Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137382e302f32332d3233203d3e20323632383237.roa
File:                     3138372e38342e3137382e302f32332d3233203d3e20323632383237.roa (raw, json)
Hash identifier:          9EjAtYimQ33zFQJ038XHBi+r0tkS38GJHAPCa8+Tuyg=
Subject key identifier:   11:2F:25:F2:42:3C:21:4D:2A:52:1B:70:C7:CB:70:CA:57:C5:48:9B
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       7AD4BCE54D02D0F46F5F89E375F7AA083EB78CC5
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137382e302f32332d3233203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:44 +0000
ROA not before:           Fri 23 Aug 2024 19:56:44 +0000
ROA not after:            Fri 22 Aug 2025 20:01:44 +0000
asID:                     262827
IP address blocks:        187.84.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d4:bc:e5:4d:02:d0:f4:6f:5f:89:e3:75:f7:aa:08:3e:b7:8c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:44 2024 GMT
            Not After : Aug 22 20:01:44 2025 GMT
        Subject: CN=112F25F2423C214D2A521B70C7CB70CA57C5489B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:5f:5a:c5:b4:92:c8:0c:48:38:94:1b:2e:
                    2e:3e:1b:84:60:a9:00:3a:6e:8e:e7:39:c0:4c:a7:
                    43:76:37:99:12:74:a9:b8:8d:af:93:c5:59:01:85:
                    1c:86:10:03:2d:12:c4:1a:b4:de:49:ad:06:ee:5c:
                    d4:5b:44:ce:7c:39:e7:c7:53:fc:b0:a3:a1:aa:05:
                    5c:f4:4e:54:98:12:7f:f3:bc:df:f1:70:67:7c:de:
                    bb:c5:92:d2:de:3b:f5:9f:31:f1:ee:88:5e:bf:9d:
                    b5:d6:45:3c:49:82:18:3e:85:e9:80:02:50:84:ca:
                    7e:a3:07:fe:7d:3d:53:fe:3d:1e:0d:59:0b:c3:ee:
                    06:5b:58:fe:ec:15:40:f7:d1:75:bf:eb:17:a6:cc:
                    95:04:8b:8d:14:73:cd:8c:33:f1:2b:53:60:d2:8b:
                    02:9d:9d:01:d2:68:5b:e9:f5:3b:73:1d:94:ad:23:
                    20:de:74:25:7c:72:e4:69:2b:7d:7e:84:1f:df:0d:
                    f4:67:e2:5b:da:44:81:06:c4:88:87:69:c8:08:ba:
                    11:9e:f9:8f:5f:18:63:06:2b:fd:5b:6f:00:b0:f7:
                    4f:48:c0:79:b2:99:79:f0:ac:4e:65:a6:94:ef:b0:
                    5d:90:d6:a6:de:7a:87:74:8e:27:3e:f7:27:33:f8:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:25:F2:42:3C:21:4D:2A:52:1B:70:C7:CB:70:CA:57:C5:48:9B
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137382e302f32332d3233203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:ec:41:7f:6b:00:7f:b0:19:16:76:ff:b6:b7:2d:14:b1:
         a7:1d:9f:24:24:08:6b:3e:9b:f1:91:ee:e2:ae:e2:54:cb:c1:
         ae:f2:1c:b5:fc:45:29:b8:c5:a5:5e:f0:89:7d:b6:28:86:bd:
         87:54:58:c3:bd:fb:21:09:56:cd:0b:1b:9a:a8:c9:0c:85:ac:
         3c:1d:5c:e6:2c:bb:45:23:76:d5:4e:98:16:c2:de:b0:ab:a4:
         17:5f:bb:ad:16:90:3c:3e:27:b3:20:b3:8e:30:b3:82:77:08:
         c5:ee:11:a0:72:bc:36:cf:0d:02:9b:6a:c5:3d:29:cc:b9:d9:
         42:7e:bd:12:25:bf:cb:0f:d3:94:be:d3:9a:98:69:b5:d1:30:
         6e:f7:33:cf:ad:36:a5:aa:ac:5f:a9:44:d3:0c:57:26:e6:c4:
         db:cc:86:08:e4:d1:a4:0d:2e:33:9f:4a:58:82:e2:de:99:41:
         ba:ed:9b:71:ae:23:24:6a:aa:64:59:f8:51:b6:48:2f:ee:fd:
         26:13:24:a4:25:e6:3c:c1:99:fd:db:c5:9c:cd:f6:55:b7:fd:
         cd:fb:f7:c6:5d:d1:48:fd:ba:e4:34:18:ad:79:64:12:1c:53:
         ca:07:b6:c2:63:ff:80:e3:12:3a:8c:9e:0c:7d:26:4e:82:11:
         3d:e1:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:14:37 2025 by rpki-client