Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139322e302f32342d3332203d3e203238313732.roa
File:                     3138392e38342e3139322e302f32342d3332203d3e203238313732.roa (raw, json)
Hash identifier:          ohBZUWHlUQijDzxuZdMmJYGZn8W20h7pbQdWvJtqpI8=
Subject key identifier:   07:C8:BC:8A:DE:8B:68:33:22:68:DA:12:83:C9:CA:AB:71:67:C2:8E
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       71B2649581113882D079DF29F22F5640F680F296
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139322e302f32342d3332203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:35:53 +0000
ROA not before:           Fri 28 Jul 2023 18:30:53 +0000
ROA not after:            Fri 26 Jul 2024 18:35:53 +0000
asID:                     28172
IP address blocks:        189.84.192.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b2:64:95:81:11:38:82:d0:79:df:29:f2:2f:56:40:f6:80:f2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:30:53 2023 GMT
            Not After : Jul 26 18:35:53 2024 GMT
        Subject: CN=07C8BC8ADE8B68332268DA1283C9CAAB7167C28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:f4:da:cd:ad:b4:08:9d:26:ec:07:be:fd:
                    d3:0e:4b:db:27:d5:ea:0e:91:e7:f6:ef:d8:5f:df:
                    a7:f6:ab:79:6e:28:31:69:d1:dd:8b:3c:87:cc:46:
                    e4:32:67:99:0b:d8:c6:eb:0f:65:8f:eb:52:b0:e4:
                    ae:78:d4:58:2e:6a:30:f6:92:29:b7:d2:24:37:34:
                    38:f6:f8:4c:b4:e8:b3:20:dc:56:8d:bc:60:98:59:
                    fd:50:69:88:bd:51:df:bf:f5:45:3c:89:5c:ee:dc:
                    56:8f:01:66:eb:a4:ff:fa:bd:d9:08:ee:b6:be:f1:
                    f4:8b:74:3e:b0:5e:20:c3:72:fe:6c:d1:d1:4d:db:
                    19:4a:8f:e9:20:e3:5a:26:24:37:23:10:0b:b1:0b:
                    f4:95:d1:9f:b8:02:11:15:d4:61:6e:04:4a:ae:2e:
                    a1:67:e0:4e:88:05:55:a4:c5:b7:b4:45:98:30:87:
                    91:dd:b2:c5:6b:48:77:07:be:cd:64:95:41:62:6d:
                    ff:28:7e:48:02:02:25:81:8d:2c:b5:19:fb:46:e7:
                    e6:fb:11:da:5f:55:c8:c1:bd:c2:c4:0d:da:98:1d:
                    41:d2:52:da:f7:08:03:17:1a:23:05:82:fa:f7:69:
                    03:d3:c9:f7:6c:81:ed:e1:06:64:b4:56:28:eb:94:
                    d5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C8:BC:8A:DE:8B:68:33:22:68:DA:12:83:C9:CA:AB:71:67:C2:8E
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139322e302f32342d3332203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:6d:6c:95:e7:ff:c7:97:0c:74:12:f9:1e:21:04:6b:8e:
         5c:70:ab:e2:e2:24:46:05:24:2e:4b:b0:bc:e6:b8:7e:d9:47:
         31:18:de:d9:c6:98:45:df:50:cb:d5:a4:3f:f1:69:18:40:ba:
         c6:8b:0a:04:c5:8e:cf:c7:8e:09:13:8a:bc:9f:f7:3d:90:88:
         dd:09:c0:f1:34:74:81:65:d8:7d:ff:1e:30:5e:ad:d7:e6:a1:
         b4:d9:51:9b:0c:02:66:0c:70:c5:dd:08:72:f0:e9:9c:37:fd:
         b6:e7:38:5f:8a:ca:e2:08:38:80:25:66:f7:45:dc:91:1a:5b:
         11:b6:ac:cf:de:95:b3:ae:12:af:50:a2:35:96:b2:b4:ce:7f:
         be:5f:2e:21:b5:88:70:e0:73:90:ad:b9:48:7e:1c:cc:5d:53:
         b8:6d:f5:4e:83:5e:a7:0c:e3:b8:6e:66:5c:4e:8e:4d:c6:cc:
         3a:2b:7d:a1:db:59:a2:09:c1:dd:a8:36:7f:1a:99:91:34:59:
         58:0d:1d:f5:a9:3d:1b:9a:8a:14:0f:73:55:39:42:29:9f:47:
         a7:b9:a6:0a:f6:8c:34:7e:7b:b7:95:80:21:ba:93:0b:d2:19:
         e7:0a:05:29:a3:d9:8a:ea:6a:d3:1c:bd:73:c3:24:6e:55:2b:
         67:1e:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:21:30 2025 by rpki-client