Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230372e302f32342d3332203d3e203238313732.roa
File:                     3138392e38342e3230372e302f32342d3332203d3e203238313732.roa (raw, json)
Hash identifier:          wvHcnxUzNfAmC45rrxKnkt8KLF3bk7n2ATc9e767Xdc=
Subject key identifier:   0C:EE:9E:4C:82:6B:42:A1:C2:A3:14:BE:E5:DC:E1:2F:64:97:1D:26
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       28F6C9605F37738C8BCED3AE67EDB8DF42CE5637
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230372e302f32342d3332203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:39:31 +0000
ROA not before:           Fri 28 Jul 2023 18:34:31 +0000
ROA not after:            Fri 26 Jul 2024 18:39:31 +0000
asID:                     28172
IP address blocks:        189.84.207.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f6:c9:60:5f:37:73:8c:8b:ce:d3:ae:67:ed:b8:df:42:ce:56:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:34:31 2023 GMT
            Not After : Jul 26 18:39:31 2024 GMT
        Subject: CN=0CEE9E4C826B42A1C2A314BEE5DCE12F64971D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:b6:7d:55:6e:8f:f5:39:c7:1e:39:a3:e6:
                    b3:ac:31:f9:83:f2:8d:d0:f8:5f:9e:fa:e8:ad:82:
                    3c:6e:c4:e0:1e:85:a7:49:1d:e4:3d:12:c3:60:72:
                    da:89:d3:94:81:62:e3:64:5b:0f:68:08:9b:8b:9c:
                    89:6c:37:98:dd:62:c2:c0:e9:6a:61:e9:82:49:db:
                    e4:8d:78:bb:b9:2d:6a:ef:63:9d:f4:28:7a:15:81:
                    59:2f:ac:35:ce:68:98:0c:a3:c5:c5:c1:8d:49:bd:
                    5d:de:b0:50:3c:39:dd:8f:9b:73:d2:82:2c:62:91:
                    a5:84:6c:a1:95:36:5e:2a:b9:36:82:4a:d9:cb:72:
                    51:b3:2a:d3:fc:5b:dc:99:d0:00:cf:a2:e9:c4:1e:
                    5f:5c:4f:8e:2b:4b:2e:18:68:ae:c7:9e:63:ae:94:
                    f2:f8:aa:d4:d0:d2:8b:91:4b:76:b7:bc:80:40:2c:
                    60:4e:f2:53:26:8e:f9:6b:74:11:89:79:04:7f:a3:
                    76:4c:25:55:6c:9a:f9:25:fe:11:b7:ca:a5:18:b7:
                    97:a8:aa:bd:8f:9e:1e:30:11:b9:bf:1e:76:16:86:
                    32:31:5c:47:a7:dd:54:ce:c0:14:04:f2:9b:27:5a:
                    9e:f9:1c:d4:1f:0b:fd:b3:18:92:a9:5b:10:8b:b2:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:9E:4C:82:6B:42:A1:C2:A3:14:BE:E5:DC:E1:2F:64:97:1D:26
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230372e302f32342d3332203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:b9:4c:42:d5:21:41:87:9f:bd:34:3c:21:66:5e:2f:eb:
         ee:f7:08:39:54:0a:05:15:dd:80:7d:01:2c:33:62:dd:14:47:
         50:89:fc:22:8f:fe:6c:ba:99:16:f3:ae:72:10:ac:3d:da:34:
         eb:99:93:93:29:f1:14:e6:53:ab:49:f9:cf:35:d5:28:69:4d:
         84:48:ae:2d:81:19:c2:69:ec:8c:be:29:de:4e:09:63:41:1a:
         3a:2b:62:57:49:2e:7b:28:80:65:4e:dc:74:f9:d7:82:f0:42:
         d5:4c:f4:b5:dd:30:46:ca:ef:7d:cf:05:b0:0c:70:c6:ec:7e:
         cc:97:cf:d9:6a:b7:37:68:af:ac:62:60:78:22:7f:53:7b:bc:
         21:b1:9c:0e:c4:05:58:ab:88:b1:23:1f:78:e0:69:da:31:c6:
         ef:df:e3:aa:95:c3:48:8e:5f:85:31:7d:f0:e7:b1:a3:5d:06:
         c1:c4:f7:1a:52:ed:c5:aa:2f:d4:62:ea:51:3b:e3:1d:58:0a:
         27:8b:de:49:21:22:9f:ef:ef:29:c2:9d:c1:4f:47:8a:8f:1c:
         6f:00:b0:53:50:d6:cf:de:24:ed:cc:4e:9f:a4:97:d4:b7:73:
         d9:b3:e4:17:8b:ce:c7:bf:50:6d:b6:57:03:64:58:13:81:3b:
         37:19:a2:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKPbJYF83c4yLztOuZ+2430LOVjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZFMUNGMzg1OTI3RkQ1RDZDOUQzQzk4ODczQTk2RDZF
QUUyMkEwOTAeFw0yMzA3MjgxODM0MzFaFw0yNDA3MjYxODM5MzFaMDMxMTAvBgNV
BAMTKDBDRUU5RTRDODI2QjQyQTFDMkEzMTRCRUU1RENFMTJGNjQ5NzFEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ17Z9VW6P9TnHHjmj5rOsMfmD
8o3Q+F+e+uitgjxuxOAehadJHeQ9EsNgctqJ05SBYuNkWw9oCJuLnIlsN5jdYsLA
6Wph6YJJ2+SNeLu5LWrvY530KHoVgVkvrDXOaJgMo8XFwY1JvV3esFA8Od2Pm3PS
gixikaWEbKGVNl4quTaCStnLclGzKtP8W9yZ0ADPounEHl9cT44rSy4YaK7HnmOu
lPL4qtTQ0ouRS3a3vIBALGBO8lMmjvlrdBGJeQR/o3ZMJVVsmvkl/hG3yqUYt5eo
qr2Pnh4wEbm/HnYWhjIxXEen3VTOwBQE8psnWp75HNQfC/2zGJKpWxCLsjF5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDO6eTIJrQqHCoxS+5dzhL2SXHSYwHwYDVR0j
BBgwFoAUxuHPOFkn/V1snTyYhzqW1uriKgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmpDNjJrcDRoRFI2ZWduU0pjallONEJSeFA5ZDROQlhqWnN4VXpLTk5R
bWIvMC9DNkUxQ0YzODU5MjdGRDVENkM5RDNDOTg4NzNBOTZENkVBRTIyQTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RTFDRjM4NTkyN0ZENUQ2
QzlEM0M5ODg3M0E5NkQ2RUFFMjJBMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JqQzYya3A0aERSNmVnblNKY2pZTjRCUnhQOWQ0TkJYalpzeFV6S05OUW1iLzAv
MzEzODM5MmUzODM0MmUzMjMwMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM4
MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVTPMA0GCSqGSIb3DQEBCwUAA4IBAQCRDLlMQtUh
QYefvTQ8IWZeL+vu9wg5VAoFFd2AfQEsM2LdFEdQifwij/5supkW865yEKw92jTr
mZOTKfEU5lOrSfnPNdUoaU2ESK4tgRnCaeyMvineTgljQRo6K2JXSS57KIBlTtx0
+deC8ELVTPS13TBGyu99zwWwDHDG7H7Ml8/Zarc3aK+sYmB4In9Te7whsZwOxAVY
q4ixIx944GnaMcbv3+OqlcNIjl+FMX3w57GjXQbBxPcaUu3Fqi/UYupRO+MdWAon
i95JISKf7+8pwp3BT0eKjxxvALBTUNbP3iTtzE6fpJfUt3PZs+QXi87Hv1BttlcD
ZFgTgTs3GaKe
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:51 2025 by rpki-client