Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33342e302f32342d3234203d3e203238323233.roa
File:                     3138392e3132362e33342e302f32342d3234203d3e203238323233.roa (raw, json)
Hash identifier:          yOYgncz62b7oXdV4B3OgQ+ByKkMxm+r+K9wwRDrSzHc=
Subject key identifier:   9A:6F:E5:C3:F7:B0:07:20:E8:CF:41:2E:5C:F4:E5:86:8D:3D:31:A9
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       6CABB303F59BCFCA797F4A22E512EA978AC0AD09
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33342e302f32342d3234203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:37:16 +0000
ROA not before:           Wed 05 Oct 2022 19:32:16 +0000
ROA not after:            Wed 04 Oct 2023 19:37:16 +0000
asID:                     28223
IP address blocks:        189.126.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ab:b3:03:f5:9b:cf:ca:79:7f:4a:22:e5:12:ea:97:8a:c0:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:32:16 2022 GMT
            Not After : Oct  4 19:37:16 2023 GMT
        Subject: CN=9A6FE5C3F7B00720E8CF412E5CF4E5868D3D31A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:79:31:f3:af:9d:04:d1:c7:0b:89:9f:9d:
                    fb:52:8c:13:98:9c:97:5d:e4:bd:8f:7d:0d:f9:a0:
                    31:22:7e:ad:50:26:a0:c0:23:42:db:73:91:fd:c3:
                    8b:81:b5:e8:f1:48:51:4b:71:c9:87:39:84:da:fa:
                    87:1a:9f:64:cd:3a:c8:74:ce:9f:cd:a7:bf:ba:1c:
                    73:9e:b9:e0:85:9f:c0:13:53:53:63:1c:ef:c5:a3:
                    d9:9a:45:7d:e6:fd:61:67:4c:92:e2:91:1f:a8:d4:
                    f2:e0:f9:5c:56:ff:ee:f4:1a:d7:0d:d6:60:54:3e:
                    77:46:c9:04:e1:ff:16:ab:19:0d:7b:42:d9:ca:1b:
                    2e:05:0b:29:4f:22:e7:7e:3f:98:f6:43:29:e9:e7:
                    2f:d3:83:62:92:7e:5d:7e:4c:1d:a2:9e:eb:a3:70:
                    f2:f1:a9:66:b1:36:a0:87:97:d6:72:57:7d:a1:66:
                    0c:ce:0c:b0:19:88:a0:f4:48:f8:b0:67:70:1e:92:
                    b1:21:2a:45:e7:e0:e9:5c:fd:10:c6:ac:10:de:a8:
                    6d:af:94:fc:09:81:fa:d0:17:d4:b3:17:92:bf:20:
                    5b:59:b0:65:41:bc:13:bd:d7:d8:5c:3c:3a:d8:92:
                    2d:58:a9:9a:f0:3d:0c:63:e1:a4:3d:4f:c7:03:a7:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6F:E5:C3:F7:B0:07:20:E8:CF:41:2E:5C:F4:E5:86:8D:3D:31:A9
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33342e302f32342d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:11:37:61:f7:94:3e:3a:54:45:a6:a5:ac:08:cc:2f:6e:f8:
         94:da:33:5f:98:9b:32:a0:fe:e7:80:af:2e:aa:96:d1:80:68:
         7f:a8:53:a9:17:11:49:e8:fb:4f:f0:02:ed:01:e2:89:20:97:
         d0:64:0a:35:03:db:68:94:5f:94:35:8c:fa:d7:a9:63:c2:07:
         cf:a1:ca:67:1c:83:21:b4:51:fd:15:61:e4:f8:33:24:8d:a9:
         fc:59:20:8b:85:61:28:7c:da:ee:32:c9:02:6b:1c:b5:96:ae:
         df:be:e9:b6:8d:71:f4:0c:69:a9:04:83:92:99:31:a9:b8:e6:
         d2:3d:d7:0a:17:e5:08:ce:6f:82:a6:26:a5:cc:eb:0c:ba:36:
         71:79:f2:81:bd:0e:df:b0:5f:23:1c:e5:3e:03:8b:5e:ff:ff:
         45:8f:56:b5:70:95:c6:cc:6f:af:f7:4e:fa:0c:4b:51:fe:8b:
         dc:d5:03:7c:e8:2a:f1:cf:6f:ee:76:f1:10:a8:6c:f9:2d:b0:
         c6:62:7e:b0:2e:57:e9:05:10:9f:b5:e6:8f:9d:d8:cf:a4:f3:
         98:f5:80:1a:9e:81:5c:4c:77:d7:f7:c6:2a:bc:b8:1e:91:c4:
         52:df:d4:20:e0:45:37:51:f1:c8:d3:04:6a:4e:53:b6:6a:ff:
         fc:ee:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org