Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139362e302f32342d3332203d3e203238313732.roa
File:                     3138392e38342e3139362e302f32342d3332203d3e203238313732.roa (raw, json)
Hash identifier:          UdkZulagf7tTRm3vf9UGy48Y7CmgQiYnv0Xq8FJSqoE=
Subject key identifier:   9C:6E:AB:6C:36:DF:B4:99:97:82:EB:54:7F:DF:E9:F2:D5:65:86:80
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       752C511D5989E06D1082DEFFED779E414E06D7E1
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139362e302f32342d3332203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:36:46 +0000
ROA not before:           Fri 28 Jul 2023 18:31:46 +0000
ROA not after:            Fri 26 Jul 2024 18:36:46 +0000
asID:                     28172
IP address blocks:        189.84.196.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2c:51:1d:59:89:e0:6d:10:82:de:ff:ed:77:9e:41:4e:06:d7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:31:46 2023 GMT
            Not After : Jul 26 18:36:46 2024 GMT
        Subject: CN=9C6EAB6C36DFB4999782EB547FDFE9F2D5658680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:b6:61:90:01:2b:62:84:20:40:54:dc:ff:
                    3b:5e:59:2b:bd:0d:8a:4d:e9:2d:58:f5:de:cb:db:
                    5a:20:7c:9c:21:d8:1e:a0:fd:a2:94:47:89:36:9c:
                    2a:4a:ac:f6:11:3b:9e:36:59:f0:a9:b7:ce:ae:ef:
                    0c:a0:ee:ab:fb:67:a9:ca:ef:56:92:ea:be:e4:a7:
                    0b:77:ec:00:13:25:32:55:03:50:3c:df:6b:6d:01:
                    05:d9:c9:48:de:b4:f3:a2:42:90:30:df:43:e1:2b:
                    ea:5e:8f:54:c5:45:11:3d:24:f2:44:15:88:0d:1a:
                    42:83:43:bc:0e:07:01:e8:b2:9a:8b:1d:74:e4:88:
                    e4:e1:56:25:3e:c8:7f:6d:91:57:09:19:5a:b3:e8:
                    29:95:93:dc:a0:03:c8:5d:51:f6:83:f0:e1:22:c0:
                    10:d7:ca:a6:ef:aa:27:90:30:61:c1:b2:4d:27:4c:
                    8d:0d:1b:15:9a:3e:69:7a:1a:af:8a:58:cd:1e:05:
                    c2:e5:5a:1b:0d:f6:41:99:eb:bd:56:a8:7c:f3:39:
                    88:78:8b:4a:5e:7c:2f:7d:42:7a:92:c9:9f:ab:4c:
                    29:20:b6:5d:a0:38:ba:bb:18:18:cd:9c:a0:91:8c:
                    30:94:51:be:2c:f0:47:ab:bb:fd:d0:93:41:ab:df:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:AB:6C:36:DF:B4:99:97:82:EB:54:7F:DF:E9:F2:D5:65:86:80
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139362e302f32342d3332203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:49:70:96:00:4f:b4:4d:b8:5f:41:54:c1:51:42:07:66:bb:
         8e:13:d7:4e:c4:c6:2e:29:72:9c:e2:4c:0a:f1:ec:73:38:01:
         91:e9:a5:09:6f:e3:8f:d7:94:f2:96:97:7d:69:4c:24:9d:ce:
         13:ea:d3:6f:e8:b0:30:dd:ea:d0:69:55:c8:b4:5b:64:52:7a:
         b2:c0:a2:28:e5:33:0e:b2:78:20:d0:bf:4c:37:d5:06:fe:2f:
         20:2e:70:0c:6f:51:d3:7d:bc:5b:f6:c3:36:63:ce:4b:ae:61:
         7d:92:23:92:b0:43:29:42:ae:26:9c:29:f8:ac:4d:db:5c:ac:
         3b:7e:4c:e4:b3:c2:d4:d7:e3:78:28:f1:4e:c2:5d:31:01:a3:
         2a:83:4f:84:f4:25:d1:66:43:a8:c2:55:ba:61:b0:b2:40:dc:
         09:e1:9e:8c:ca:d3:26:15:d1:6c:4b:a2:4d:5d:33:79:e4:4c:
         c6:ab:e2:34:b3:84:c1:8f:f3:b3:ac:db:a4:01:b6:ff:56:8e:
         69:72:fe:2f:0d:93:85:a9:d3:f5:ad:3d:be:7f:cf:04:82:4e:
         cf:a0:9a:99:74:70:25:d2:4a:6e:1e:91:1b:dd:73:15:17:4a:
         02:0d:9b:c0:31:f8:72:fc:29:58:9c:a6:86:a6:c1:6a:11:0f:
         31:d5:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:49 2025 by rpki-client