Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e39332e39362e302f32312d3234203d3e203238313938.roa
File:                     3137372e39332e39362e302f32312d3234203d3e203238313938.roa (raw, json)
Hash identifier:          lHykZ7xZoBJQPc77FTN/Umoh6t9f3FCrRy5xMfG2zNI=
Subject key identifier:   43:14:B5:C5:C4:B6:63:CC:EE:A2:A5:35:39:FA:57:CF:EF:B5:F7:75
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       6DCE4BFF049AF84A35633DA5BE573096995B1DFD
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e39332e39362e302f32312d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:22:59 +0000
ROA not before:           Mon 21 Aug 2023 20:17:59 +0000
ROA not after:            Mon 19 Aug 2024 20:22:59 +0000
asID:                     28198
IP address blocks:        177.93.96.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ce:4b:ff:04:9a:f8:4a:35:63:3d:a5:be:57:30:96:99:5b:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:17:59 2023 GMT
            Not After : Aug 19 20:22:59 2024 GMT
        Subject: CN=4314B5C5C4B663CCEEA2A53539FA57CFEFB5F775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:60:50:f9:49:9f:86:a5:b6:38:fd:28:a7:
                    c9:8c:22:40:91:43:7d:f5:33:0c:63:da:f7:e4:4b:
                    42:67:48:e9:5f:f3:19:6c:79:cc:6c:41:0f:1e:2b:
                    e5:69:d0:95:2f:53:c1:bd:c2:56:6a:f4:23:a0:f9:
                    07:48:f3:96:4a:72:0f:58:8e:5e:98:27:81:57:c5:
                    a1:4d:23:e1:93:14:f1:05:88:e3:4c:f3:5d:82:2c:
                    6a:08:d0:24:60:b6:dd:12:8b:f3:c2:61:c8:32:ea:
                    24:04:9b:01:d5:3e:8f:e5:30:46:ba:b1:cc:0e:09:
                    bd:ca:4d:9a:ba:a3:64:6e:16:19:80:d6:98:0c:27:
                    ce:f7:ee:b8:37:fb:5d:ce:d8:9a:8c:1a:62:75:1a:
                    03:05:63:a6:29:9f:c5:1c:94:00:c3:2d:2d:00:16:
                    4e:2c:75:03:bf:37:86:08:bc:e4:c1:12:ea:91:a0:
                    75:bc:be:ab:35:6e:e9:b4:ac:2c:95:54:bf:92:50:
                    76:52:9d:fb:46:af:43:f1:df:5e:1c:ae:3b:d5:46:
                    cb:2b:9f:d3:eb:11:6c:c5:a1:06:7f:92:66:00:d4:
                    87:47:58:f7:d3:c5:e3:04:df:63:8d:12:a3:fa:8c:
                    73:58:80:76:dd:35:fb:c0:4d:8f:be:c5:96:97:69:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:14:B5:C5:C4:B6:63:CC:EE:A2:A5:35:39:FA:57:CF:EF:B5:F7:75
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e39332e39362e302f32312d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:1f:23:be:c8:93:71:7c:0a:ef:ec:e5:4b:83:92:14:f7:
         b0:41:e6:94:b8:7f:95:76:2d:84:7e:0b:4a:07:50:ec:c1:89:
         cd:d7:36:79:2b:0a:2c:9d:97:d4:c6:90:31:a0:03:69:46:c3:
         29:23:24:02:7b:f7:52:59:9f:97:00:f4:67:a7:7d:cf:34:38:
         c8:f8:d7:73:7a:a9:3c:2c:7d:10:96:22:16:2b:8b:5a:e4:11:
         03:d1:12:93:c7:ca:4b:5f:9a:f1:b9:8c:e9:21:95:84:40:a8:
         96:d6:d0:ae:57:5b:41:30:d3:b2:c6:75:ce:97:31:96:7f:04:
         01:62:ff:8f:fb:7f:b1:0f:57:61:69:8e:b5:5b:f2:dd:07:04:
         1f:d9:b3:af:83:90:5a:e5:65:02:93:6a:ed:a2:41:56:37:0f:
         bc:03:06:d9:3b:b8:3d:f0:d6:d8:77:41:a5:88:17:fa:27:55:
         bc:c2:4b:38:f3:60:72:25:6c:b1:93:a4:fd:28:ef:de:4e:27:
         87:f0:6f:e1:a5:21:c2:ca:89:fc:1c:72:b8:eb:0c:77:5b:1e:
         04:20:d9:5c:46:b7:d0:6a:88:4f:ae:26:12:46:cc:0b:e1:4b:
         54:07:34:25:26:79:8d:30:34:3f:73:4a:21:e2:77:36:78:77:
         40:45:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:40 2025 by rpki-client