Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/3138392e38342e3130302e302f32322d3332203d3e20323730383933.roa
File:                     3138392e38342e3130302e302f32322d3332203d3e20323730383933.roa (raw, json)
Hash identifier:          s7yBMvciQQZ1nSLN0pY8NsJjiGdrZcyrsWgfr4pTCMI=
Subject key identifier:   89:0D:27:E9:1F:16:E3:BC:2C:C7:F8:62:F6:C7:BB:A5:F3:59:B2:13
Certificate issuer:       /CN=C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4
Certificate serial:       645CAEFF0F1FA00A5F6EF5F83EB804041C029875
Authority key identifier: C0:BF:8A:62:3C:4C:DF:E1:EC:E5:96:14:E9:F6:A3:12:1A:23:B4:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/3138392e38342e3130302e302f32322d3332203d3e20323730383933.roa
Signing time:             Mon 08 Jan 2024 13:50:43 +0000
ROA not before:           Mon 08 Jan 2024 13:45:43 +0000
ROA not after:            Mon 06 Jan 2025 13:50:43 +0000
asID:                     270893
IP address blocks:        189.84.100.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5c:ae:ff:0f:1f:a0:0a:5f:6e:f5:f8:3e:b8:04:04:1c:02:98:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4
        Validity
            Not Before: Jan  8 13:45:43 2024 GMT
            Not After : Jan  6 13:50:43 2025 GMT
        Subject: CN=890D27E91F16E3BC2CC7F862F6C7BBA5F359B213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:98:2a:7b:a7:4f:6e:c8:fd:4a:bc:19:4a:
                    50:10:30:bc:cc:7f:38:b6:e1:5d:7b:8d:26:fa:13:
                    3a:36:ec:f3:52:f9:f0:1d:39:50:31:0f:cf:c3:53:
                    0d:98:be:de:1b:ac:6f:db:18:45:0d:f3:e0:23:c9:
                    ba:89:ff:32:85:ef:74:43:40:38:72:9d:a4:3e:85:
                    04:43:56:79:4d:dc:d5:a3:fb:7b:67:03:a6:54:af:
                    5f:63:e0:ea:06:b4:55:ae:b6:38:89:0d:6a:6d:69:
                    51:27:3c:8c:4b:54:51:71:f1:17:52:11:3d:36:96:
                    57:93:17:56:48:89:23:e7:15:ac:dc:6a:27:26:91:
                    12:4f:9e:41:cb:6f:91:ed:44:ea:4f:d5:2a:13:2a:
                    2d:54:14:cf:63:f6:9f:b3:77:a7:a0:13:59:e9:12:
                    01:6f:50:08:a7:b3:39:56:4e:62:74:00:f7:72:da:
                    46:67:96:db:bc:b8:6d:23:32:53:8f:94:7b:19:3b:
                    a6:5c:e6:3f:ad:26:21:65:f8:43:ea:c6:c3:5c:5e:
                    aa:95:86:18:16:58:40:7a:af:eb:80:38:d6:9b:3b:
                    04:65:c6:87:b0:d3:e0:0c:bc:d8:ba:79:93:4c:4e:
                    54:1c:21:b0:f8:87:09:c4:b6:d4:55:63:2b:a7:b4:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0D:27:E9:1F:16:E3:BC:2C:C7:F8:62:F6:C7:BB:A5:F3:59:B2:13
            X509v3 Authority Key Identifier:
                keyid:C0:BF:8A:62:3C:4C:DF:E1:EC:E5:96:14:E9:F6:A3:12:1A:23:B4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/3138392e38342e3130302e302f32322d3332203d3e20323730383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:83:52:96:2d:c6:d4:2b:26:84:f2:b5:fb:9a:17:38:28:8c:
         6d:5c:da:73:07:a5:cb:c5:4f:7d:b8:d1:c3:87:32:65:97:e7:
         e9:ac:f2:01:ad:e4:1f:c7:e0:f8:77:84:f7:56:b2:fc:f2:b4:
         2e:1e:42:5b:cb:86:9b:8b:75:a6:d2:2e:46:ec:35:fe:37:ce:
         2f:4d:24:0e:4d:7f:3f:be:5e:23:ba:c2:34:d4:d4:b3:4b:1a:
         8c:f5:3b:09:7a:2d:b0:2d:7c:e6:06:c7:06:06:50:44:71:37:
         44:24:bb:98:e4:84:e9:e1:96:80:a2:96:bf:f7:8f:17:cf:fa:
         b4:eb:ea:84:59:a2:93:a0:5c:63:2d:fa:4e:af:42:b3:52:a9:
         9b:fe:65:7a:3f:d7:9c:a4:1b:8b:f1:a0:9c:cd:ba:3a:be:5c:
         16:dd:3f:3b:cd:61:f2:88:17:81:0c:b4:1a:75:00:a7:5b:77:
         ea:91:e1:ba:cb:6b:7d:0a:e6:e7:af:9e:a9:42:60:b3:12:e7:
         0c:61:ce:3b:f3:3e:f0:0f:04:cd:da:fd:7b:a6:a2:48:4e:86:
         e2:5b:82:d7:14:97:51:c6:15:97:d4:3f:f6:2b:de:f5:a5:8f:
         6a:a4:7d:c0:c5:3b:eb:fc:50:2e:c6:b0:66:b7:9f:c6:85:00:
         2c:1c:0b:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZFyu/w8foApfbvX4PrgEBBwCmHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBCRjhBNjIzQzRDREZFMUVDRTU5NjE0RTlGNkEzMTIx
QTIzQjRCNDAeFw0yNDAxMDgxMzQ1NDNaFw0yNTAxMDYxMzUwNDNaMDMxMTAvBgNV
BAMTKDg5MEQyN0U5MUYxNkUzQkMyQ0M3Rjg2MkY2QzdCQkE1RjM1OUIyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bZgqe6dPbsj9SrwZSlAQMLzM
fzi24V17jSb6Ezo27PNS+fAdOVAxD8/DUw2Yvt4brG/bGEUN8+AjybqJ/zKF73RD
QDhynaQ+hQRDVnlN3NWj+3tnA6ZUr19j4OoGtFWutjiJDWptaVEnPIxLVFFx8RdS
ET02lleTF1ZIiSPnFazcaicmkRJPnkHLb5HtROpP1SoTKi1UFM9j9p+zd6egE1np
EgFvUAinszlWTmJ0APdy2kZnltu8uG0jMlOPlHsZO6Zc5j+tJiFl+EPqxsNcXqqV
hhgWWEB6r+uAONabOwRlxoew0+AMvNi6eZNMTlQcIbD4hwnEttRVYyuntFqRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiQ0n6R8W47wsx/hi9se7pfNZshMwHwYDVR0j
BBgwFoAUwL+KYjxM3+Hs5ZYU6fajEhojtLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBEZVVTek1xZWNnR1NHd0R1Rll6anR3Wmg3Q1JSU1pYcFczR3FNS0Jx
REsvMC9DMEJGOEE2MjNDNENERkUxRUNFNTk2MTRFOUY2QTMxMjFBMjNCNEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwQkY4QTYyM0M0Q0RGRTFF
Q0U1OTYxNEU5RjZBMzEyMUEyM0I0QjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwRGVVU3pNcWVjZ0dTR3dEdUZZemp0d1poN0NSUlNaWHBXM0dxTUtCcURLLzAv
MzEzODM5MmUzODM0MmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzODM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9VGQwDQYJKoZIhvcNAQELBQADggEBAKWDUpYt
xtQrJoTytfuaFzgojG1c2nMHpcvFT3240cOHMmWX5+ms8gGt5B/H4Ph3hPdWsvzy
tC4eQlvLhpuLdabSLkbsNf43zi9NJA5Nfz++XiO6wjTU1LNLGoz1Owl6LbAtfOYG
xwYGUERxN0Qku5jkhOnhloCilr/3jxfP+rTr6oRZopOgXGMt+k6vQrNSqZv+ZXo/
15ykG4vxoJzNujq+XBbdPzvNYfKIF4EMtBp1AKdbd+qR4brLa30K5uevnqlCYLMS
5wxhzjvzPvAPBM3a/XumokhOhuJbgtcUl1HGFZfUP/Yr3vWlj2qkfcDFO+v8UC7G
sGa3n8aFACwcCwA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:47:05 2025 by rpki-client