:55:a1:63:4a:bf:c1:14:67:60:
                    b6:12:c7:4b:68:76:1c:56:b9:ad:5d:55:df:52:55:
                    81:78:47:93:ea:76:a8:27:36:e1:aa:ed:80:eb:79:
                    52:83:71:9b:f3:15:83:cd:ba:56:d8:77:1e:15:4d:
                    76:8e:88:93:06:91:3a:27:cb:85:4a:a3:61:e1:2a:
                    43:5f:6b:3a:4d:b3:6f:5f:54:45:d2:5c:d5:d3:77:
                    6e:db:61:75:e7:5e:66:b4:63:52:f5:ed:1e:07:4c:
                    62:48:32:59:1d:80:c3:51:54:de:87:12:36:49:2d:
                    14:c3:7e:e3:d1:2a:60:73:05:8f:97:73:69:e1:0c:
                    29:94:07:a4:e2:a1:80:a7:b4:2a:ca:3e:58:d5:c4:
                    02:49:b8:f8:c2:08:34:8a:25:37:c8:ce:4b:16:1b:
                    50:4d:80:6d:0c:96:28:7e:e7:21:56:2c:b7:b1:f3:
                    2e:7a:1f:03:75:72:06:3a:f7:12:22:c9:c7:32:62:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A0:3D:C4:CB:DC:C3:61:54:D3:13:82:52:B3:4A:7B:AA:69:FE:4D
            X509v3 Authority Key Identifier:
                keyid:AD:78:BB:B1:77:20:B7:F2:1D:2E:35:A5:34:FF:FB:6D:0D:C0:7F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpyc4PMU31o4oxY7ZxhQ5mfxBwnminPwWaVqQ5JCErCs/0/AD78BBB17720B7F21D2E35A534FFFB6D0DC07FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD78BBB17720B7F21D2E35A534FFFB6D0DC07FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpyc4PMU31o4oxY7ZxhQ5mfxBwnminPwWaVqQ5JCErCs/0/3134332e3235352e3234322e302f32332d3233203d3e20323635313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:41:59:8f:60:9c:bc:2c:0b:cb:01:74:ac:93:93:37:78:10:
         69:96:34:c0:cb:6e:10:42:48:1c:8f:04:47:b5:ef:a7:73:58:
         9b:93:44:45:42:86:b8:04:52:0c:0b:94:0a:7e:ac:49:d5:60:
         54:32:a4:99:c9:54:d7:52:e6:c2:9f:0b:f5:54:12:79:8a:2f:
         7d:71:9d:55:3b:85:1b:89:fa:35:0a:f3:54:44:10:4f:0b:a5:
         d1:79:ab:08:88:a6:92:4d:d6:9c:81:b8:cf:29:15:34:4d:4c:
         eb:a5:6b:95:a0:42:f2:df:94:1d:7a:f6:5d:e8:6a:ec:4e:27:
         16:04:5f:31:ea:95:3c:ea:26:10:89:61:51:5f:da:11:b4:5a:
         1a:24:8f:4d:6a:05:d7:91:c1:ce:4b:c7:2d:65:98:69:d3:81:
         60:a5:d0:ea:ca:59:4f:36:04:68:86:75:89:f2:ce:1c:7a:ac:
         eb:4d:d1:31:c1:d8:5a:26:82:5c:8c:8c:24:45:2f:82:37:0d:
         fb:93:be:de:cc:80:a0:42:a4:b5:8f:3c:94:22:ca:20:c2:81:
         4e:7a:a9:2b:93:2d:a8:7b:58:29:f1:cb:c7:9f:12:81:31:e9:
         25:0e:c0:44:a2:b9:25:9d:34:00:f3:89:c7:e5:0b:49:f0:d6:
         41:63:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:02 2025 by rpki-client