Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa
File:                     3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa (raw, json)
Hash identifier:          kWZK9FZgLt6rQHkWKPTPIOsZEayxN4PB1MSJOoGvkDw=
Subject key identifier:   B4:B9:12:37:E9:E0:7B:0D:25:74:5A:A7:D6:B0:DA:4C:F2:E8:E5:02
Certificate issuer:       /CN=7C9CC76438C1AFF32D01DC8E4268A7063B39BC97
Certificate serial:       5C80D082280DB3053612D04BF5D9FC1BB250F60D
Authority key identifier: 7C:9C:C7:64:38:C1:AF:F3:2D:01:DC:8E:42:68:A7:06:3B:39:BC:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C9CC76438C1AFF32D01DC8E4268A7063B39BC97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa
Signing time:             Fri 08 Mar 2024 18:28:35 +0000
ROA not before:           Fri 08 Mar 2024 18:23:35 +0000
ROA not after:            Fri 07 Mar 2025 18:28:35 +0000
asID:                     266618
IP address blocks:        128.201.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:d0:82:28:0d:b3:05:36:12:d0:4b:f5:d9:fc:1b:b2:50:f6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9CC76438C1AFF32D01DC8E4268A7063B39BC97
        Validity
            Not Before: Mar  8 18:23:35 2024 GMT
            Not After : Mar  7 18:28:35 2025 GMT
        Subject: CN=B4B91237E9E07B0D25745AA7D6B0DA4CF2E8E502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:6a:d5:92:ed:54:e6:a4:65:81:fb:3c:3d:
                    c9:6e:dc:9b:10:cc:4d:0f:5e:b4:e4:84:eb:b4:66:
                    0d:e1:1a:9f:56:4e:d6:8f:61:03:cc:48:dc:60:94:
                    5f:36:10:30:37:3d:28:14:7c:40:9c:72:50:ca:32:
                    e7:53:5f:55:35:d0:b7:45:1b:fc:0e:b1:20:ef:05:
                    e4:b5:1f:86:ff:03:32:3f:94:81:07:17:e7:80:9a:
                    58:90:66:dc:b7:c2:34:ca:e4:75:ff:d5:cb:85:8c:
                    6f:63:d8:98:37:a6:0f:4f:a7:53:4c:a5:f0:ca:ee:
                    18:1a:3b:7f:fd:2b:e1:d0:9a:67:3c:52:71:11:a5:
                    25:e7:a8:6e:38:43:74:ed:d0:bf:ea:c9:36:47:62:
                    75:95:15:fa:bb:a0:2f:75:1b:6c:7b:2f:2e:3e:ca:
                    1b:da:0c:fa:1e:03:9e:bf:4f:39:18:1a:e6:03:09:
                    b5:e1:ea:78:ea:f3:3b:71:b8:97:98:24:92:2b:5b:
                    8d:91:f6:34:90:e0:25:d7:f9:45:f4:9c:7c:9b:6d:
                    84:a7:cf:5a:34:db:c3:54:3e:6a:12:29:79:c0:77:
                    6e:2d:60:8a:33:33:02:e9:c1:c0:f2:9e:87:85:44:
                    5e:48:f3:c8:23:0c:52:da:49:7d:fd:51:38:f3:e3:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B9:12:37:E9:E0:7B:0D:25:74:5A:A7:D6:B0:DA:4C:F2:E8:E5:02
            X509v3 Authority Key Identifier:
                keyid:7C:9C:C7:64:38:C1:AF:F3:2D:01:DC:8E:42:68:A7:06:3B:39:BC:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/7C9CC76438C1AFF32D01DC8E4268A7063B39BC97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C9CC76438C1AFF32D01DC8E4268A7063B39BC97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:a1:ad:7c:a0:8f:67:fe:26:42:99:22:4a:d9:ee:e4:b6:
         0b:92:64:9d:aa:c8:dc:9c:71:fd:79:50:81:03:49:7f:84:d8:
         75:e7:78:c8:03:1c:ef:06:35:d1:7c:af:36:5d:d1:a7:b7:a9:
         c8:27:49:39:9e:fd:69:0e:72:8f:0f:a6:a6:6b:45:22:be:dd:
         22:7c:55:1f:94:09:81:f1:d9:ea:6a:39:4a:73:1a:40:b2:38:
         17:9f:b5:9b:27:25:99:2f:d3:d7:2c:4c:78:10:5d:a1:51:1d:
         60:79:c5:d8:72:3b:f1:24:a5:35:e8:5e:31:0f:2a:95:c2:2c:
         08:de:ea:68:15:cb:a8:d4:b0:01:41:fc:f1:a9:81:3a:95:73:
         2f:e6:9e:f4:7d:88:83:95:6a:72:a1:9a:35:db:59:d1:ce:c7:
         e9:c6:54:4f:1c:9b:1f:c3:46:4e:86:da:03:b7:f0:27:54:4c:
         aa:6f:e2:ec:a4:ba:cb:dd:98:ac:7a:2b:be:f4:83:f7:09:69:
         27:28:45:4c:b5:cb:86:1f:7b:76:21:35:33:f8:81:11:8d:93:
         72:a7:40:b3:d2:d6:16:9c:e0:c1:33:d4:30:5e:91:de:be:d5:
         5e:2e:7e:3b:be:04:7a:51:5a:77:d8:52:33:b2:5c:b5:9e:a6:
         2a:35:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:37 2025 by rpki-client