Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139372e302f32342d3332203d3e203238313732.roa
File:                     3138392e38342e3139372e302f32342d3332203d3e203238313732.roa (raw, json)
Hash identifier:          Hcr85+NLEvlg+g5leZZUHfiLvtqYONPIBELe+mGoVV0=
Subject key identifier:   A0:63:9A:D5:F8:A5:BD:E9:AD:8A:7E:FD:A3:CE:A3:CA:DC:54:90:2C
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       095B4DAD19A6C5EEF3F4E6B63DE14D65D654095A
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139372e302f32342d3332203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:36:58 +0000
ROA not before:           Fri 28 Jul 2023 18:31:58 +0000
ROA not after:            Fri 26 Jul 2024 18:36:58 +0000
asID:                     28172
IP address blocks:        189.84.197.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5b:4d:ad:19:a6:c5:ee:f3:f4:e6:b6:3d:e1:4d:65:d6:54:09:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:31:58 2023 GMT
            Not After : Jul 26 18:36:58 2024 GMT
        Subject: CN=A0639AD5F8A5BDE9AD8A7EFDA3CEA3CADC54902C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:98:26:fd:29:f1:c0:d7:de:6f:35:f1:34:
                    a8:6c:eb:12:06:2d:3b:79:94:4b:63:0a:1d:09:4a:
                    c7:a6:0d:06:f3:4f:bd:06:59:a0:85:be:cd:97:0f:
                    32:c9:72:26:d5:b9:f5:61:f5:2e:f5:01:46:01:ef:
                    cd:ea:b4:d6:d5:bc:f2:32:36:96:fe:a3:ce:a2:60:
                    25:dd:0f:e4:28:90:9d:74:f2:b2:d6:25:5f:f6:49:
                    1e:91:a3:aa:75:aa:cb:76:3e:f5:00:8e:8e:bd:32:
                    eb:c8:20:99:12:3e:75:98:d8:96:d4:88:eb:c2:7c:
                    7d:c6:77:9f:49:e2:3a:04:46:ff:0c:f0:44:3f:92:
                    d2:74:d1:47:81:e6:3c:b4:cf:03:62:fd:7a:d5:7e:
                    a5:3a:5b:cf:dd:60:81:97:a8:6e:d8:5a:51:63:9a:
                    db:74:cf:28:27:c9:44:d9:cc:f1:ac:c1:8e:f9:a8:
                    6f:9a:cc:d0:8c:61:4f:1e:00:db:6d:d3:d6:84:25:
                    4d:04:38:07:47:21:3a:b1:ac:82:21:df:1b:ee:e4:
                    2c:ec:98:8a:8b:a2:08:77:89:3c:af:58:a6:48:6d:
                    5f:0d:ce:2d:1c:d8:37:64:9d:f6:74:ec:c3:ae:9a:
                    5c:e6:bc:d4:2b:2d:64:6d:61:ee:e7:8d:1e:30:fd:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:9A:D5:F8:A5:BD:E9:AD:8A:7E:FD:A3:CE:A3:CA:DC:54:90:2C
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139372e302f32342d3332203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a0:99:dd:1a:00:da:e4:dc:3f:d4:a1:8d:75:b2:29:d3:f4:
         c9:73:2a:45:a5:9a:06:1c:fe:a2:ef:17:9e:c8:38:e1:b2:60:
         0e:3a:5b:07:c5:b0:0c:b6:c4:fa:32:d9:2b:9b:f0:98:02:a6:
         b2:ad:6c:ca:86:52:86:99:b6:84:23:29:df:6e:69:97:46:be:
         03:8b:f0:4e:4c:49:97:f0:1f:59:b0:94:25:04:60:64:2a:d4:
         0a:8f:43:17:67:9a:07:18:3f:ac:41:bf:2b:74:cd:09:14:cc:
         f5:17:f3:28:60:88:9e:91:2c:96:99:8f:6b:89:4e:1e:f2:15:
         ec:6b:03:21:f2:7a:80:6f:85:cb:48:cb:70:b2:bf:d3:a6:ec:
         9a:45:df:f1:8a:b4:8f:00:4c:ca:07:bf:12:ba:5f:2f:7b:d6:
         29:70:81:c0:b3:80:a9:ea:68:47:94:b0:15:33:cb:dd:78:a9:
         9f:11:a5:11:fa:68:bb:4d:b1:ef:55:73:37:37:43:eb:a0:c8:
         8b:fb:d0:92:6c:8f:dc:f1:cc:08:6c:d3:e4:82:52:04:d2:6b:
         19:a3:6a:12:3c:ae:3f:65:cf:26:5e:5a:4f:a6:bc:b5:23:b6:
         73:c8:d5:3e:eb:af:7b:75:cb:28:e4:7e:7c:b8:7f:b6:35:5e:
         65:c1:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org