Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e39302e3139322e302f32302d3234203d3e203238313938.roa
File:                     3138392e39302e3139322e302f32302d3234203d3e203238313938.roa (raw, json)
Hash identifier:          44J4qiQ7rZU7fNKKKYWcgTAt+mK7MoBtkpNzEP3yCDk=
Subject key identifier:   77:87:05:39:74:A5:6E:C5:BF:60:DA:3C:40:4A:09:E4:C9:75:7C:54
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       6668B210C12DF14B553BAF0F908CFCA78C766275
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e39302e3139322e302f32302d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:17:17 +0000
ROA not before:           Mon 21 Aug 2023 20:12:17 +0000
ROA not after:            Mon 19 Aug 2024 20:17:17 +0000
asID:                     28198
IP address blocks:        189.90.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:68:b2:10:c1:2d:f1:4b:55:3b:af:0f:90:8c:fc:a7:8c:76:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:12:17 2023 GMT
            Not After : Aug 19 20:17:17 2024 GMT
        Subject: CN=7787053974A56EC5BF60DA3C404A09E4C9757C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:6c:71:37:79:e6:06:55:27:be:7a:26:76:
                    15:5d:57:bc:25:b4:3a:46:62:74:8d:5e:3a:56:88:
                    d7:56:8b:db:e5:b9:15:9f:1a:fe:5d:fd:9d:3a:35:
                    ea:5d:76:ac:0b:7a:4e:f0:41:7d:89:56:60:81:a5:
                    5a:33:f2:77:c9:bd:3e:48:ea:f0:b3:ab:6a:af:39:
                    75:6e:6b:36:e6:05:ef:b5:9d:6a:3f:bc:cf:0b:a5:
                    a8:e1:84:aa:65:25:6c:fb:42:eb:b1:8e:57:1e:be:
                    cb:23:a9:59:a0:0b:f1:34:36:fb:16:2b:5e:cc:fa:
                    10:a8:5d:70:81:a4:fe:f9:74:d2:33:ff:35:07:6f:
                    1b:ff:a0:e8:a8:20:0e:e9:c3:22:ee:68:1e:fe:47:
                    b5:8a:63:8c:af:40:65:bd:75:a2:62:d6:68:71:01:
                    5a:94:9d:21:71:95:c1:a0:fd:2b:c9:da:ee:5c:44:
                    b0:7e:78:70:6f:32:20:e7:d9:5c:fc:21:ed:9e:5b:
                    7d:ed:01:2f:6d:ab:61:3a:25:14:1e:10:46:2b:e6:
                    b7:9d:ba:18:6d:b4:9f:12:b5:a5:43:5d:bf:70:28:
                    a3:eb:4e:68:d7:51:39:f7:3d:89:ed:41:29:f1:24:
                    d3:12:09:aa:11:31:cf:20:07:3c:0f:4d:60:27:b4:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:87:05:39:74:A5:6E:C5:BF:60:DA:3C:40:4A:09:E4:C9:75:7C:54
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e39302e3139322e302f32302d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:09:87:56:5c:8c:b5:35:88:18:49:82:7b:44:d0:28:55:
         f6:ee:e0:18:8a:89:0b:3f:9b:e1:02:f1:05:e3:9f:b6:09:f1:
         70:87:68:dd:fb:d4:6f:d3:7d:08:f3:71:88:41:c1:82:e7:81:
         3f:ce:db:b8:79:37:df:cc:16:ad:6c:d1:1f:c0:6b:78:e7:8d:
         67:82:95:0f:4d:9e:d1:d1:50:f6:51:e4:6b:58:a9:7a:f1:75:
         42:51:cb:81:d5:5e:ad:a1:21:d2:ff:e1:5f:60:6c:be:45:e8:
         a8:14:48:c6:75:5c:f7:ba:b3:98:eb:1b:f8:da:16:38:83:f1:
         27:2e:7e:62:bb:83:fe:d7:d3:da:27:cb:c0:97:5c:5e:e5:e1:
         d2:07:f8:c5:32:b1:70:07:f8:a0:dd:de:93:a9:ec:44:b2:8b:
         51:5e:52:52:8b:03:f1:5f:ff:7c:11:a1:49:8a:34:00:34:d4:
         a3:09:03:9f:53:51:31:24:e3:08:aa:d0:7b:bb:c1:75:d3:50:
         65:f2:96:d2:5c:36:57:a4:a5:5e:d0:12:a2:02:34:14:a0:48:
         af:aa:ce:f0:94:34:57:a9:55:5a:bc:11:53:09:80:7c:2f:6a:
         c4:f9:c0:11:dc:83:73:c0:ad:be:56:f4:fb:cd:15:63:08:0d:
         e0:ba:af:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZmiyEMEt8UtVO68PkIz8p4x2YnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNDMTg5M0U1NUY2NDUxNERCRkMzQjZCODAxQzE2RDAz
NjA5MTNGRTAeFw0yMzA4MjEyMDEyMTdaFw0yNDA4MTkyMDE3MTdaMDMxMTAvBgNV
BAMTKDc3ODcwNTM5NzRBNTZFQzVCRjYwREEzQzQwNEEwOUU0Qzk3NTdDNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBmxxN3nmBlUnvnomdhVdV7wl
tDpGYnSNXjpWiNdWi9vluRWfGv5d/Z06NepddqwLek7wQX2JVmCBpVoz8nfJvT5I
6vCzq2qvOXVuazbmBe+1nWo/vM8LpajhhKplJWz7QuuxjlcevssjqVmgC/E0NvsW
K17M+hCoXXCBpP75dNIz/zUHbxv/oOioIA7pwyLuaB7+R7WKY4yvQGW9daJi1mhx
AVqUnSFxlcGg/SvJ2u5cRLB+eHBvMiDn2Vz8Ie2eW33tAS9tq2E6JRQeEEYr5red
uhhttJ8StaVDXb9wKKPrTmjXUTn3PYntQSnxJNMSCaoRMc8gBzwPTWAntME1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUd4cFOXSlbsW/YNo8QEoJ5Ml1fFQwHwYDVR0j
BBgwFoAUc8GJPlX2RRTb/DtrgBwW0DYJE/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC83M0MxODkzRTU1RjY0NTE0REJGQzNCNkI4MDFDMTZEMDM2MDkxM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQzE4OTNFNTVGNjQ1MTRE
QkZDM0I2QjgwMUMxNkQwMzYwOTEzRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzODM5MmUzOTMwMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvVrAMA0GCSqGSIb3DQEBCwUAA4IBAQAw2QmHVlyM
tTWIGEmCe0TQKFX27uAYiokLP5vhAvEF45+2CfFwh2jd+9Rv030I83GIQcGC54E/
ztu4eTffzBatbNEfwGt4541ngpUPTZ7R0VD2UeRrWKl68XVCUcuB1V6toSHS/+Ff
YGy+ReioFEjGdVz3urOY6xv42hY4g/EnLn5iu4P+19PaJ8vAl1xe5eHSB/jFMrFw
B/ig3d6TqexEsotRXlJSiwPxX/98EaFJijQANNSjCQOfU1ExJOMIqtB7u8F101Bl
8pbSXDZXpKVe0BKiAjQUoEivqs7wlDRXqVVavBFTCYB8L2rE+cAR3INzwK2+VvT7
zRVjCA3guq8l
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:25 2025 by rpki-client