Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32342d3234203d3e20323730393632.roa
File:                     3138372e38342e3132302e302f32342d3234203d3e20323730393632.roa (raw, json)
Hash identifier:          HFTxU/bGXpOi5N9JInZmHS1ruV9bTiXLmjmrhkyP4U4=
Subject key identifier:   FF:60:91:6A:D9:4C:BF:01:60:2A:58:38:72:C3:1E:44:6D:11:A9:59
Certificate issuer:       /CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
Certificate serial:       5078D288154BAE1BD457F90D2B459FC5A9BF4E36
Authority key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32342d3234203d3e20323730393632.roa
Signing time:             Tue 04 Jun 2024 18:38:08 +0000
ROA not before:           Tue 04 Jun 2024 18:33:08 +0000
ROA not after:            Tue 03 Jun 2025 18:38:08 +0000
asID:                     270962
IP address blocks:        187.84.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:78:d2:88:15:4b:ae:1b:d4:57:f9:0d:2b:45:9f:c5:a9:bf:4e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
        Validity
            Not Before: Jun  4 18:33:08 2024 GMT
            Not After : Jun  3 18:38:08 2025 GMT
        Subject: CN=FF60916AD94CBF01602A583872C31E446D11A959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:ed:2e:e7:48:7b:cc:6c:d3:12:1d:19:25:
                    eb:b8:fc:09:e0:73:f3:5d:04:60:bb:ca:62:84:7b:
                    75:3e:33:8d:40:8c:6e:fb:a0:42:ab:87:b1:d5:d6:
                    85:8c:83:2a:9c:b7:1c:ad:59:20:97:b3:13:5f:1b:
                    14:ec:ee:b9:fd:94:13:b4:27:6a:16:9c:00:f3:37:
                    8e:2b:a6:12:28:83:8c:a8:e3:a0:8a:86:eb:22:33:
                    c6:82:47:44:cc:fc:3f:07:1c:de:85:42:43:38:69:
                    b5:8b:fe:ae:d0:5b:13:95:09:4b:89:f7:15:67:5d:
                    69:95:1d:7b:74:c3:59:36:21:73:a4:b6:f2:59:96:
                    b1:55:1e:e9:08:4e:0c:0e:d2:06:28:ad:20:9a:52:
                    29:28:ea:51:65:cf:41:ac:5e:49:df:ca:e6:99:a4:
                    74:66:21:a3:26:2b:3f:b9:70:3c:ff:e8:1a:f1:2b:
                    c2:e4:08:87:4d:20:3a:3f:82:84:3a:bb:84:33:4c:
                    20:9d:2e:57:aa:a5:b3:43:bf:1a:f6:49:de:ba:2c:
                    e9:90:a9:88:41:d8:64:2f:96:6b:85:8f:2a:3f:f0:
                    34:5b:3d:46:b7:1b:64:c9:04:54:ff:90:f6:78:e4:
                    81:36:70:a6:8a:91:fd:5e:05:6d:d5:8d:2e:5f:e6:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:60:91:6A:D9:4C:BF:01:60:2A:58:38:72:C3:1E:44:6D:11:A9:59
            X509v3 Authority Key Identifier:
                keyid:08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32342d3234203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7b:09:52:6e:84:1e:ff:9d:3e:d1:d2:e4:84:fa:3f:a5:b6:
         4f:e2:e3:ad:ec:d8:cc:6b:dc:fb:20:08:7c:83:39:7e:99:72:
         9c:40:6f:f3:04:18:d4:9f:15:96:a2:7d:dc:eb:29:9b:ae:38:
         7f:22:c1:22:49:7a:d9:6a:ef:04:68:fe:32:e7:db:0a:13:f6:
         6b:67:35:58:bf:15:aa:50:37:ea:ec:f3:1b:5b:af:e1:9a:46:
         b1:4f:42:d6:d5:87:15:5f:db:b6:92:2f:53:4e:b7:d7:ae:3b:
         ef:03:57:ed:00:9e:c1:57:19:a8:db:23:1c:c6:9b:60:6e:c9:
         96:e3:2f:0f:3f:1d:a2:ad:67:94:bb:33:6a:28:29:18:58:4f:
         f1:02:28:09:15:36:65:4a:21:33:bf:aa:6c:5f:ff:30:42:5d:
         ce:e6:f9:dd:80:01:7a:8b:e6:3a:04:36:c9:8d:a3:45:22:f2:
         83:d0:90:4b:af:c0:fb:66:d5:36:8b:d8:f9:db:ad:2a:af:83:
         db:37:7d:25:24:7b:a6:c8:10:70:db:eb:ae:77:43:48:6c:46:
         e6:b1:8f:19:05:be:dd:51:63:80:c4:41:3d:67:cd:8d:91:cf:
         34:08:4d:2e:b1:de:92:cf:71:ec:6f:df:20:3b:79:ef:82:f4:
         bb:0c:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:50 2025 by rpki-client