Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa
File:                     3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa (raw, json)
Hash identifier:          0r8WB4Bfr1vnO+s9I8n/qh545gZNN8HmTwb/bTct2zA=
Subject key identifier:   7A:B8:AC:6D:82:61:AE:DB:67:AA:10:84:78:59:54:37:F4:7E:4B:0C
Certificate issuer:       /CN=FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE
Certificate serial:       2368618F24B3F22414F24442C72CA6F460F8F7F4
Authority key identifier: FA:8E:3E:41:A8:FE:47:5A:E0:CC:DD:DA:A8:0F:D2:FC:7D:83:87:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa
Signing time:             Tue 10 Oct 2023 21:00:04 +0000
ROA not before:           Tue 10 Oct 2023 20:55:04 +0000
ROA not after:            Tue 08 Oct 2024 21:00:04 +0000
asID:                     270820
IP address blocks:        186.194.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:68:61:8f:24:b3:f2:24:14:f2:44:42:c7:2c:a6:f4:60:f8:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE
        Validity
            Not Before: Oct 10 20:55:04 2023 GMT
            Not After : Oct  8 21:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:5f:f5:05:96:11:75:c9:52:fa:48:b7:8b:
                    0a:1c:15:64:da:46:27:c4:1b:83:9c:cd:c2:da:75:
                    8d:b9:a1:e3:3b:c0:fb:f5:40:54:5b:40:ce:1a:d0:
                    3b:53:9c:32:b7:bc:98:57:28:1d:67:e4:30:1b:00:
                    06:3c:a3:13:9f:a3:81:76:73:dd:5c:7b:db:05:19:
                    72:c8:01:3c:1c:d9:e4:29:8a:02:f3:8a:c3:dc:49:
                    66:0b:01:e2:d4:62:53:fd:d4:6f:2f:a4:9e:c0:10:
                    7c:6a:5d:b3:0a:de:ba:22:76:39:0b:50:ff:9e:47:
                    e5:08:b8:df:1f:25:b2:1a:7e:89:b3:fe:dc:fd:10:
                    d0:bb:69:74:db:c3:6a:f0:80:53:ba:39:ae:cd:f1:
                    5c:8a:d3:75:da:c2:c1:54:84:57:c7:c1:c9:7b:da:
                    a0:26:7a:33:1a:cb:35:cb:ec:a2:ca:f5:72:8b:9d:
                    97:fc:8d:67:f5:da:26:8a:f7:f9:f7:83:d8:f8:f4:
                    3a:75:60:a1:12:ef:7c:b5:5e:60:2d:63:4a:ce:bd:
                    15:9f:b2:02:f4:41:2a:40:d9:24:f6:00:b8:5c:9a:
                    e0:51:3a:b3:2f:8b:c9:28:2f:c8:c1:9e:28:ab:67:
                    91:13:fc:ea:a9:f4:d2:4a:77:a9:c0:92:48:9f:60:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:AC:6D:82:61:AE:DB:67:AA:10:84:78:59:54:37:F4:7E:4B:0C
            X509v3 Authority Key Identifier:
                keyid:FA:8E:3E:41:A8:FE:47:5A:E0:CC:DD:DA:A8:0F:D2:FC:7D:83:87:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:85:a4:f0:a7:9c:d6:b0:76:9c:23:ad:8e:1d:73:02:1c:e1:
         c2:64:f3:11:da:d6:20:7e:84:8e:5e:92:b6:6a:da:59:98:d5:
         44:26:c8:51:b1:a8:bc:ae:59:c2:e5:f7:85:f5:af:86:21:4a:
         26:3f:4a:2a:8b:b9:f7:9b:de:91:c3:50:67:68:d0:48:d2:44:
         9d:ee:e6:2a:91:33:51:c7:84:42:da:8b:a6:4c:7b:5b:33:9a:
         ee:51:28:e1:b3:f3:3f:6b:8b:4c:f4:38:9e:32:ca:d0:32:77:
         ef:31:78:5a:de:36:b4:86:c5:e3:39:85:34:1a:47:60:59:e2:
         d4:44:b5:89:b8:67:4e:9a:5c:28:3d:ed:df:7d:0d:d0:4b:5e:
         58:3b:40:bc:c6:c7:4c:55:4c:fd:99:6e:9a:0b:ab:01:fa:24:
         2f:ac:c5:52:8b:e5:f9:57:5c:e9:d5:63:7f:ea:4a:01:12:6f:
         7a:c7:14:00:64:8d:9d:ee:98:98:d4:61:e4:2f:c7:3e:15:e1:
         d2:8e:9b:88:95:d5:34:51:f6:11:74:91:54:1d:03:13:79:5b:
         2b:33:7c:02:59:3d:0e:2c:53:b8:d2:48:f3:62:d1:6a:46:00:
         52:23:c1:d7:f2:78:ac:61:41:6c:9f:bd:17:80:e0:fa:67:97:
         09:0c:61:04
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUI2hhjySz8iQU8kRCxyym9GD49/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4RTNFNDFBOEZFNDc1QUUwQ0NERERBQTgwRkQyRkM3
RDgzODdBRTAeFw0yMzEwMTAyMDU1MDRaFw0yNDEwMDgyMTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMzRDVGRjUwNTk2MTE3NUM5
NTJGQTQ4Qjc4QjBBMUMxNTY0REE0NjI3QzQxQjgzOUNDREMyREE3NThEQjlBMUUz
M0JDMEZCRjU0MDU0NUI0MENFMUFEMDNCNTM5QzMyQjdCQzk4NTcyODFENjdFNDMw
MUIwMDA2M0NBMzEzOUZBMzgxNzY3M0RENUM3QkRCMDUxOTcyQzgwMTNDMUNEOUU0
Mjk4QTAyRjM4QUMzREM0OTY2MEIwMUUyRDQ2MjUzRkRENDZGMkZBNDlFQzAxMDdD
NkE1REIzMEFERUJBMjI3NjM5MEI1MEZGOUU0N0U1MDhCOERGMUYyNUIyMUE3RTg5
QjNGRURDRkQxMEQwQkI2OTc0REJDMzZBRjA4MDUzQkEzOUFFQ0RGMTVDOEFEMzc1
REFDMkMxNTQ4NDU3QzdDMUM5N0JEQUEwMjY3QTMzMUFDQjM1Q0JFQ0EyQ0FGNTcy
OEI5RDk3RkM4RDY3RjVEQTI2OEFGN0Y5Rjc4M0Q4RjhGNDNBNzU2MEExMTJFRjdD
QjU1RTYwMkQ2MzRBQ0VCRDE1OUZCMjAyRjQ0MTJBNDBEOTI0RjYwMEI4NUM5QUUw
NTEzQUIzMkY4QkM5MjgyRkM4QzE5RTI4QUI2NzkxMTNGQ0VBQTlGNEQyNEE3N0E5
QzA5MjQ4OUY2MDI4QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvD1f9QWWEXXJUvpIt4sKHBVk2kYnxBuDnM3C2nWNuaHjO8D79UBU
W0DOGtA7U5wyt7yYVygdZ+QwGwAGPKMTn6OBdnPdXHvbBRlyyAE8HNnkKYoC84rD
3ElmCwHi1GJT/dRvL6SewBB8al2zCt66InY5C1D/nkflCLjfHyWyGn6Js/7c/RDQ
u2l028Nq8IBTujmuzfFcitN12sLBVIRXx8HJe9qgJnozGss1y+yiyvVyi52X/I1n
9domivf594PY+PQ6dWChEu98tV5gLWNKzr0Vn7IC9EEqQNkk9gC4XJrgUTqzL4vJ
KC/IwZ4oq2eRE/zqqfTSSnepwJJIn2AoswIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHq4rG2CYa7bZ6oQhHhZVDf0fksMMB8GA1UdIwQYMBaAFPqOPkGo/kda4Mzd2qgP
0vx9g4euMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JneTl1cDlmcm12QVh2
ekZoVWV3akIyWnpoUXkydTVZTmJFeW9SVnF5eld3LzAvRkE4RTNFNDFBOEZFNDc1
QUUwQ0NERERBQTgwRkQyRkM3RDgzODdBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQThFM0U0MUE4RkU0NzVBRTBDQ0REREFBODBGRDJGQzdEODM4
N0FFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CZ3k5dXA5ZnJtdkFYdnpGaFVl
d2pCMlp6aFF5MnU1WU5iRXlvUlZxeXpXdy8wLzMxMzgzNjJlMzEzOTM0MmUzMTM2
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzODMyMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAK6wqgwDQYJKoZIhvcNAQELBQADggEBAAOFpPCnnNawdpwjrY4dcwIc4cJk8xHa
1iB+hI5ekrZq2lmY1UQmyFGxqLyuWcLl94X1r4YhSiY/SiqLufeb3pHDUGdo0EjS
RJ3u5iqRM1HHhELai6ZMe1szmu5RKOGz8z9ri0z0OJ4yytAyd+8xeFreNrSGxeM5
hTQaR2BZ4tREtYm4Z06aXCg97d99DdBLXlg7QLzGx0xVTP2ZbpoLqwH6JC+sxVKL
5flXXOnVY3/qSgESb3rHFABkjZ3umJjUYeQvxz4V4dKOm4iV1TRR9hF0kVQdAxN5
WyszfAJZPQ4sU7jSSPNi0WpGAFIjwdfyeKxhQWyfvReA4PpnlwkMYQQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org