Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33322e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          XSSWz0uVvQZ7TDJQzPFI5Ikkq5th+y/R3PZoUZZ8KZk=
Subject key identifier:   6B:01:0E:2F:A3:FF:A8:E1:6A:66:09:35:67:8B:09:0A:DF:37:AC:22
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       1FDE95A983E81E009E8F66309FBF7E770A05D3EA
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        189.90.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:de:95:a9:83:e8:1e:00:9e:8f:66:30:9f:bf:7e:77:0a:05:d3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=6B010E2FA3FFA8E16A660935678B090ADF37AC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:02:ce:1b:01:4a:58:5d:dd:30:6e:e6:d8:
                    3a:08:3b:50:44:41:c0:34:0f:3e:07:b7:38:e9:84:
                    ad:4f:b9:93:9c:f5:0d:c6:7f:89:51:d9:e7:32:3b:
                    7b:fe:3d:d3:c4:a1:60:dd:6f:f3:ae:ce:21:a5:97:
                    66:ee:57:4e:cd:7a:ac:ab:c5:14:a1:3b:0d:44:a1:
                    2a:f9:2c:d4:c8:02:a0:ab:e0:38:e8:42:3b:5e:ba:
                    58:4e:dc:d8:f1:4a:a1:6a:01:2f:f6:d2:18:6f:4d:
                    8b:21:64:14:3a:9f:8e:27:bb:9a:57:6b:cb:a3:d2:
                    fd:81:78:c7:60:b7:dd:7a:af:05:d4:41:e2:c5:9c:
                    eb:22:65:9f:59:32:4a:12:8f:4a:15:27:dc:fc:70:
                    9b:90:9f:d2:67:94:0b:04:2d:3c:19:e7:e0:fd:7d:
                    71:8c:53:b9:9c:ea:4f:ed:01:0c:f0:47:ad:6e:87:
                    76:b7:72:fa:04:b1:48:cd:8f:e9:3b:c5:b3:fd:57:
                    24:4f:da:ab:21:46:b4:31:f9:80:2b:14:a9:15:d1:
                    33:d2:0a:a5:68:60:73:85:84:ce:4b:1b:1b:a7:b4:
                    e6:b4:ec:97:16:a7:32:74:82:f0:11:ee:ba:70:87:
                    2a:9f:05:b5:87:6a:b9:a3:68:d5:22:32:15:fb:19:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:0E:2F:A3:FF:A8:E1:6A:66:09:35:67:8B:09:0A:DF:37:AC:22
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:7f:de:aa:30:5a:68:b6:bd:07:f0:4c:1f:cf:da:69:69:
         a7:18:78:16:71:f7:12:d2:e6:07:7b:18:1a:c4:6b:11:36:c5:
         be:c8:34:0f:4b:5f:ed:ef:bf:c6:b2:8e:00:81:02:dd:05:f6:
         21:82:d9:f9:fb:1e:5b:c5:25:67:db:64:21:96:24:0a:1e:db:
         62:66:91:27:b3:8e:ff:5e:e5:b9:bc:6c:ec:24:0c:be:a3:ff:
         6b:2e:09:b3:2c:e6:c6:77:23:c9:e0:ff:12:4f:ab:1d:f3:37:
         b7:b7:89:a0:07:ad:98:7d:72:de:f5:38:b8:b4:cc:29:2d:d1:
         ff:71:eb:95:8c:90:1d:f7:75:98:c5:37:6f:e8:52:74:69:6a:
         57:f1:00:74:e6:57:68:3a:77:4e:e8:a6:2b:0f:17:2b:fe:84:
         ab:51:54:c0:c0:16:da:a6:b9:8e:f5:6c:6d:09:a4:f9:7f:3e:
         9b:0e:7b:5a:1b:59:f2:fd:e3:68:13:f9:11:3e:4b:6d:ff:02:
         d2:c6:46:a2:4b:b3:1a:14:f1:eb:a8:d6:61:62:22:1f:b3:ef:
         3a:18:00:a2:b2:74:f5:d9:34:f3:c8:27:b9:06:af:e3:33:8c:
         42:2f:38:da:fa:10:f5:2d:72:85:8e:93:58:75:92:21:7d:1b:
         22:98:0b:b9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUH96VqYPoHgCej2Ywn79+dwoF0+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzBaFw0yNTA0MTYxMTQyMzBaMDMxMTAvBgNV
BAMTKDZCMDEwRTJGQTNGRkE4RTE2QTY2MDkzNTY3OEIwOTBBREYzN0FDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESwLOGwFKWF3dMG7m2DoIO1BE
QcA0Dz4HtzjphK1PuZOc9Q3Gf4lR2ecyO3v+PdPEoWDdb/OuziGll2buV07Neqyr
xRShOw1EoSr5LNTIAqCr4DjoQjteulhO3NjxSqFqAS/20hhvTYshZBQ6n44nu5pX
a8uj0v2BeMdgt916rwXUQeLFnOsiZZ9ZMkoSj0oVJ9z8cJuQn9JnlAsELTwZ5+D9
fXGMU7mc6k/tAQzwR61uh3a3cvoEsUjNj+k7xbP9VyRP2qshRrQx+YArFKkV0TPS
CqVoYHOFhM5LGxuntOa07JcWpzJ0gvAR7rpwhyqfBbWHarmjaNUiMhX7GdHvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUawEOL6P/qOFqZgk1Z4sJCt83rCIwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1aIDANBgkqhkiG9w0BAQsFAAOCAQEAW2x/3qowWmi2
vQfwTB/P2mlppxh4FnH3EtLmB3sYGsRrETbFvsg0D0tf7e+/xrKOAIEC3QX2IYLZ
+fseW8UlZ9tkIZYkCh7bYmaRJ7OO/17lubxs7CQMvqP/ay4JsyzmxncjyeD/Ek+r
HfM3t7eJoAetmH1y3vU4uLTMKS3R/3HrlYyQHfd1mMU3b+hSdGlqV/EAdOZXaDp3
TuimKw8XK/6Eq1FUwMAW2qa5jvVsbQmk+X8+mw57WhtZ8v3jaBP5ET5Lbf8C0sZG
okuzGhTx66jWYWIiH7PvOhgAorJ09dk088gnuQav4zOMQi842voQ9S1yhY6TWHWS
IX0bIpgLuQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:57 2025 by rpki-client