Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32302d3230203d3e203238323233.roa
File:                     3138392e3132362e33322e302f32302d3230203d3e203238323233.roa (raw, json)
Hash identifier:          PcIXSjIxUXJySOeeWYqx7wy3OLNfe0VG6hTz6Up0xzk=
Subject key identifier:   D8:63:FB:73:4B:1F:BF:6A:25:8C:22:C4:F9:C0:06:71:FF:C2:33:BF
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       23DED8229C8616CB5B5BA818536250742E4243CB
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32302d3230203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:36:51 +0000
ROA not before:           Wed 05 Oct 2022 19:31:51 +0000
ROA not after:            Wed 04 Oct 2023 19:36:51 +0000
asID:                     28223
IP address blocks:        189.126.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:de:d8:22:9c:86:16:cb:5b:5b:a8:18:53:62:50:74:2e:42:43:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:31:51 2022 GMT
            Not After : Oct  4 19:36:51 2023 GMT
        Subject: CN=D863FB734B1FBF6A258C22C4F9C00671FFC233BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:1a:0f:dd:88:4f:8f:89:b9:14:fe:d6:66:
                    2b:5a:68:48:43:7e:e6:ae:9c:19:be:61:92:95:1e:
                    c0:52:a7:e9:4f:0f:65:91:a6:1f:cb:43:73:37:f9:
                    89:02:ee:0d:61:8e:1d:80:8f:dd:b5:87:b2:d8:8b:
                    cc:cc:22:82:17:14:12:fe:7e:bd:d8:03:35:3d:70:
                    3c:8b:51:f7:42:64:a8:00:94:03:25:f0:8d:20:9b:
                    2b:d3:53:22:8e:20:13:05:91:20:40:cc:3f:75:f7:
                    5e:55:75:03:10:29:57:d3:b3:0b:c1:65:69:46:bb:
                    57:0e:61:20:da:f2:f0:51:55:5a:db:31:42:b7:54:
                    a8:21:79:a0:3b:f6:5e:43:98:9d:24:fc:d1:d1:9e:
                    b9:e7:b3:d4:dd:48:62:37:aa:d1:d8:03:b3:a0:d3:
                    1c:c5:ec:65:b4:25:a7:1c:33:b0:c3:31:cb:f3:50:
                    6e:2c:ad:e8:32:6b:3a:6a:af:af:39:2b:64:66:53:
                    8c:36:1f:7b:1d:62:2c:f6:3f:1a:a6:62:09:cf:45:
                    92:16:04:17:85:c7:89:57:2c:ba:eb:50:ae:71:b1:
                    da:e2:a1:4c:bd:88:96:b7:f7:0e:2d:53:4c:aa:23:
                    30:e3:dd:aa:94:29:65:0f:ea:c0:b5:dd:de:b7:c9:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:FB:73:4B:1F:BF:6A:25:8C:22:C4:F9:C0:06:71:FF:C2:33:BF
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32302d3230203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:fc:e2:91:e8:12:f0:c6:22:fb:b5:f4:16:b8:4b:ef:47:
         5c:dd:3f:d4:4d:7a:b2:f4:5b:8c:27:b9:ed:56:b8:fb:32:0b:
         87:12:8e:43:02:20:73:a9:90:e5:12:14:1e:d8:00:59:4a:7b:
         2d:56:60:a5:b2:99:57:1a:29:e7:b5:56:16:9e:0f:25:29:06:
         84:78:50:32:c9:88:82:6b:e6:53:ba:65:45:91:40:79:c0:90:
         0b:11:02:39:8f:4f:90:a5:93:02:6f:cd:77:23:1d:5c:64:0f:
         30:86:35:fb:4d:a2:f2:c6:d7:bd:1f:e6:4a:01:10:d9:a0:5c:
         20:01:5f:aa:db:db:66:a7:fd:f6:14:79:ea:e5:6e:bb:d9:1c:
         1a:32:db:84:d1:4e:d7:8c:a2:7d:ca:6d:98:a2:b5:86:a9:82:
         12:66:31:5f:0f:93:c6:5a:84:a1:dd:4e:72:78:6e:92:2b:0f:
         b4:5f:bf:62:8d:31:84:95:a7:01:78:44:cc:e7:8f:d0:5b:b1:
         dd:4f:cd:4f:e2:61:f0:bd:04:73:f1:5d:59:c9:7b:55:eb:b3:
         7d:17:95:a1:35:dc:13:9e:7d:88:2b:bb:74:21:20:4b:49:98:
         ac:fe:22:20:ee:c4:7f:c7:a0:19:80:73:e1:f3:c2:80:3c:13:
         df:4c:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org