Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3232203d3e20323731373030.roa
File:                     3138392e38342e35362e302f32322d3232203d3e20323731373030.roa (raw, json)
Hash identifier:          waZyjTVnfLyoZ+iUMpepddCR6xdUlYnRGMKgQczPsXA=
Subject key identifier:   30:0E:04:A1:9E:07:41:66:3D:5E:1F:B1:F1:51:72:EE:1E:6A:69:F2
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       416C9CE804FDE3B7A70D8FF33D41E35EF09FE9A3
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3232203d3e20323731373030.roa
Signing time:             Mon 16 Dec 2024 19:56:56 +0000
ROA not before:           Mon 16 Dec 2024 19:51:56 +0000
ROA not after:            Mon 15 Dec 2025 19:56:56 +0000
asID:                     271700
IP address blocks:        189.84.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6c:9c:e8:04:fd:e3:b7:a7:0d:8f:f3:3d:41:e3:5e:f0:9f:e9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Dec 16 19:51:56 2024 GMT
            Not After : Dec 15 19:56:56 2025 GMT
        Subject: CN=300E04A19E0741663D5E1FB1F15172EE1E6A69F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:00:64:89:2e:c4:7b:b1:83:d3:7c:9f:11:
                    b4:cf:d5:7a:1b:05:c9:53:91:44:e7:58:3e:4f:51:
                    aa:d1:b1:c2:11:5e:30:4d:c8:60:89:16:95:6b:b3:
                    0f:bd:6b:83:7e:6e:43:0e:66:7d:8f:02:1a:8b:d0:
                    33:aa:64:50:0d:e4:a1:ca:b1:24:9b:f7:98:5c:3a:
                    1e:5c:68:24:a2:e7:0b:da:26:2e:af:9a:f9:31:6b:
                    ef:9f:35:3c:df:71:cc:b6:7e:0f:99:f5:36:56:21:
                    22:f1:53:2a:84:1b:0a:45:18:4c:33:f8:62:f2:0d:
                    c1:cb:72:9f:68:3d:c7:8c:7d:f8:8e:7c:fc:cb:72:
                    fb:29:f0:30:7f:7d:64:e8:aa:db:84:f4:f6:9d:ad:
                    83:89:45:b5:f5:fb:13:ec:bb:2d:9a:4b:3f:17:15:
                    3f:c1:34:37:2a:57:e9:4e:a2:2b:03:72:3a:39:85:
                    a6:bd:58:c6:0f:e9:74:31:32:45:33:fc:67:95:90:
                    b1:9d:44:28:d8:18:c5:98:2e:f7:c1:b5:1c:42:28:
                    34:b7:87:c2:f8:86:08:19:b3:73:61:a1:81:19:e3:
                    cd:32:a3:2d:be:57:71:a9:bb:c9:60:77:27:2f:12:
                    6f:2e:5a:9e:39:9e:2e:e9:67:74:20:f2:06:d0:6f:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0E:04:A1:9E:07:41:66:3D:5E:1F:B1:F1:51:72:EE:1E:6A:69:F2
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3232203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:13:94:14:c3:ca:fb:e4:32:6e:a2:0b:af:f3:08:de:92:df:
         e9:b3:4a:c9:73:be:f7:69:9a:12:01:0d:8a:c8:be:6a:5f:fe:
         a0:9a:c3:df:47:6c:19:29:17:56:13:a9:49:a1:07:cf:04:c6:
         bd:fc:b1:13:c4:db:71:81:46:8c:17:72:1c:42:0d:d5:af:38:
         1b:82:51:50:62:95:93:87:a4:d0:af:f5:18:87:ae:f9:6c:79:
         04:ac:8a:94:b8:4d:50:ab:9b:a7:0f:65:0f:31:ac:49:11:92:
         dc:87:23:0c:49:09:42:8f:19:58:1b:d0:6f:e0:de:ab:3f:3f:
         f3:96:81:09:36:8f:de:35:d2:ca:b7:6f:26:a2:13:02:cf:8c:
         ca:47:35:3c:8e:ba:a7:e4:61:90:bf:37:3a:bb:6c:03:e4:9f:
         11:46:1b:ca:b1:ac:cb:9b:10:18:47:fd:e1:4b:c4:13:f9:7b:
         2d:3f:9f:79:c5:09:81:45:ad:85:12:96:8c:db:05:c3:34:2a:
         bb:62:33:77:2b:e4:d9:b5:63:a3:1e:eb:3d:99:45:af:8f:a8:
         db:ea:d3:ed:06:eb:8b:c7:f1:96:c4:b5:56:95:10:d0:b2:b4:
         d5:0d:b3:3f:15:f4:bd:37:3e:ee:67:93:8e:e5:1b:5d:c8:ab:
         0e:f1:64:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQWyc6AT947enDY/zPUHjXvCf6aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBQ0JDNTJGQTY5OEUyNjFERjEwODJDMjQ1MEFCNkE0
MTBFNjc0MTAeFw0yNDEyMTYxOTUxNTZaFw0yNTEyMTUxOTU2NTZaMDMxMTAvBgNV
BAMTKDMwMEUwNEExOUUwNzQxNjYzRDVFMUZCMUYxNTE3MkVFMUU2QTY5RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2ABkiS7Ee7GD03yfEbTP1Xob
BclTkUTnWD5PUarRscIRXjBNyGCJFpVrsw+9a4N+bkMOZn2PAhqL0DOqZFAN5KHK
sSSb95hcOh5caCSi5wvaJi6vmvkxa++fNTzfccy2fg+Z9TZWISLxUyqEGwpFGEwz
+GLyDcHLcp9oPceMffiOfPzLcvsp8DB/fWToqtuE9PadrYOJRbX1+xPsuy2aSz8X
FT/BNDcqV+lOoisDcjo5haa9WMYP6XQxMkUz/GeVkLGdRCjYGMWYLvfBtRxCKDS3
h8L4hggZs3NhoYEZ480yoy2+V3Gpu8lgdycvEm8uWp45ni7pZ3Qg8gbQb5cpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMA4EoZ4HQWY9Xh+x8VFy7h5qafIwHwYDVR0j
BBgwFoAU3Ky8UvppjiYd8QgsJFCrakEOZ0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMC9EQ0FDQkM1MkZBNjk4RTI2MURGMTA4MkMyNDUwQUI2QTQxMEU2NzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDQUNCQzUyRkE2OThFMjYx
REYxMDgyQzI0NTBBQjZBNDEwRTY3NDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAv
MzEzODM5MmUzODM0MmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvVQ4MA0GCSqGSIb3DQEBCwUAA4IBAQBzE5QUw8r7
5DJuoguv8wjekt/ps0rJc773aZoSAQ2KyL5qX/6gmsPfR2wZKRdWE6lJoQfPBMa9
/LETxNtxgUaMF3IcQg3VrzgbglFQYpWTh6TQr/UYh675bHkErIqUuE1Qq5unD2UP
MaxJEZLchyMMSQlCjxlYG9Bv4N6rPz/zloEJNo/eNdLKt28mohMCz4zKRzU8jrqn
5GGQvzc6u2wD5J8RRhvKsazLmxAYR/3hS8QT+XstP595xQmBRa2FEpaM2wXDNCq7
YjN3K+TZtWOjHus9mUWvj6jb6tPtBuuLx/GWxLVWlRDQsrTVDbM/FfS9Nz7uZ5OO
5RtdyKsO8WQJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:57 2025 by rpki-client