Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32312d3231203d3e203238323233.roa
File:                     3138392e3132362e33322e302f32312d3231203d3e203238323233.roa (raw, json)
Hash identifier:          xVF8WiHJtMfseNzvVQH/0UXpyQFZZ2zdTGF1jIzpznI=
Subject key identifier:   12:0F:03:AE:49:F5:06:CB:C7:25:35:05:36:EA:AF:8C:D2:F5:AD:C8
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       200A0E46DA6450A54C0D903057BC3373E3AA52E8
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32312d3231203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:36:55 +0000
ROA not before:           Wed 05 Oct 2022 19:31:55 +0000
ROA not after:            Wed 04 Oct 2023 19:36:55 +0000
asID:                     28223
IP address blocks:        189.126.32.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0a:0e:46:da:64:50:a5:4c:0d:90:30:57:bc:33:73:e3:aa:52:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:31:55 2022 GMT
            Not After : Oct  4 19:36:55 2023 GMT
        Subject: CN=120F03AE49F506CBC725350536EAAF8CD2F5ADC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:c4:86:dd:35:29:1b:54:51:ab:24:6b:bc:
                    59:ac:5b:92:6d:d1:ab:15:98:0b:94:72:f1:de:d8:
                    16:d4:38:e4:b8:11:7d:4c:d4:1f:ce:09:49:88:8f:
                    82:38:d7:f8:b4:25:4c:ed:7c:7f:63:58:48:9e:93:
                    27:f4:21:e8:c4:7c:a5:44:de:06:64:2c:8b:10:3a:
                    f4:31:e8:c7:52:a9:be:23:8e:90:96:50:fe:d5:0e:
                    be:d7:90:1c:6f:2b:78:c8:f7:03:f1:53:a6:d9:cd:
                    dd:7c:56:75:54:5b:dd:c4:69:42:6d:e5:97:65:b3:
                    38:4c:29:0b:fb:1f:d1:a2:1a:17:f6:0e:c9:a6:3b:
                    62:aa:35:90:30:a7:a5:61:b4:00:56:90:42:bd:cb:
                    cb:f0:3a:ef:ee:a4:f5:3a:ae:82:1e:b4:b1:a7:03:
                    c6:5d:e5:76:65:53:71:ab:62:af:26:45:e6:f5:96:
                    8f:18:41:c8:d8:7d:12:ea:2e:7d:a0:41:92:42:ad:
                    d1:22:b7:79:21:37:e1:48:d5:de:05:ba:1c:f2:af:
                    ec:e1:48:7f:c8:23:59:e6:ae:01:92:60:95:2e:74:
                    83:8e:9a:82:ed:eb:73:ee:df:f3:c2:65:fc:f2:ad:
                    98:86:d3:cb:d8:d7:53:48:0e:21:7e:61:9e:e5:39:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:03:AE:49:F5:06:CB:C7:25:35:05:36:EA:AF:8C:D2:F5:AD:C8
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32312d3231203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:20:03:e4:dd:70:ff:82:f7:06:73:e8:7d:b4:cd:a2:e2:41:
         22:9a:7f:12:9d:22:40:ec:b5:83:bf:6d:8a:06:ee:54:17:d6:
         52:75:dd:d9:6f:89:af:a7:55:58:30:66:48:72:81:95:86:0b:
         12:c2:37:4f:15:8f:75:78:04:dc:4d:18:8e:89:8d:77:9b:7e:
         d9:59:d4:b7:46:71:3e:81:fe:9d:54:13:f8:32:e2:5b:f2:a5:
         9e:2e:d4:40:32:63:7f:7c:1e:d7:06:26:21:9f:da:1b:80:28:
         d2:60:8d:56:ff:8f:70:f5:8c:33:2b:11:0e:1a:70:01:81:50:
         21:61:34:1b:76:35:33:62:55:8d:de:d7:db:fa:ee:6f:74:bf:
         a9:dd:f6:50:1c:c4:c3:d1:6e:2b:e1:f9:ab:aa:df:87:47:63:
         2a:25:b5:2d:79:0b:16:85:b5:d7:01:3c:72:38:cb:1c:24:b9:
         95:ef:2d:9d:3a:64:17:5a:1f:84:1c:41:20:60:08:7b:db:62:
         83:e2:46:4d:db:d9:a3:81:2c:c0:20:ff:b5:73:1d:7a:07:85:
         f9:04:16:bf:5f:7f:6c:e6:3e:4e:f9:57:72:f5:69:d6:06:bb:
         db:e1:17:4e:90:42:8c:b3:ce:72:b2:79:3a:75:08:fd:c5:8d:
         b6:02:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:24 2025 by rpki-client