Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3138392e3132372e3137362e302f32322d3332203d3e20323730373133.roa
File:                     3138392e3132372e3137362e302f32322d3332203d3e20323730373133.roa (raw, json)
Hash identifier:          J8LzCcDhYcAtc5AoahqiVi9nKHNcyJhigNMuRPVq8tY=
Subject key identifier:   7C:79:90:D0:7A:D0:C9:BB:D7:D2:C0:D3:82:48:BE:1D:FA:68:A6:43
Certificate issuer:       /CN=3002C27FCE88C3AB86739D98FD94DA42E356CAE1
Certificate serial:       34148488D929AE7515511993B7EAA6F71AE53356
Authority key identifier: 30:02:C2:7F:CE:88:C3:AB:86:73:9D:98:FD:94:DA:42:E3:56:CA:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3138392e3132372e3137362e302f32322d3332203d3e20323730373133.roa
Signing time:             Mon 11 Dec 2023 18:35:31 +0000
ROA not before:           Mon 11 Dec 2023 18:30:31 +0000
ROA not after:            Mon 09 Dec 2024 18:35:31 +0000
asID:                     270713
IP address blocks:        189.127.176.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:84:88:d9:29:ae:75:15:51:19:93:b7:ea:a6:f7:1a:e5:33:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3002C27FCE88C3AB86739D98FD94DA42E356CAE1
        Validity
            Not Before: Dec 11 18:30:31 2023 GMT
            Not After : Dec  9 18:35:31 2024 GMT
        Subject: CN=7C7990D07AD0C9BBD7D2C0D38248BE1DFA68A643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:00:ff:e6:01:66:8b:12:3c:49:6c:78:b6:
                    56:dd:7d:c1:e6:d2:51:77:af:c2:66:d4:29:f2:1d:
                    c5:55:68:bf:2c:36:cf:c2:1d:b4:97:fb:5d:d0:a2:
                    98:e0:ad:7b:3c:42:5c:e8:4d:d0:75:99:8e:95:dc:
                    48:4c:4d:bb:bb:c5:95:34:36:02:ae:4b:ca:dc:24:
                    ae:08:30:99:1f:92:c9:03:30:f0:f9:1d:62:97:d5:
                    35:9d:07:44:ee:e9:69:3c:76:10:f7:84:13:8b:14:
                    1d:59:aa:c4:0e:a7:d5:c2:7c:34:06:67:7b:7b:29:
                    7f:29:65:f0:14:87:90:a4:89:f3:87:2a:56:2b:19:
                    96:df:8d:18:36:28:16:6f:2e:81:36:88:26:d4:14:
                    b5:50:23:76:93:d1:ae:c9:f1:5e:54:82:54:8f:86:
                    be:6d:ef:84:a9:ed:6a:6b:be:cf:2d:84:af:0f:ad:
                    76:71:29:6c:99:ee:d7:03:76:b3:98:21:ab:c7:42:
                    09:9c:ec:b8:b0:2b:d7:a8:75:7a:1f:f2:a9:f8:94:
                    4d:f5:e5:ce:65:89:3f:8b:77:be:54:77:a9:e0:e8:
                    c4:cc:b6:4c:07:a1:ca:d6:38:21:71:5f:cd:43:97:
                    d0:5f:fa:28:f4:0f:db:2a:1b:2d:18:83:ee:0f:43:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:90:D0:7A:D0:C9:BB:D7:D2:C0:D3:82:48:BE:1D:FA:68:A6:43
            X509v3 Authority Key Identifier:
                keyid:30:02:C2:7F:CE:88:C3:AB:86:73:9D:98:FD:94:DA:42:E3:56:CA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3138392e3132372e3137362e302f32322d3332203d3e20323730373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:a7:23:1f:94:92:d4:9d:1d:c9:2a:6d:ab:ce:c6:85:bb:3f:
         af:0a:95:87:02:4c:b0:43:6f:54:3f:af:a8:1a:30:9a:02:da:
         cc:70:e0:1a:d9:cb:f6:ae:63:1b:bf:98:7b:86:7d:0b:d7:65:
         d3:26:92:58:71:ab:26:2c:95:a6:16:28:47:16:b1:78:a2:68:
         9a:bd:32:76:10:3d:7e:48:85:cf:d9:b8:7f:b4:81:a1:77:c3:
         01:9b:ab:e4:5d:8e:db:08:a2:e7:6e:ec:a8:09:f0:d1:57:3e:
         4f:ce:8d:18:ed:78:98:6c:91:b9:e4:a4:f4:50:88:00:d0:30:
         d7:84:cd:e4:ef:f8:d0:41:15:e5:66:17:a8:8e:f5:44:5d:af:
         fb:62:2c:87:c3:52:fd:a9:6e:c8:ae:84:74:c5:71:9c:2e:a8:
         ab:0d:e0:47:7d:9d:b5:8b:f4:39:d1:2c:40:6e:f2:8d:b1:5f:
         f0:4f:41:c2:58:50:eb:b4:75:51:94:3f:99:72:89:07:88:eb:
         a0:f1:d4:a7:be:da:09:6b:9b:34:f6:7c:5f:b3:4a:6d:1b:86:
         16:31:ba:89:8e:70:40:28:50:08:21:d4:f8:0c:c6:07:80:54:
         31:c5:02:f3:6e:ba:9e:7f:f5:c9:25:60:cd:46:8d:0d:5a:a7:
         e1:2f:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:30 2025 by rpki-client