Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231322e302f32322d3234203d3e203631363937.roa
File:                     3230312e372e3231322e302f32322d3234203d3e203631363937.roa (raw, json)
Hash identifier:          6XRAk6DkUhNQBw2+nrgMzsTQ7wZEVw3TgcrO6RF87/Y=
Subject key identifier:   76:C2:68:0B:D0:93:9F:86:CA:4B:8C:D0:6D:73:7A:35:00:29:F0:D6
Certificate issuer:       /CN=B013A454E9A72C207D10F4E43DB3D85A30D6F09A
Certificate serial:       7D64B620D3DE3583A8102025FBE23398D45BAF53
Authority key identifier: B0:13:A4:54:E9:A7:2C:20:7D:10:F4:E4:3D:B3:D8:5A:30:D6:F0:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231322e302f32322d3234203d3e203631363937.roa
Signing time:             Sat 02 Nov 2024 01:27:28 +0000
ROA not before:           Sat 02 Nov 2024 01:22:28 +0000
ROA not after:            Sat 01 Nov 2025 01:27:28 +0000
asID:                     61697
IP address blocks:        201.7.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:64:b6:20:d3:de:35:83:a8:10:20:25:fb:e2:33:98:d4:5b:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B013A454E9A72C207D10F4E43DB3D85A30D6F09A
        Validity
            Not Before: Nov  2 01:22:28 2024 GMT
            Not After : Nov  1 01:27:28 2025 GMT
        Subject: CN=76C2680BD0939F86CA4B8CD06D737A350029F0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:bb:02:ed:24:fa:ee:13:7f:15:6a:e2:96:
                    60:ad:fe:9b:34:57:1c:d2:fd:30:3e:c2:b8:9b:45:
                    7d:02:55:cd:15:a2:d5:26:d0:97:0d:c4:0d:8a:a3:
                    33:89:e7:9b:e0:4d:a1:00:76:80:be:f3:66:43:2b:
                    2d:27:cf:f9:2a:ad:9a:ae:b9:bd:04:b8:55:d6:23:
                    a1:bc:de:ba:2d:8c:66:6d:ec:cc:c3:52:b3:e9:51:
                    ab:2e:51:7a:1a:0e:84:ae:f7:89:9d:7e:9e:09:49:
                    68:de:ac:e7:c1:7a:9b:1a:78:35:2e:81:df:05:b2:
                    0c:52:c7:0a:c9:db:47:3c:bb:f2:62:7e:97:c2:24:
                    5b:f8:b2:a8:69:b7:94:05:47:43:02:b9:29:3e:75:
                    12:af:2d:49:a0:07:67:8e:4d:29:ce:56:46:64:78:
                    79:1a:85:69:be:9a:b6:2a:32:fe:64:f5:0a:09:1a:
                    8c:a9:3f:a1:33:73:bf:d6:56:14:0f:ed:f7:dc:53:
                    fa:e5:b0:d1:3c:c6:1f:de:ae:79:cb:00:70:f3:ad:
                    0d:7c:ef:5c:ef:d6:ae:0b:a0:19:d7:2b:1e:0d:64:
                    17:d3:ae:b4:86:17:ce:07:0e:db:d7:46:6c:69:d3:
                    89:a1:a0:ad:5a:df:3a:e0:3c:31:82:a6:da:b9:70:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C2:68:0B:D0:93:9F:86:CA:4B:8C:D0:6D:73:7A:35:00:29:F0:D6
            X509v3 Authority Key Identifier:
                keyid:B0:13:A4:54:E9:A7:2C:20:7D:10:F4:E4:3D:B3:D8:5A:30:D6:F0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231322e302f32322d3234203d3e203631363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:93:42:7c:e1:90:45:44:8a:23:1e:aa:56:56:6d:23:ab:
         de:2f:fb:41:b4:f6:50:9f:6e:de:f5:c0:b2:fa:f0:d2:6b:84:
         9c:69:ff:3a:cb:3b:70:1a:96:47:15:b0:bb:91:f5:94:94:1d:
         71:bc:62:b5:e8:81:44:ee:52:ae:9f:c8:44:9e:4e:72:40:44:
         e2:4c:03:e3:47:06:f8:78:1a:bd:80:ab:49:59:6d:5f:c2:80:
         ca:77:de:a6:f0:a7:3d:04:41:c1:70:a7:fd:84:fc:d7:1a:cd:
         e1:e7:55:d7:e0:f2:ac:90:b9:bb:44:d7:f9:22:94:32:00:a5:
         cb:e9:59:d1:cb:e9:7e:a5:d7:d8:9e:80:40:f6:b1:ff:5c:ba:
         31:9a:7f:80:6e:51:9a:13:46:34:30:4d:86:b8:b3:68:25:77:
         9e:ca:23:b8:f7:1c:fe:49:0e:52:ef:d2:b1:e0:3c:b9:bd:8e:
         33:96:f9:65:2e:02:68:a6:7f:c2:9b:fe:6b:ed:86:8b:1a:04:
         b7:3a:31:e1:cc:a3:45:54:da:26:b5:c6:05:fb:55:6e:76:49:
         5f:06:6c:0b:b8:fe:da:76:32:d6:42:78:49:6e:f5:a3:d9:5a:
         b5:bd:58:89:03:5b:c7:1e:56:54:fe:36:7d:71:d8:43:7d:80:
         23:85:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:08 2025 by rpki-client