Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/3138372e37332e3230382e302f32302d3234203d3e203533303534.roa
File:                     3138372e37332e3230382e302f32302d3234203d3e203533303534.roa (raw, json)
Hash identifier:          b2nr6yiE321huL6KB35yt3L3agjhugOiPSw6cM5c14s=
Subject key identifier:   8B:B3:97:8D:AD:89:EC:D8:91:E0:33:84:30:40:49:67:47:DC:4B:86
Certificate issuer:       /CN=633D7E82F439756EBE59F84532231EBA00A839CF
Certificate serial:       1BB51DBD37F3FFDB7F89F4C17BACEF2A283AD80D
Authority key identifier: 63:3D:7E:82:F4:39:75:6E:BE:59:F8:45:32:23:1E:BA:00:A8:39:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633D7E82F439756EBE59F84532231EBA00A839CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/3138372e37332e3230382e302f32302d3234203d3e203533303534.roa
Signing time:             Sat 28 May 2022 12:54:00 +0000
ROA not before:           Sat 28 May 2022 12:49:00 +0000
ROA not after:            Sat 27 May 2023 12:54:00 +0000
asID:                     53054
IP address blocks:        187.73.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b5:1d:bd:37:f3:ff:db:7f:89:f4:c1:7b:ac:ef:2a:28:3a:d8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633D7E82F439756EBE59F84532231EBA00A839CF
        Validity
            Not Before: May 28 12:49:00 2022 GMT
            Not After : May 27 12:54:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:00:78:a7:13:40:73:d3:20:d4:cb:60:86:
                    c4:64:df:d8:83:0c:15:1b:c2:04:39:45:da:fc:b5:
                    36:6e:b8:1e:10:f9:84:7f:a1:72:4b:13:ae:d0:10:
                    53:15:21:34:3d:62:5d:e6:61:42:48:d9:9a:eb:e7:
                    c7:6c:0b:ee:36:91:e1:e1:42:b5:5c:45:10:75:85:
                    bb:d8:22:a2:99:c7:0d:c4:2d:f2:16:06:90:cc:3f:
                    ee:61:2d:8e:f9:79:11:23:7b:c2:2a:50:46:31:4a:
                    4a:fd:1b:3f:7e:53:5a:a9:67:56:bf:82:22:10:1f:
                    e1:c2:99:d9:dc:18:1e:c8:2f:9a:68:b2:c5:79:0e:
                    8c:a6:6f:9b:ee:cc:f4:4d:9e:59:5e:5e:04:3f:06:
                    47:34:39:c4:48:71:85:5c:4d:86:eb:bd:49:e5:93:
                    db:66:b5:31:2e:f3:81:dd:53:a9:b9:c1:3c:33:73:
                    36:f2:4d:3e:6d:4b:e7:d0:b6:c7:dd:9c:c1:54:25:
                    11:85:77:d4:56:b8:75:6c:e2:1c:f1:0b:56:67:91:
                    b0:db:63:b1:0f:19:33:50:bc:a5:a3:66:c9:11:25:
                    53:1e:4c:e3:a3:c1:61:0a:ab:7d:0a:5a:fa:21:7f:
                    63:40:13:d3:b0:88:7e:8c:51:d7:ef:81:0f:3e:a4:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:97:8D:AD:89:EC:D8:91:E0:33:84:30:40:49:67:47:DC:4B:86
            X509v3 Authority Key Identifier:
                keyid:63:3D:7E:82:F4:39:75:6E:BE:59:F8:45:32:23:1E:BA:00:A8:39:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/633D7E82F439756EBE59F84532231EBA00A839CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/633D7E82F439756EBE59F84532231EBA00A839CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByKLqbvTtVTKwhaGPWwCQdyyjKtw8HzDPhAZrKws37DA/0/3138372e37332e3230382e302f32302d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:5d:ea:1e:e5:17:e4:86:ca:96:24:66:0e:0d:54:f6:11:
         01:bd:16:54:1c:e4:ba:70:ca:fd:a6:f8:c3:45:fd:ce:d3:b0:
         f0:e1:72:76:18:08:bf:1b:cd:80:5a:f8:da:ce:53:c4:be:d4:
         0f:b8:48:5d:d4:29:7f:2a:6f:e8:3d:d1:08:c0:84:62:db:98:
         8f:73:71:37:fe:21:28:c0:89:fb:da:fe:b7:b6:9f:c8:2d:cf:
         9a:ff:98:76:24:7a:4c:e8:33:e5:e3:ef:96:25:50:f9:a1:fc:
         51:aa:e0:ba:3d:af:1d:1c:4c:02:cf:51:7a:14:62:42:8b:7a:
         87:8d:46:d7:3b:1f:87:76:3c:44:d6:ee:9a:ae:f6:74:2a:c0:
         33:c4:16:ac:de:fc:a8:a6:78:c9:1b:21:63:24:27:28:92:6f:
         8e:f7:70:b1:8d:c7:7e:ab:29:74:a0:aa:a8:79:34:d7:a5:c0:
         22:92:d5:d2:e1:58:c0:b7:9f:b6:14:df:32:db:5b:cd:ae:58:
         0f:a1:6b:96:b8:34:1f:bd:a0:8a:35:cd:52:89:04:08:d4:78:
         ab:40:e2:ee:a2:5e:63:74:7c:20:86:57:25:fb:d4:ba:e4:34:
         e6:5b:df:df:00:a8:7f:6e:ed:da:79:72:0a:34:ed:1c:5a:80:
         17:32:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org