Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231382e302f32342d3234203d3e20323730393539.roa
File:                     3139302e3138342e3231382e302f32342d3234203d3e20323730393539.roa (raw, json)
Hash identifier:          tKwMpyg9zmjv4eSYks84UTEMgVKtd9UzpmSBfgQLIg0=
Subject key identifier:   CF:DB:02:13:57:16:72:E0:02:AA:9E:92:5A:98:83:E4:3A:40:2F:3B
Certificate issuer:       /CN=87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307
Certificate serial:       7CD69FA868E182EB696B235035275670B9A1A72B
Authority key identifier: 87:DF:E1:FA:2E:86:10:A7:6E:6C:36:A3:C1:CB:E3:2A:E4:01:23:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231382e302f32342d3234203d3e20323730393539.roa
Signing time:             Wed 15 Mar 2023 08:48:26 +0000
ROA not before:           Wed 15 Mar 2023 08:43:26 +0000
ROA not after:            Wed 13 Mar 2024 08:48:26 +0000
asID:                     270959
IP address blocks:        190.184.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d6:9f:a8:68:e1:82:eb:69:6b:23:50:35:27:56:70:b9:a1:a7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307
        Validity
            Not Before: Mar 15 08:43:26 2023 GMT
            Not After : Mar 13 08:48:26 2024 GMT
        Subject: CN=CFDB0213571672E002AA9E925A9883E43A402F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:b2:77:7e:98:8b:73:ab:81:85:f5:1f:27:
                    67:be:4f:35:2b:2a:9f:83:5c:92:45:96:80:28:43:
                    e2:dd:ad:8a:9c:90:c2:ce:68:92:28:50:ed:c4:86:
                    4a:13:ff:51:65:f5:c7:eb:ca:43:c5:db:23:00:2c:
                    d2:3d:48:5b:bd:fd:a9:6f:5b:54:aa:2e:09:71:fc:
                    24:d4:16:64:41:63:df:93:67:29:01:52:6d:df:0c:
                    49:c2:39:39:58:98:c0:99:03:87:01:59:8b:1b:34:
                    3f:fc:63:4d:45:6b:d2:50:34:cc:ac:01:10:a6:4d:
                    08:9f:a8:f2:2a:a6:f0:38:ac:25:e7:16:c8:1f:9c:
                    08:4f:c3:25:2e:6b:80:95:a5:70:20:a4:67:0a:a9:
                    0b:4c:f1:60:fd:59:0a:23:08:69:ca:56:84:35:8d:
                    0c:fa:c6:29:86:9b:b7:3d:26:7d:1c:b2:c0:85:7d:
                    c9:c7:d1:d5:de:04:0c:34:89:01:e4:da:6e:35:88:
                    51:75:70:38:cb:b2:d0:9c:2b:ff:fc:8a:58:45:9b:
                    dc:83:7a:44:c2:59:b4:88:a8:78:4d:3e:ea:7a:16:
                    a1:b2:17:9f:73:96:63:27:2d:ae:42:cc:3e:55:a6:
                    c8:62:f2:a1:0f:57:c2:ae:30:cd:42:51:aa:5d:c8:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DB:02:13:57:16:72:E0:02:AA:9E:92:5A:98:83:E4:3A:40:2F:3B
            X509v3 Authority Key Identifier:
                keyid:87:DF:E1:FA:2E:86:10:A7:6E:6C:36:A3:C1:CB:E3:2A:E4:01:23:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231382e302f32342d3234203d3e20323730393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:52:c7:d2:a9:19:1e:ad:e5:0e:56:c6:89:c5:23:81:57:30:
         55:4c:2f:62:dd:5e:fb:1a:4a:6d:9f:89:79:18:ef:e2:0c:ec:
         18:29:31:c9:63:8e:3a:6e:34:70:77:1a:53:6e:b2:01:62:b0:
         a5:22:e7:80:d5:35:26:1b:3c:b1:33:8b:26:45:7e:eb:fe:64:
         d9:9a:db:2e:84:c4:91:ce:d8:4f:30:40:26:78:f2:fd:44:29:
         08:ae:d7:22:92:e0:22:fb:89:46:93:fc:b8:59:ab:a6:da:27:
         c6:c6:ff:68:08:da:b4:22:f6:ff:41:cd:13:a0:5b:d8:c5:d4:
         90:ca:07:60:7d:67:42:e7:72:3a:f7:2e:87:64:39:98:03:1f:
         69:98:2e:16:7b:15:fa:84:e1:4b:41:83:af:da:43:99:5c:4d:
         35:42:0d:44:a9:29:22:36:94:0e:08:c3:d2:31:e6:7f:20:08:
         ae:00:49:ca:96:68:06:f2:67:99:e0:7e:6d:18:fc:0c:9b:00:
         43:41:3f:21:78:85:81:10:aa:cf:f6:b7:48:eb:29:31:fb:8e:
         e6:7c:91:54:24:b1:91:fb:77:f5:7d:de:97:5e:2d:b2:3a:40:
         b4:9f:3c:c7:e3:27:89:25:51:a6:7c:f4:a8:22:bf:1b:bc:01:
         e1:38:e6:8e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfNafqGjhgutpayNQNSdWcLmhpyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdERkUxRkEyRTg2MTBBNzZFNkMzNkEzQzFDQkUzMkFF
NDAxMjMwNzAeFw0yMzAzMTUwODQzMjZaFw0yNDAzMTMwODQ4MjZaMDMxMTAvBgNV
BAMTKENGREIwMjEzNTcxNjcyRTAwMkFBOUU5MjVBOTg4M0U0M0E0MDJGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJrJ3fpiLc6uBhfUfJ2e+TzUr
Kp+DXJJFloAoQ+LdrYqckMLOaJIoUO3EhkoT/1Fl9cfrykPF2yMALNI9SFu9/alv
W1SqLglx/CTUFmRBY9+TZykBUm3fDEnCOTlYmMCZA4cBWYsbND/8Y01Fa9JQNMys
ARCmTQifqPIqpvA4rCXnFsgfnAhPwyUua4CVpXAgpGcKqQtM8WD9WQojCGnKVoQ1
jQz6ximGm7c9Jn0cssCFfcnH0dXeBAw0iQHk2m41iFF1cDjLstCcK//8ilhFm9yD
ekTCWbSIqHhNPup6FqGyF59zlmMnLa5CzD5Vpshi8qEPV8KuMM1CUapdyBDPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUz9sCE1cWcuACqp6SWpiD5DpALzswHwYDVR0j
BBgwFoAUh9/h+i6GEKdubDajwcvjKuQBIwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXpIVnlRZ2R6U05HYmZXTFd0WTFMTGdVOWtIR244cHNtaDhOY2ZVU3Vh
YWgvMC84N0RGRTFGQTJFODYxMEE3NkU2QzM2QTNDMUNCRTMyQUU0MDEyMzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3REZFMUZBMkU4NjEwQTc2
RTZDMzZBM0MxQ0JFMzJBRTQwMTIzMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6SFZ5UWdkelNOR2JmV0xXdFkxTExnVTlrSEduOHBzbWg4TmNmVVN1YWFoLzAv
MzEzOTMwMmUzMTM4MzQyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL642jANBgkqhkiG9w0BAQsFAAOCAQEAQlLH
0qkZHq3lDlbGicUjgVcwVUwvYt1e+xpKbZ+JeRjv4gzsGCkxyWOOOm40cHcaU26y
AWKwpSLngNU1Jhs8sTOLJkV+6/5k2ZrbLoTEkc7YTzBAJnjy/UQpCK7XIpLgIvuJ
RpP8uFmrptonxsb/aAjatCL2/0HNE6Bb2MXUkMoHYH1nQudyOvcuh2Q5mAMfaZgu
FnsV+oThS0GDr9pDmVxNNUINRKkpIjaUDgjD0jHmfyAIrgBJypZoBvJnmeB+bRj8
DJsAQ0E/IXiFgRCqz/a3SOspMfuO5nyRVCSxkft39X3el14tsjpAtJ88x+MniSVR
pnz0qCK/G7wB4Tjmjg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:31 2025 by rpki-client