Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139362e302f32322d3232203d3e203238313732.roa
File:                     3138392e38342e3139362e302f32322d3232203d3e203238313732.roa (raw, json)
Hash identifier:          KATjUyJ2AGE0SSASjItqKCweUozGkTkJCmGxDzhVZtY=
Subject key identifier:   50:2C:5C:7F:81:F7:8F:67:48:7A:23:69:26:24:03:CD:8E:95:13:E1
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       1A0F9A5577A69E829F0C40F37A22D01FE5E136F5
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139362e302f32322d3232203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:22:33 +0000
ROA not before:           Fri 28 Jul 2023 18:17:33 +0000
ROA not after:            Fri 26 Jul 2024 18:22:33 +0000
asID:                     28172
IP address blocks:        189.84.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:9a:55:77:a6:9e:82:9f:0c:40:f3:7a:22:d0:1f:e5:e1:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:17:33 2023 GMT
            Not After : Jul 26 18:22:33 2024 GMT
        Subject: CN=502C5C7F81F78F67487A2369262403CD8E9513E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:80:57:4a:0e:dd:10:5c:ee:80:86:77:9b:
                    58:60:d9:14:b0:c3:70:85:bc:67:b5:c0:d8:87:fa:
                    07:9b:53:2d:e1:4c:7d:37:40:5e:23:35:bb:4b:e4:
                    6c:0f:e1:5a:76:e2:20:6e:09:57:3c:54:df:6c:c2:
                    b5:15:86:c7:2a:78:08:a4:d7:63:44:bb:b7:c7:0f:
                    13:cd:5a:fb:6a:98:76:43:cd:2a:8b:b4:77:4b:17:
                    5a:fb:21:a6:a2:ef:98:55:d1:03:e2:18:2d:ba:47:
                    07:0d:68:08:62:43:23:20:ab:9b:ef:8d:64:83:4e:
                    b7:97:7d:ce:c9:2e:fc:da:49:9d:2d:74:7d:35:62:
                    43:8b:6a:fb:45:75:03:ac:f4:61:6f:8a:fb:95:a7:
                    38:73:fc:d8:19:63:73:32:62:de:9d:f0:46:e5:52:
                    3a:29:2b:72:41:91:db:a6:25:a0:9b:7b:0f:e6:56:
                    ec:c3:8b:7c:30:65:95:a8:cc:c5:60:41:95:0f:6f:
                    f4:e8:cf:18:bc:c7:80:bb:fd:67:2a:1c:2e:41:2d:
                    0c:53:f4:67:9f:e3:99:1d:60:83:42:75:88:d4:cc:
                    5d:04:e1:9c:9a:13:5a:11:26:75:ce:f8:99:c2:5f:
                    4c:a8:84:ca:18:b3:f5:c7:b8:d0:6f:de:c8:ae:38:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:5C:7F:81:F7:8F:67:48:7A:23:69:26:24:03:CD:8E:95:13:E1
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139362e302f32322d3232203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:5d:54:16:e9:e8:32:a4:18:54:ba:b8:8c:11:a4:61:db:92:
         7b:16:e0:56:f9:9c:82:02:fe:36:c9:6b:2a:70:26:ef:af:b5:
         be:02:0d:09:54:8f:a9:fb:d0:e2:94:af:f8:cc:be:08:12:5c:
         70:0a:20:6f:85:85:51:e0:af:2e:40:14:ca:33:83:15:97:84:
         c9:be:e7:43:a3:9f:c1:58:6e:70:6e:70:16:27:bb:51:91:4b:
         de:92:aa:e1:6c:00:f5:83:00:9e:21:48:ab:f0:d8:92:c2:05:
         fe:cc:b2:cf:3c:3b:9b:52:5c:c9:2b:f8:12:a3:63:68:6e:38:
         96:32:49:dc:fd:1d:87:bb:9d:00:52:f6:47:6e:ae:eb:f1:d2:
         00:d0:84:ed:60:bc:ba:e1:65:a4:9b:01:a0:01:f9:8e:c2:61:
         f6:10:c3:fc:18:03:48:03:c8:fa:14:63:51:ae:d7:70:5c:52:
         18:c9:c5:f1:89:df:2e:fe:2c:2d:44:4f:0c:cc:d4:34:47:f9:
         ab:e8:05:4f:b1:cd:a4:75:ce:9d:a8:b2:19:58:a5:8f:20:9a:
         6c:f4:33:4e:5d:a3:b1:36:13:f2:2d:85:0d:bf:b0:d7:d6:72:
         69:c1:ff:06:19:5a:75:63:e1:72:b4:36:3a:9e:6a:22:da:50:
         68:46:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:13 2025 by rpki-client