Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230302e302f32322d3232203d3e203238313732.roa
File:                     3138392e38342e3230302e302f32322d3232203d3e203238313732.roa (raw, json)
Hash identifier:          rT2k4dda5lk7ZBkSGnShX7UV3LLNVR/OaB1HcsMf25w=
Subject key identifier:   5D:3F:83:51:72:68:AF:3A:57:7A:5F:E9:77:99:DC:65:E3:B7:D1:87
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       1FADAA44F11BEE84AA801C31DDB900E30001AD16
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230302e302f32322d3232203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:22:33 +0000
ROA not before:           Fri 28 Jul 2023 18:17:33 +0000
ROA not after:            Fri 26 Jul 2024 18:22:33 +0000
asID:                     28172
IP address blocks:        189.84.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:aa:44:f1:1b:ee:84:aa:80:1c:31:dd:b9:00:e3:00:01:ad:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:17:33 2023 GMT
            Not After : Jul 26 18:22:33 2024 GMT
        Subject: CN=5D3F83517268AF3A577A5FE97799DC65E3B7D187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:04:74:2b:37:0a:af:d8:b5:02:55:aa:c6:
                    71:4e:0b:6a:fb:34:4e:d0:7a:8b:82:8b:80:6c:1c:
                    a6:28:33:72:de:13:dd:a6:60:68:e3:fc:4c:4d:cd:
                    07:ba:80:b5:52:8a:fe:90:c5:0b:d8:01:40:a7:68:
                    23:dd:5e:ce:f7:ed:61:75:12:d8:7b:5c:cc:e9:9c:
                    03:7c:9e:8e:f4:9e:43:00:d3:cf:c2:26:5d:50:91:
                    7d:3c:99:a6:d6:9a:4e:8e:d0:42:90:d9:b1:68:71:
                    1a:94:12:9d:8f:35:1d:ed:84:42:6c:f9:bc:fc:af:
                    d5:59:40:53:22:89:55:22:3e:0c:11:0f:41:22:6e:
                    b2:89:f1:6e:ee:5d:c2:48:d9:69:a9:80:76:1a:c7:
                    1c:67:4f:19:1d:99:d3:90:bf:c6:24:e5:cf:a3:ba:
                    a3:29:32:43:8c:32:e2:34:d1:58:20:c2:7b:bd:6b:
                    76:2c:56:c5:df:7a:96:5b:60:71:ff:5a:d1:1b:4d:
                    5c:21:05:d1:c1:80:ca:c5:37:5e:62:b9:01:e7:09:
                    99:73:60:0f:75:e8:c5:6b:b3:11:f0:e1:d3:5f:09:
                    92:05:be:3e:48:19:73:49:80:e9:7c:53:95:2f:56:
                    50:73:3c:5f:c6:e1:0c:95:6a:5e:49:f3:fd:5e:0c:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3F:83:51:72:68:AF:3A:57:7A:5F:E9:77:99:DC:65:E3:B7:D1:87
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230302e302f32322d3232203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:88:56:57:dc:c8:b0:13:c9:21:04:19:4e:36:dc:3a:ad:f1:
         d8:4c:1d:54:41:85:6b:d3:1e:9e:03:fa:ba:14:97:01:45:7b:
         29:d6:8b:e3:c9:ca:bf:fd:07:06:1d:2c:43:2c:08:b4:ea:ac:
         c2:d7:6e:3a:4f:e3:b5:a6:9a:e9:7e:84:16:6d:6a:61:0c:d8:
         62:a7:be:d3:e1:6f:34:ac:49:0f:cb:b6:6b:73:1d:30:51:2d:
         3d:43:bb:30:97:01:59:99:4a:69:78:32:cd:f1:93:be:d1:3f:
         df:e2:98:87:b6:46:32:01:78:5a:0e:a6:a9:3e:87:67:c5:b5:
         d7:25:c8:c9:13:86:76:47:ff:66:2c:1a:56:eb:e1:b8:cb:1d:
         59:6f:95:3d:aa:c9:5c:10:86:5e:da:a2:14:52:9b:25:c3:92:
         53:e8:96:83:8f:d9:78:23:c0:2f:03:48:85:eb:06:99:a8:69:
         5c:82:fe:48:ef:a9:29:60:92:0c:78:b6:ce:31:41:1e:58:c9:
         c8:0b:af:fe:e5:b8:3b:a5:5e:a5:70:c9:5b:f3:eb:5e:21:2a:
         67:d9:00:99:1e:19:0a:af:8f:4c:86:12:73:c4:fc:3b:98:55:
         40:a6:d0:30:40:6d:47:8b:a3:30:6a:03:2b:cd:eb:80:fe:37:
         a9:31:cd:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH62qRPEb7oSqgBwx3bkA4wABrRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZFMUNGMzg1OTI3RkQ1RDZDOUQzQzk4ODczQTk2RDZF
QUUyMkEwOTAeFw0yMzA3MjgxODE3MzNaFw0yNDA3MjYxODIyMzNaMDMxMTAvBgNV
BAMTKDVEM0Y4MzUxNzI2OEFGM0E1NzdBNUZFOTc3OTlEQzY1RTNCN0QxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlgR0KzcKr9i1AlWqxnFOC2r7
NE7QeouCi4BsHKYoM3LeE92mYGjj/ExNzQe6gLVSiv6QxQvYAUCnaCPdXs737WF1
Eth7XMzpnAN8no70nkMA08/CJl1QkX08mabWmk6O0EKQ2bFocRqUEp2PNR3thEJs
+bz8r9VZQFMiiVUiPgwRD0EibrKJ8W7uXcJI2WmpgHYaxxxnTxkdmdOQv8Yk5c+j
uqMpMkOMMuI00Vggwnu9a3YsVsXfepZbYHH/WtEbTVwhBdHBgMrFN15iuQHnCZlz
YA916MVrsxHw4dNfCZIFvj5IGXNJgOl8U5UvVlBzPF/G4QyVal5J8/1eDK83AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXT+DUXJorzpXel/pd5ncZeO30YcwHwYDVR0j
BBgwFoAUxuHPOFkn/V1snTyYhzqW1uriKgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmpDNjJrcDRoRFI2ZWduU0pjallONEJSeFA5ZDROQlhqWnN4VXpLTk5R
bWIvMC9DNkUxQ0YzODU5MjdGRDVENkM5RDNDOTg4NzNBOTZENkVBRTIyQTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RTFDRjM4NTkyN0ZENUQ2
QzlEM0M5ODg3M0E5NkQ2RUFFMjJBMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JqQzYya3A0aERSNmVnblNKY2pZTjRCUnhQOWQ0TkJYalpzeFV6S05OUW1iLzAv
MzEzODM5MmUzODM0MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvVTIMA0GCSqGSIb3DQEBCwUAA4IBAQB2iFZX3Miw
E8khBBlONtw6rfHYTB1UQYVr0x6eA/q6FJcBRXsp1ovjycq//QcGHSxDLAi06qzC
1246T+O1pprpfoQWbWphDNhip77T4W80rEkPy7Zrcx0wUS09Q7swlwFZmUppeDLN
8ZO+0T/f4piHtkYyAXhaDqapPodnxbXXJcjJE4Z2R/9mLBpW6+G4yx1Zb5U9qslc
EIZe2qIUUpslw5JT6JaDj9l4I8AvA0iF6waZqGlcgv5I76kpYJIMeLbOMUEeWMnI
C6/+5bg7pV6lcMlb8+teISpn2QCZHhkKr49MhhJzxPw7mFVAptAwQG1Hi6MwagMr
zeuA/jepMc2B
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:53 2025 by rpki-client