Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33322e302f32332d3233203d3e20323730393031.roa
File:                     3138392e35302e33322e302f32332d3233203d3e20323730393031.roa (raw, json)
Hash identifier:          tLBFWwMXxJQHNQ9gPVxkgFgeojWRIB4GaZzh+kBHKYY=
Subject key identifier:   DB:06:D5:56:BA:47:0B:8C:64:66:17:27:2F:DC:D7:8E:97:77:5F:9D
Certificate issuer:       /CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
Certificate serial:       3D4FC027B6EFAB162114299BD6F19238BC13CD68
Authority key identifier: 5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33322e302f32332d3233203d3e20323730393031.roa
Signing time:             Fri 02 Jun 2023 14:04:31 +0000
ROA not before:           Fri 02 Jun 2023 13:59:31 +0000
ROA not after:            Fri 31 May 2024 14:04:31 +0000
asID:                     270901
IP address blocks:        189.50.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4f:c0:27:b6:ef:ab:16:21:14:29:9b:d6:f1:92:38:bc:13:cd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
        Validity
            Not Before: Jun  2 13:59:31 2023 GMT
            Not After : May 31 14:04:31 2024 GMT
        Subject: CN=DB06D556BA470B8C646617272FDCD78E97775F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:d3:ae:b2:42:d7:94:29:53:0a:73:2c:fd:
                    96:43:33:c8:73:e9:f8:8e:ad:7e:cc:50:48:0f:6c:
                    a1:ba:c4:1d:ef:9a:79:1f:6c:a5:f1:98:9b:de:b1:
                    e3:fc:6f:72:66:7b:cc:dd:9f:74:65:5f:68:0c:51:
                    e4:10:11:40:a9:e9:6f:9d:b9:f4:aa:90:11:ef:3e:
                    6a:81:23:13:a0:74:f3:d8:1b:05:14:0a:20:ac:d2:
                    63:5d:bf:f9:d9:71:81:3f:ac:5a:f6:b1:2c:8f:0c:
                    2d:c6:fe:e3:e6:54:3b:11:76:27:c5:5c:98:29:31:
                    59:33:eb:52:ca:ed:77:82:a3:36:1b:13:50:8c:45:
                    92:f9:7c:7c:19:36:aa:9b:8c:96:fb:56:24:99:b1:
                    ca:4f:a2:8c:52:4b:f7:dc:64:32:98:41:c0:54:17:
                    9f:83:57:4a:30:36:a0:bd:db:77:58:c6:e8:26:2b:
                    12:3f:c1:05:b7:37:45:d3:02:f5:50:5f:98:a2:a9:
                    57:43:47:9a:9e:7a:2d:ef:24:e6:eb:38:db:6c:82:
                    9a:07:39:c6:76:ec:30:cd:86:75:ec:5d:11:4f:b2:
                    75:6c:e6:80:51:27:dc:5d:dc:15:a7:12:5f:3d:08:
                    8a:ff:49:19:f5:74:f0:14:5c:f5:42:00:ce:03:43:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:06:D5:56:BA:47:0B:8C:64:66:17:27:2F:DC:D7:8E:97:77:5F:9D
            X509v3 Authority Key Identifier:
                keyid:5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33322e302f32332d3233203d3e20323730393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:06:9b:a3:0f:4c:76:1d:21:c9:6c:dd:a2:a7:4a:50:1f:e0:
         5c:47:3f:87:95:2e:46:50:76:63:9a:b0:80:c0:48:16:7f:7f:
         51:40:3b:05:04:45:48:5e:ef:3b:d6:ab:84:fc:be:60:37:e1:
         1a:0a:6e:77:6a:68:d1:1e:48:c8:01:02:82:de:7b:02:65:51:
         ba:52:38:45:f3:c4:fd:dc:ff:59:99:7a:96:c3:39:f2:59:9b:
         2a:94:b1:35:a9:1d:3c:44:17:68:4b:85:5a:09:46:4b:df:f1:
         9e:05:b3:91:16:6a:f0:91:ad:c3:22:f3:74:39:40:1c:fa:42:
         cb:e2:07:a2:7a:0c:86:23:5a:35:c3:13:7f:7b:7e:05:20:f3:
         ef:20:57:27:78:48:52:ff:73:da:54:53:c0:ae:32:f0:de:4e:
         fd:82:2b:f1:a6:0e:15:2b:57:95:98:c4:1d:4a:53:3d:1d:41:
         84:ea:57:6f:4e:e6:a6:20:f4:b5:bf:56:36:77:3e:71:05:d9:
         f7:24:2b:56:af:d6:fd:d4:ae:67:ca:5b:d8:13:39:4d:81:65:
         54:2f:be:7d:c1:81:b6:7a:8e:11:15:1a:f8:12:ea:45:06:42:
         62:8a:26:84:f5:db:94:c5:de:40:da:10:d2:a5:5c:4c:3b:06:
         6b:0b:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:30 2025 by rpki-client