Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa
File:                     3138392e37362e3139322e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          VbYX8HJLLVvTx/vyldKT4apOHdril1v7e4ufJUmnDrU=
Subject key identifier:   98:5D:16:B1:FE:DC:DD:9F:38:EA:99:A9:98:51:57:01:90:B2:6F:D3
Certificate issuer:       /CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
Certificate serial:       26F6039BF08CED7899C0D8F9BDD3485FC785953E
Authority key identifier: 69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa
Signing time:             Mon 24 Apr 2023 12:51:38 +0000
ROA not before:           Mon 24 Apr 2023 12:46:38 +0000
ROA not after:            Mon 22 Apr 2024 12:51:38 +0000
asID:                     28359
IP address blocks:        189.76.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f6:03:9b:f0:8c:ed:78:99:c0:d8:f9:bd:d3:48:5f:c7:85:95:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
        Validity
            Not Before: Apr 24 12:46:38 2023 GMT
            Not After : Apr 22 12:51:38 2024 GMT
        Subject: CN=985D16B1FEDCDD9F38EA99A99851570190B26FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:b0:e0:d9:e0:9c:f1:c1:06:de:fd:4a:97:
                    89:bb:b2:71:3e:82:07:19:b4:ee:ba:16:74:82:12:
                    7e:f3:b4:7d:bb:e8:93:99:09:ae:57:7e:13:e7:06:
                    1a:76:e7:bb:60:0a:e1:36:6b:2f:2b:4d:79:4f:1b:
                    f3:57:b5:ea:cc:c7:7b:40:fc:38:2c:81:e4:0c:c7:
                    de:8f:e4:cc:83:d4:cf:f7:b5:83:79:f7:74:1a:68:
                    fa:8d:79:03:dc:71:be:4c:57:3d:46:fe:1d:e2:43:
                    19:2b:1f:d8:5d:65:b5:14:41:2f:b1:14:ec:2b:13:
                    f1:00:78:57:e5:27:3c:88:71:87:e3:06:28:f7:1b:
                    81:dc:85:e7:94:c7:63:55:a5:0b:7e:ce:d3:c0:96:
                    b1:32:56:ac:1a:2a:97:bf:15:07:2c:87:4f:83:79:
                    86:7b:32:bf:b5:d0:82:ea:eb:63:86:d3:3d:f2:b2:
                    2b:4c:a2:76:62:5b:50:d0:af:2c:b0:63:42:b1:42:
                    bd:1a:85:92:da:41:a1:27:24:ab:10:80:0a:5f:db:
                    13:22:94:12:5a:c2:e1:b5:53:68:78:ff:d1:09:c0:
                    5c:a0:bc:a2:85:e0:29:43:e9:eb:01:e8:23:9d:44:
                    da:e4:f1:a7:d8:f6:b3:37:da:09:3b:f1:ab:ce:7f:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:16:B1:FE:DC:DD:9F:38:EA:99:A9:98:51:57:01:90:B2:6F:D3
            X509v3 Authority Key Identifier:
                keyid:69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:7d:14:a2:e7:c6:a0:af:81:3d:e3:c9:06:77:67:6b:74:
         54:fc:79:fe:b5:e9:a5:c3:ac:7d:35:81:cf:06:4f:74:d6:8e:
         75:d8:25:ef:64:69:60:97:7d:dc:da:79:28:0f:17:86:9b:ba:
         db:80:bf:f1:36:9d:55:1a:7f:f3:4b:e6:06:53:a8:e8:60:2b:
         bf:1d:e7:61:67:3c:bc:48:39:d1:b2:56:31:6e:6a:70:65:99:
         48:54:ff:71:3c:4e:97:05:98:db:48:bb:12:07:88:fa:48:af:
         7f:1e:19:3c:44:01:6f:4e:79:28:43:db:ea:1a:ea:e7:c1:9e:
         db:7c:b6:31:6d:ea:29:b6:34:ff:4e:94:08:f7:8e:39:76:6c:
         36:66:fe:d0:0b:0c:e7:1c:4f:70:c2:30:78:49:54:75:2d:1b:
         d3:3c:2a:dc:da:e7:0c:ee:ee:cf:8c:f1:3b:62:5f:76:53:54:
         7f:16:6d:de:82:39:7f:ac:22:7e:c0:98:5b:8a:e8:de:62:53:
         64:1d:b9:6a:fe:3e:54:b8:ec:ba:e3:be:aa:8c:cd:52:bf:13:
         1e:47:02:a1:5f:e5:51:a5:68:a2:eb:97:31:7a:2b:86:a3:ce:
         f4:5d:92:10:4d:88:ba:22:77:d4:d5:be:57:98:d5:33:12:30:
         a8:3a:db:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJvYDm/CM7XiZwNj5vdNIX8eFlT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4RUY3REVBMDYzQzkzMDVENUExQjhFNDU1RjhFMDk0
ODk2QjA0RDAeFw0yMzA0MjQxMjQ2MzhaFw0yNDA0MjIxMjUxMzhaMDMxMTAvBgNV
BAMTKDk4NUQxNkIxRkVEQ0REOUYzOEVBOTlBOTk4NTE1NzAxOTBCMjZGRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+LDg2eCc8cEG3v1Kl4m7snE+
ggcZtO66FnSCEn7ztH276JOZCa5XfhPnBhp257tgCuE2ay8rTXlPG/NXterMx3tA
/DgsgeQMx96P5MyD1M/3tYN593QaaPqNeQPccb5MVz1G/h3iQxkrH9hdZbUUQS+x
FOwrE/EAeFflJzyIcYfjBij3G4HcheeUx2NVpQt+ztPAlrEyVqwaKpe/FQcsh0+D
eYZ7Mr+10ILq62OG0z3ysitMonZiW1DQryywY0KxQr0ahZLaQaEnJKsQgApf2xMi
lBJawuG1U2h4/9EJwFygvKKF4ClD6esB6COdRNrk8afY9rM32gk78avOfwwRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmF0Wsf7c3Z846pmpmFFXAZCyb9MwHwYDVR0j
BBgwFoAUaY733qBjyTBdWhuORV+OCUiWsE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3ZNdmVKYWNqNmczbUhrb0pjallNUWJhTEVhRmpockJRd29rZUx3c2hR
ajEvMC82OThFRjdERUEwNjNDOTMwNUQ1QTFCOEU0NTVGOEUwOTQ4OTZCMDRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY5OEVGN0RFQTA2M0M5MzA1
RDVBMUI4RTQ1NUY4RTA5NDg5NkIwNEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd2TXZlSmFjajZnM21Ia29KY2pZTVFiYUxFYUZqaHJCUXdva2VMd3NoUWoxLzAv
MzEzODM5MmUzNzM2MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvUzAMA0GCSqGSIb3DQEBCwUAA4IBAQCbJn0UoufG
oK+BPePJBndna3RU/Hn+temlw6x9NYHPBk901o512CXvZGlgl33c2nkoDxeGm7rb
gL/xNp1VGn/zS+YGU6joYCu/HedhZzy8SDnRslYxbmpwZZlIVP9xPE6XBZjbSLsS
B4j6SK9/Hhk8RAFvTnkoQ9vqGurnwZ7bfLYxbeoptjT/TpQI9445dmw2Zv7QCwzn
HE9wwjB4SVR1LRvTPCrc2ucM7u7PjPE7Yl92U1R/Fm3egjl/rCJ+wJhbiujeYlNk
Hblq/j5UuOy6476qjM1SvxMeRwKhX+VRpWii65cxeiuGo870XZIQTYi6InfU1b5X
mNUzEjCoOtvQ
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:15 2025 by rpki-client