Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          70eA5P4Ocqjq5bktMsAAGFSOn3BOci4+/9QKe+lvADQ=
Subject key identifier:   F9:2F:CA:BC:A8:C7:BE:E4:54:8E:DF:CE:2E:06:C4:7B:03:6B:95:8E
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       36F7E1BE060A54C5A433F536F189EF51EB5409A1
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:42:42 +0000
ROA not before:           Mon 23 Jan 2023 21:37:42 +0000
ROA not after:            Mon 22 Jan 2024 21:42:42 +0000
asID:                     271724
IP address blocks:        187.108.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f7:e1:be:06:0a:54:c5:a4:33:f5:36:f1:89:ef:51:eb:54:09:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:37:42 2023 GMT
            Not After : Jan 22 21:42:42 2024 GMT
        Subject: CN=F92FCABCA8C7BEE4548EDFCE2E06C47B036B958E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:5b:ba:31:77:d5:9d:f7:75:f5:d2:c2:ae:
                    75:6d:f3:b6:03:af:d5:ff:36:36:41:f7:3a:f0:e9:
                    3e:90:0b:b6:74:20:53:b4:a1:b2:57:14:54:bc:0f:
                    1f:98:ad:62:5e:57:76:f1:af:05:a3:9e:8d:36:fb:
                    52:2b:6f:45:f1:e0:be:8a:45:58:87:07:42:c9:5e:
                    4e:74:a3:52:da:e5:b3:e6:b3:f8:13:cc:94:b2:54:
                    4b:b1:70:6c:e2:35:53:48:5e:6d:94:1d:1a:e8:6c:
                    9d:b9:90:6f:6e:0f:3d:81:f0:d2:61:e8:41:bd:23:
                    79:75:14:ba:34:23:89:43:e9:49:47:d1:f4:8d:c3:
                    92:c2:b7:47:33:5d:c7:e1:91:c2:b2:30:e1:46:69:
                    5b:fe:c7:00:21:c6:16:2f:ff:06:fc:73:42:5f:6a:
                    f9:b8:a8:1e:83:c4:85:62:d7:08:fa:bf:25:85:6f:
                    70:39:e9:0f:7e:4c:0f:8a:70:4b:4a:81:41:42:17:
                    20:05:c5:a6:46:06:23:30:8f:32:91:98:f3:fe:75:
                    17:9c:0d:73:a3:31:76:74:ba:45:ee:f6:af:36:8e:
                    6a:03:4a:00:dd:59:e3:b2:e2:54:2d:95:ba:7c:31:
                    72:e9:4b:2c:e8:6e:e9:13:a8:e6:f0:af:4f:be:99:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:CA:BC:A8:C7:BE:E4:54:8E:DF:CE:2E:06:C4:7B:03:6B:95:8E
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:82:1b:4c:a0:94:70:ce:8c:b0:66:66:80:d0:fe:3c:58:
         42:80:b7:6e:74:0e:68:70:82:f9:dd:2f:40:d8:3a:e7:17:a9:
         70:d5:67:2b:a0:d5:50:28:50:06:90:9b:76:e0:df:d6:12:ef:
         5e:3d:55:6b:e0:5c:27:09:eb:22:8a:09:a3:c9:63:4e:bf:64:
         a6:9e:01:db:58:47:6c:e5:0b:49:1a:0f:b7:1b:25:af:07:17:
         ba:df:87:29:2e:01:42:2e:3e:0a:70:2c:ad:66:31:65:46:83:
         ac:da:7d:b9:12:0d:9e:38:06:8d:97:e2:8b:2c:4a:99:c2:dc:
         5f:51:23:e9:b2:17:37:e5:e3:b9:15:19:9c:67:67:26:ac:ad:
         2a:aa:a5:3a:23:6b:62:31:9f:00:5a:81:92:81:5d:2b:e7:b2:
         04:9f:c5:05:b6:59:9b:d7:33:b9:ad:14:4a:67:8c:72:e7:ef:
         70:49:cf:c6:6e:50:03:13:70:dc:60:b9:d2:3d:de:b3:3d:4d:
         f3:d7:d5:90:93:86:9c:d2:d1:99:89:dc:97:18:6c:2e:23:b1:
         b1:39:81:a1:eb:25:21:8a:64:b7:b0:73:01:88:e8:0c:18:05:
         ea:c6:3a:8c:ad:d5:d3:bd:8f:9b:24:88:1d:44:2b:a3:ae:19:
         2a:71:48:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNvfhvgYKVMWkM/U28YnvUetUCaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4MzdDMUNGMDg5MUM2MEJCMzcxOEUwOUVFNTU4NkMw
RUJDMzU5NzAeFw0yMzAxMjMyMTM3NDJaFw0yNDAxMjIyMTQyNDJaMDMxMTAvBgNV
BAMTKEY5MkZDQUJDQThDN0JFRTQ1NDhFREZDRTJFMDZDNDdCMDM2Qjk1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYlu6MXfVnfd19dLCrnVt87YD
r9X/NjZB9zrw6T6QC7Z0IFO0obJXFFS8Dx+YrWJeV3bxrwWjno02+1Irb0Xx4L6K
RViHB0LJXk50o1La5bPms/gTzJSyVEuxcGziNVNIXm2UHRrobJ25kG9uDz2B8NJh
6EG9I3l1FLo0I4lD6UlH0fSNw5LCt0czXcfhkcKyMOFGaVv+xwAhxhYv/wb8c0Jf
avm4qB6DxIVi1wj6vyWFb3A56Q9+TA+KcEtKgUFCFyAFxaZGBiMwjzKRmPP+dRec
DXOjMXZ0ukXu9q82jmoDSgDdWeOy4lQtlbp8MXLpSyzobukTqObwr0++mX3bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+S/KvKjHvuRUjt/OLgbEewNrlY4wHwYDVR0j
BBgwFoAUQYN8HPCJHGC7NxjgnuVYbA68NZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMS80MTgzN0MxQ0YwODkxQzYwQkIzNzE4RTA5RUU1NTg2QzBFQkMzNTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxODM3QzFDRjA4OTFDNjBC
QjM3MThFMDlFRTU1ODZDMEVCQzM1OTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzEv
MzEzODM3MmUzMTMwMzgyZTM5MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM3
MzEzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7bGAwDQYJKoZIhvcNAQELBQADggEBAEC8ghtM
oJRwzoywZmaA0P48WEKAt250DmhwgvndL0DYOucXqXDVZyug1VAoUAaQm3bg39YS
7149VWvgXCcJ6yKKCaPJY06/ZKaeAdtYR2zlC0kaD7cbJa8HF7rfhykuAUIuPgpw
LK1mMWVGg6zafbkSDZ44Bo2X4ossSpnC3F9RI+myFzfl47kVGZxnZyasrSqqpToj
a2IxnwBagZKBXSvnsgSfxQW2WZvXM7mtFEpnjHLn73BJz8ZuUAMTcNxgudI93rM9
TfPX1ZCThpzS0ZmJ3JcYbC4jsbE5gaHrJSGKZLewcwGI6AwYBerGOoyt1dO9j5sk
iB1EK6OuGSpxSEE=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:48 2025 by rpki-client