Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32342d3234203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier:          GncsDOR8aEz7OQau7mp6fju7fNLf9qO8llX/Qxp0hGg=
Subject key identifier:   67:20:ED:5E:8C:A5:E6:CD:A4:1D:C3:74:7F:8C:D2:C0:9B:86:88:7B
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       4B9228C24D5FBA2FC2DA422A42EA017EE106553E
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32342d3234203d3e20323636363335.roa
Signing time:             Mon 30 Oct 2023 18:03:58 +0000
ROA not before:           Mon 30 Oct 2023 17:58:58 +0000
ROA not after:            Mon 28 Oct 2024 18:03:58 +0000
asID:                     266635
IP address blocks:        128.201.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:92:28:c2:4d:5f:ba:2f:c2:da:42:2a:42:ea:01:7e:e1:06:55:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Oct 30 17:58:58 2023 GMT
            Not After : Oct 28 18:03:58 2024 GMT
        Subject: CN=6720ED5E8CA5E6CDA41DC3747F8CD2C09B86887B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5a:c4:f6:9d:75:c6:49:7a:f6:4e:5a:2e:11:
                    38:0a:5e:be:16:4d:0a:f7:12:5b:bd:16:f3:fc:11:
                    ef:33:3f:95:11:79:75:33:bd:a1:31:ee:7e:e9:e8:
                    a6:4f:4d:05:70:5d:81:a0:31:96:64:d1:c7:be:f5:
                    be:e3:ca:32:d3:7f:0e:b7:5e:b3:e4:eb:db:6f:4f:
                    52:b5:81:d0:27:be:a9:17:91:e8:d9:42:c6:1f:5d:
                    b1:93:8e:2a:98:04:ba:02:2f:e4:3f:a0:c5:fc:2c:
                    69:ae:98:9d:eb:48:bd:1c:32:a6:3d:6c:22:00:1b:
                    57:0d:5b:35:58:8b:e2:f8:a8:32:c8:38:99:d2:64:
                    7d:92:21:b9:7e:30:8b:42:e9:93:c0:b5:82:d7:c0:
                    90:11:b8:1b:b3:4c:a4:78:89:83:24:ac:f9:bf:dd:
                    3e:9a:0e:12:b3:28:9a:55:fd:f4:b0:de:2c:2a:fa:
                    68:50:b3:d1:87:61:72:4f:d8:1f:02:84:e2:6d:33:
                    39:92:e6:0a:db:84:8d:ce:0a:2f:ce:80:7b:ef:3a:
                    69:e3:bc:2b:9b:50:22:e4:e7:50:34:4e:b0:e2:66:
                    82:a7:c6:c4:af:44:34:ce:bd:c7:81:be:19:ab:cb:
                    e2:24:4f:7c:8b:25:88:c4:7d:61:f2:bb:1b:5f:61:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:ED:5E:8C:A5:E6:CD:A4:1D:C3:74:7F:8C:D2:C0:9B:86:88:7B
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/3132382e3230312e3135362e302f32342d3234203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a4:43:75:4c:ac:60:b3:95:6a:5c:c7:05:aa:35:83:7e:15:
         b6:07:bc:26:28:20:64:57:10:f8:62:0d:44:63:df:21:67:76:
         25:36:06:92:ac:c0:43:14:66:1d:d4:66:f9:81:4a:bb:ee:47:
         38:04:16:78:a2:55:92:de:72:38:51:e2:34:13:7c:a5:1e:3b:
         e8:14:95:62:0c:c5:f3:55:15:7b:4c:4e:79:8b:05:61:71:6e:
         96:d1:30:cb:ae:04:44:56:3f:78:c0:da:f3:83:7e:5b:8b:16:
         21:b9:fe:0e:09:8d:8e:ad:50:aa:98:cc:f1:3e:cb:99:2e:5e:
         f0:97:a7:a4:09:dd:b2:85:13:9b:f3:24:49:2a:ae:60:e7:6d:
         60:0f:c2:9f:e0:11:10:6a:1a:bd:ba:aa:2d:42:88:fd:d7:36:
         d1:e6:72:10:e4:59:99:d8:4c:3e:8c:4b:a2:9e:4d:9a:b5:e2:
         8b:27:1d:80:8f:ed:ae:1d:3d:8a:b8:85:ec:b3:49:e7:ea:6a:
         86:6d:af:63:63:0f:b5:85:34:c8:3d:ac:c7:7b:f6:24:47:61:
         5b:42:c3:3b:6d:f1:04:4a:87:0d:94:84:1d:9a:81:4f:fe:ba:
         33:75:c7:64:39:16:54:e5:f0:e1:f6:19:29:e8:56:8b:fe:ce:
         da:db:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:03 2024 by rpki-client on console.sobornost.net