Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32332d3234203d3e203238313938.roa
File:                     3138372e38342e3234302e302f32332d3234203d3e203238313938.roa (raw, json)
Hash identifier:          FBAeylmOUrMscqi01a0FJaZOr6SPvXSqi5lrHobR4mA=
Subject key identifier:   94:F8:FC:12:CF:04:81:DD:00:35:8D:05:9D:CE:1A:F2:79:B2:A6:F2
Certificate issuer:       /CN=399EF65AE0BF7B30D754E4EB248326A7A4428C33
Certificate serial:       6DC475FA9D7E7B40100EBBB4AF3E31D1BC13F6B5
Authority key identifier: 39:9E:F6:5A:E0:BF:7B:30:D7:54:E4:EB:24:83:26:A7:A4:42:8C:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32332d3234203d3e203238313938.roa
Signing time:             Fri 14 Oct 2022 17:49:36 +0000
ROA not before:           Fri 14 Oct 2022 17:44:36 +0000
ROA not after:            Fri 13 Oct 2023 17:49:36 +0000
asID:                     28198
IP address blocks:        187.84.240.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:75:fa:9d:7e:7b:40:10:0e:bb:b4:af:3e:31:d1:bc:13:f6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399EF65AE0BF7B30D754E4EB248326A7A4428C33
        Validity
            Not Before: Oct 14 17:44:36 2022 GMT
            Not After : Oct 13 17:49:36 2023 GMT
        Subject: CN=94F8FC12CF0481DD00358D059DCE1AF279B2A6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:09:96:2b:b0:2d:cb:68:0b:3c:81:bc:05:
                    1a:43:a4:e8:c7:79:65:0c:00:3a:55:08:d3:be:c9:
                    1e:91:c0:8d:41:19:c6:0c:ec:bf:2b:18:4a:b3:58:
                    aa:95:9a:7a:7f:dd:0a:cc:ea:32:b4:ca:f7:85:00:
                    0d:31:7a:2b:17:cd:da:a2:c1:57:a4:a9:fc:66:df:
                    df:01:8b:5d:8a:23:7e:ab:f9:fa:8d:39:ab:87:63:
                    23:36:fd:3b:35:29:7a:26:9f:12:c3:2e:e0:68:ee:
                    7e:47:bd:aa:9f:46:1a:dc:8a:6e:90:b4:2e:c7:a7:
                    4a:26:94:b4:42:45:60:94:36:03:11:ff:67:3d:46:
                    7b:39:06:6b:db:3a:2f:ed:42:d3:96:54:e8:80:07:
                    08:c7:08:16:9e:61:22:29:f8:9a:18:90:56:8a:01:
                    b5:10:bf:57:c1:76:75:be:ec:7f:e1:fd:84:86:cd:
                    88:72:58:aa:04:33:d6:90:0e:9e:7a:b2:8b:50:28:
                    98:cd:a9:ee:2f:8c:1b:a8:50:c3:59:1b:cd:b7:63:
                    32:01:92:ba:54:ae:65:c7:33:a1:5f:63:94:cf:d2:
                    da:2f:b8:71:12:f4:5a:6d:d1:c6:60:26:9c:40:d3:
                    30:fb:0d:22:f9:91:dd:62:b6:56:79:85:3d:a2:0e:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:FC:12:CF:04:81:DD:00:35:8D:05:9D:CE:1A:F2:79:B2:A6:F2
            X509v3 Authority Key Identifier:
                keyid:39:9E:F6:5A:E0:BF:7B:30:D7:54:E4:EB:24:83:26:A7:A4:42:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32332d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:7e:3f:b8:f8:a9:e6:f9:8c:ee:46:d4:89:fc:ca:00:a6:
         e6:fa:10:ed:68:d0:e2:65:7b:d4:1e:86:d9:9e:a5:81:78:b1:
         24:cb:19:03:20:d8:6b:bf:99:95:a7:aa:7b:18:45:a4:6e:5a:
         71:8c:45:7d:c2:8d:b0:b7:98:50:6b:3b:f4:ef:65:53:80:40:
         35:a6:d5:25:ca:bd:57:71:d6:e4:12:f2:cb:80:8d:22:30:c5:
         49:4b:94:f8:b2:5a:48:48:b9:99:72:ba:34:1c:bf:0c:8d:8f:
         19:7c:9b:42:b4:a2:d7:bb:83:7b:b1:a8:8a:3b:a0:4a:54:bd:
         9a:1d:61:3f:77:64:9d:08:1d:a1:16:96:a6:97:bf:c9:42:03:
         b6:b4:ae:b4:aa:c2:ea:7c:8e:45:b4:ae:9c:31:c7:d6:d9:6a:
         f2:13:fc:bb:60:9e:72:b7:af:ca:50:63:90:54:2d:4c:12:68:
         2d:b4:cc:5e:03:7a:7f:5c:91:38:a8:4c:1c:d6:c9:3a:45:0f:
         89:fc:ef:9d:49:c0:4a:61:31:6a:f7:61:32:f8:99:13:8d:76:
         93:9a:de:2a:ae:6e:95:2a:57:bb:e9:53:8c:25:2d:6b:d6:58:
         e1:1a:44:3c:31:29:d2:16:48:18:4c:3f:10:90:87:2b:ec:74:
         24:2e:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:30:26 2025 by rpki-client