Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3234203d3e203238313938.roa
File:                     3137302e3233382e3137362e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          TseV39EXKyAin1OL3PuJIcx/FkC6NpLa43Q8C8Lnm64=
Subject key identifier:   7B:0D:F5:DC:43:83:FC:DC:2C:01:B2:A2:CD:E0:BC:EC:DA:B2:85:52
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       2181EBC9A598C43D8EF11B38239C65CED82D6F68
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:27:20 +0000
ROA not before:           Mon 21 Aug 2023 20:22:20 +0000
ROA not after:            Mon 19 Aug 2024 20:27:20 +0000
asID:                     28198
IP address blocks:        170.238.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:eb:c9:a5:98:c4:3d:8e:f1:1b:38:23:9c:65:ce:d8:2d:6f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:22:20 2023 GMT
            Not After : Aug 19 20:27:20 2024 GMT
        Subject: CN=7B0DF5DC4383FCDC2C01B2A2CDE0BCECDAB28552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:14:2b:75:f1:bb:89:a4:b1:0c:44:73:28:a0:
                    cb:f1:00:4e:71:43:c1:e0:28:5a:81:dc:d1:16:9a:
                    76:7f:e2:30:2a:08:10:e3:48:97:b6:94:c6:a8:e3:
                    da:a1:de:87:1d:15:46:6c:ea:ff:59:64:9f:32:be:
                    26:9a:70:b1:11:04:fa:1d:bf:92:f3:8c:37:a5:fd:
                    11:a2:93:23:e6:e4:62:ca:50:da:e0:ba:e3:e0:9a:
                    be:ba:c0:17:31:6a:00:ce:18:32:f1:75:e1:42:7d:
                    c1:27:12:e5:5b:92:12:5e:9a:73:d8:5c:ed:e5:f8:
                    5a:b1:df:07:df:f4:5d:02:d8:65:b1:50:ee:87:2c:
                    3f:62:ec:05:93:45:44:55:5a:60:18:12:22:80:6a:
                    bc:48:6f:f5:90:76:bc:b9:71:3b:c4:50:f5:bc:49:
                    d3:85:41:02:ac:b6:d6:df:15:b4:fc:7b:8e:e0:f3:
                    f2:5f:05:62:ae:5c:e0:3f:ba:cc:49:95:c0:2d:69:
                    b9:4b:3f:9d:02:76:40:8c:28:0a:d6:3b:bb:0e:ef:
                    1d:18:4c:5e:dd:ad:9f:22:02:69:f8:82:22:ec:42:
                    d4:60:a4:a6:e3:02:9c:81:14:eb:13:8d:24:ad:61:
                    d9:e9:88:5d:bb:0b:b0:ec:93:e4:10:3d:d8:e6:36:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0D:F5:DC:43:83:FC:DC:2C:01:B2:A2:CD:E0:BC:EC:DA:B2:85:52
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:81:d6:79:35:07:7b:bf:55:c4:ac:56:7f:6b:21:4a:47:60:
         4f:be:6d:04:e8:b5:b3:de:1f:ec:17:bd:0c:0c:11:49:ef:5f:
         9c:2c:0e:7e:5e:6f:b8:85:f0:0b:bc:62:7e:df:61:ee:99:e0:
         1b:cf:38:ca:56:af:93:25:86:21:fc:41:48:7b:a6:30:2c:74:
         f4:0f:34:02:ce:f8:31:ad:c9:8a:f9:60:ee:4a:c1:d9:53:3e:
         87:00:b8:eb:30:67:94:8a:ee:0d:05:8c:ec:9f:94:8a:6c:62:
         f3:94:30:d0:d5:a8:17:63:76:5e:1a:fc:1e:02:34:f5:15:cb:
         76:21:ac:bc:1d:ac:0b:10:f0:e6:ef:f8:02:a5:da:cc:02:1f:
         69:1d:7c:6c:cf:19:d6:65:7c:97:72:fa:ef:14:f1:78:d7:d0:
         90:3d:f8:a3:1a:4e:c1:51:67:11:96:9a:da:e1:f7:16:8e:17:
         ca:b0:59:81:e0:18:62:a2:de:6a:eb:8b:25:7c:13:41:39:e1:
         2e:20:d8:c2:28:99:dc:40:6b:44:63:3d:d8:15:b1:de:f4:97:
         59:4d:47:e0:45:0d:54:56:3a:a5:ce:8b:21:50:d2:df:cd:75:
         98:4c:69:23:33:5a:d5:dd:fd:d9:6a:8b:1c:14:f1:4f:4d:3c:
         f3:5b:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:31:22 2025 by rpki-client