Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230342e302f32322d3232203d3e203238313732.roa
File:                     3138392e38342e3230342e302f32322d3232203d3e203238313732.roa (raw, json)
Hash identifier:          WUjN/wwSks/r0A51jeOdOjzH0xyHDDw03kvdmGjhRpQ=
Subject key identifier:   E5:8A:B2:10:09:78:88:27:C5:A3:A3:5B:15:C9:76:2F:EE:88:66:E6
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       494D22CD9C84872022B69F55E7450795955EC8BF
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230342e302f32322d3232203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:22:33 +0000
ROA not before:           Fri 28 Jul 2023 18:17:33 +0000
ROA not after:            Fri 26 Jul 2024 18:22:33 +0000
asID:                     28172
IP address blocks:        189.84.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:22:cd:9c:84:87:20:22:b6:9f:55:e7:45:07:95:95:5e:c8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:17:33 2023 GMT
            Not After : Jul 26 18:22:33 2024 GMT
        Subject: CN=E58AB21009788827C5A3A35B15C9762FEE8866E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:bd:79:fb:9c:1f:26:6d:e2:df:3b:23:0a:
                    c7:41:cd:82:fa:33:aa:c9:b8:5a:56:d4:91:cc:d1:
                    8f:7e:c9:09:64:08:a3:be:2a:23:67:db:da:48:84:
                    66:9e:ad:38:8b:9a:8c:8a:d1:60:bb:72:c4:88:65:
                    57:73:41:ab:12:55:fe:57:bc:98:f8:71:12:93:4d:
                    b6:d5:52:c0:b5:97:db:30:be:b0:52:e1:85:cc:00:
                    06:5f:f7:ca:79:a9:84:ec:26:59:7f:c5:d2:be:4a:
                    be:d3:23:9e:e0:b8:02:44:72:2a:4c:38:d2:55:be:
                    8f:b2:28:9f:71:2e:4c:58:9c:fa:d4:76:2d:65:62:
                    2a:29:ea:9b:40:75:a2:0c:67:39:c6:4f:76:ce:a9:
                    5b:af:a0:46:07:f7:d8:a3:ae:1e:9c:0f:a1:90:c3:
                    08:76:06:0b:08:7f:3a:bd:84:8d:61:fb:19:49:3e:
                    53:87:08:d2:03:ce:d3:56:bf:cd:2d:91:5e:b5:5e:
                    4f:6b:01:05:5d:f8:d1:50:c2:4e:e9:9a:7d:49:53:
                    aa:ab:61:11:0a:1e:4c:f6:c7:75:2b:95:80:b6:57:
                    67:8c:22:8f:a3:aa:95:30:a6:9c:23:28:4d:2b:d6:
                    b7:aa:0e:d5:17:c9:63:ff:4f:5a:57:13:9c:f9:8f:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:B2:10:09:78:88:27:C5:A3:A3:5B:15:C9:76:2F:EE:88:66:E6
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230342e302f32322d3232203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:6c:75:a4:b1:76:9f:d4:b4:ea:2a:f0:bd:4f:32:9d:a0:
         7f:cb:9e:dc:29:a0:b6:d1:98:ba:5b:55:81:6b:74:a1:a5:53:
         db:41:5a:b5:a5:b0:09:1e:e7:e6:ee:71:c7:e2:3b:4a:da:60:
         3c:f5:28:5b:5d:a5:f7:37:98:b4:b7:d1:a6:bf:94:cf:af:ba:
         7b:43:35:b5:16:a7:ae:64:69:9a:09:b5:cb:9d:cd:6c:93:0a:
         1a:6c:96:0a:62:73:11:d3:f8:24:84:84:74:73:8d:08:71:7c:
         6e:88:20:79:4d:89:5b:4b:0f:31:94:f7:5e:60:f5:f3:43:fb:
         f5:37:ed:e3:b2:84:f1:b7:29:9b:15:2b:71:5a:30:d9:41:7e:
         88:9f:73:24:d4:e1:fa:be:92:36:c0:4b:ba:6f:9c:80:52:ea:
         6d:94:fa:ff:df:38:98:c1:35:c8:3c:91:cf:43:e2:33:ea:c6:
         01:ce:2d:d8:68:3c:3e:20:75:20:e9:b0:9c:5e:10:bd:74:d5:
         0c:34:8e:c7:01:3d:32:1b:dd:80:8e:a7:a5:fc:21:59:c3:99:
         5a:20:7a:e5:08:ff:19:76:6e:4d:ae:87:95:30:c6:d2:47:ad:
         5e:be:9a:6a:54:36:ea:c7:a7:05:5c:49:58:cf:5c:71:cb:bc:
         ef:b8:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org