Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3234203d3e203533313036.roa
File:                     3138372e3130382e39362e302f32302d3234203d3e203533313036.roa (raw, json)
Hash identifier:          ekKiW3jyAEWOJs6lL7T5lgMLuR8wlI//dZaHhiWuWo0=
Subject key identifier:   85:3B:F2:F3:B3:26:F7:A7:CB:A7:BD:D0:9F:C8:0D:7B:88:B6:93:F1
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       088E6E2C927039ED6679B507B1989254E5438E0F
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3234203d3e203533313036.roa
Signing time:             Thu 06 Oct 2022 17:40:02 +0000
ROA not before:           Thu 06 Oct 2022 17:35:02 +0000
ROA not after:            Thu 05 Oct 2023 17:40:02 +0000
asID:                     53106
IP address blocks:        187.108.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:6e:2c:92:70:39:ed:66:79:b5:07:b1:98:92:54:e5:43:8e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:02 2022 GMT
            Not After : Oct  5 17:40:02 2023 GMT
        Subject: CN=853BF2F3B326F7A7CBA7BDD09FC80D7B88B693F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:83:f9:3f:50:e9:6b:c2:c5:9d:6f:28:ed:
                    4a:06:3e:99:2f:af:a7:7c:80:a2:1f:95:36:fb:ca:
                    fa:d3:7c:5d:50:60:e7:d2:e9:42:91:b2:11:f3:7c:
                    45:95:08:e2:a4:da:5a:5e:4f:85:4b:0c:69:06:8e:
                    02:15:0b:43:c0:68:29:fb:aa:f3:c3:be:f4:e9:47:
                    84:31:d3:b3:78:46:7e:d9:36:90:47:5b:64:f1:b5:
                    84:ff:77:84:d1:7f:2b:54:69:67:fa:94:58:40:4a:
                    c7:c7:0f:54:50:5a:43:cb:19:bf:f6:e5:8e:07:23:
                    60:2a:35:92:aa:b3:12:d7:cd:f4:42:4b:d8:23:5f:
                    64:4a:d9:b9:37:91:77:46:f9:67:b7:15:62:cb:69:
                    8a:61:48:af:d6:fb:89:96:7f:9b:03:0a:89:b9:0c:
                    ed:3d:e5:cf:e6:e8:d8:31:8f:76:a9:54:a5:e8:7a:
                    f7:8a:6d:59:6c:d6:56:21:94:cf:79:4f:8d:74:63:
                    1d:a5:fa:f4:43:c5:e3:c5:f1:fb:57:0a:ce:9c:65:
                    56:1f:59:34:d9:c2:a0:58:a8:a2:e4:89:e4:c0:11:
                    d4:e1:2f:62:55:2a:54:5b:59:4f:87:70:fe:27:f8:
                    23:17:72:d9:f6:8d:2c:30:5e:37:88:b8:c6:da:e1:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:F2:F3:B3:26:F7:A7:CB:A7:BD:D0:9F:C8:0D:7B:88:B6:93:F1
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3234203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:4f:c3:5f:b7:3c:28:b4:11:2f:93:95:c5:7a:46:13:12:
         47:8c:97:0d:78:9a:a7:b8:64:35:42:4b:dd:82:35:ea:29:98:
         70:45:d5:91:c1:61:5c:a2:ad:46:a1:4c:d8:b3:ae:3c:a7:2b:
         d5:d0:17:0e:b3:03:0e:42:61:61:7e:18:97:96:e3:e3:51:8a:
         4a:f5:ea:41:4a:18:eb:f5:fd:7f:2b:18:b1:76:23:9e:83:a6:
         c2:64:26:1e:de:e6:55:b5:ee:8d:83:37:0a:72:2a:93:e3:80:
         be:8d:72:a3:17:7b:64:7c:c6:df:ea:80:6e:77:6f:06:ba:17:
         bc:3f:65:32:f7:0c:81:aa:11:af:cb:8e:a0:af:c6:ab:4f:cb:
         99:df:84:69:75:f0:75:a5:19:36:3b:33:2b:5d:74:ab:19:43:
         f8:90:15:80:17:4d:6a:90:05:44:38:32:47:26:59:44:67:e4:
         fb:67:2d:4e:17:2f:0e:8d:a3:17:cc:21:1f:78:d5:bc:c5:73:
         c2:1d:0c:63:5e:2d:18:a6:0a:72:71:39:9d:04:7a:f5:45:59:
         ed:1c:77:e1:72:c2:36:ed:b1:1f:5b:e1:58:30:3e:30:d3:17:
         57:70:ae:ae:91:c8:06:a5:f7:0b:64:75:da:5c:17:ef:35:16:
         c5:b0:70:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCI5uLJJwOe1mebUHsZiSVOVDjg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2NUM1Q0RFOEE0MkM5RjhCMTAzMjMwOEFFQzZDRjk1
OTkwRkM2RjAeFw0yMjEwMDYxNzM1MDJaFw0yMzEwMDUxNzQwMDJaMDMxMTAvBgNV
BAMTKDg1M0JGMkYzQjMyNkY3QTdDQkE3QkREMDlGQzgwRDdCODhCNjkzRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCru4P5P1Dpa8LFnW8o7UoGPpkv
r6d8gKIflTb7yvrTfF1QYOfS6UKRshHzfEWVCOKk2lpeT4VLDGkGjgIVC0PAaCn7
qvPDvvTpR4Qx07N4Rn7ZNpBHW2TxtYT/d4TRfytUaWf6lFhASsfHD1RQWkPLGb/2
5Y4HI2AqNZKqsxLXzfRCS9gjX2RK2bk3kXdG+We3FWLLaYphSK/W+4mWf5sDCom5
DO095c/m6Ngxj3apVKXoeveKbVls1lYhlM95T410Yx2l+vRDxePF8ftXCs6cZVYf
WTTZwqBYqKLkieTAEdThL2JVKlRbWU+HcP4n+CMXctn2jSwwXjeIuMba4XpHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhTvy87Mm96fLp73Qn8gNe4i2k/EwHwYDVR0j
BBgwFoAUJmXFzeikLJ+LEDIwiuxs+VmQ/G8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMC8yNjY1QzVDREU4QTQyQzlGOEIxMDMyMzA4QUVDNkNGOTU5OTBGQzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI2NjVDNUNERThBNDJDOUY4
QjEwMzIzMDhBRUM2Q0Y5NTk5MEZDNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzAv
MzEzODM3MmUzMTMwMzgyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu2xgMA0GCSqGSIb3DQEBCwUAA4IBAQBLFU/DX7c8
KLQRL5OVxXpGExJHjJcNeJqnuGQ1QkvdgjXqKZhwRdWRwWFcoq1GoUzYs648pyvV
0BcOswMOQmFhfhiXluPjUYpK9epBShjr9f1/KxixdiOeg6bCZCYe3uZVte6NgzcK
ciqT44C+jXKjF3tkfMbf6oBud28Guhe8P2Uy9wyBqhGvy46gr8arT8uZ34RpdfB1
pRk2OzMrXXSrGUP4kBWAF01qkAVEODJHJllEZ+T7Zy1OFy8OjaMXzCEfeNW8xXPC
HQxjXi0YpgpycTmdBHr1RVntHHfhcsI27bEfW+FYMD4w0xdXcK6ukcgGpfcLZHXa
XBfvNRbFsHAR
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:14 2025 by rpki-client