Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33382e302f32332d3233203d3e203238323233.roa
File:                     3138392e3132362e33382e302f32332d3233203d3e203238323233.roa (raw, json)
Hash identifier:          5JLbipWdc6YLoE0H/tQkc702/mIGgD5g2sxJq2gujVI=
Subject key identifier:   E2:B0:69:0F:BF:85:EA:48:32:A6:6A:EC:85:B9:E7:6D:9F:BC:A6:1C
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       1F185497FBCC41B6FCF9E010A7CEC9DA06D43203
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33382e302f32332d3233203d3e203238323233.roa
Signing time:             Mon 06 Feb 2023 18:14:25 +0000
ROA not before:           Mon 06 Feb 2023 18:09:25 +0000
ROA not after:            Mon 05 Feb 2024 18:14:25 +0000
asID:                     28223
IP address blocks:        189.126.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:18:54:97:fb:cc:41:b6:fc:f9:e0:10:a7:ce:c9:da:06:d4:32:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Feb  6 18:09:25 2023 GMT
            Not After : Feb  5 18:14:25 2024 GMT
        Subject: CN=E2B0690FBF85EA4832A66AEC85B9E76D9FBCA61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:32:46:88:4f:e9:ad:66:24:4b:c6:6e:40:
                    0a:6e:08:fb:3e:d5:30:e8:59:0d:42:b2:85:0b:23:
                    93:4e:68:8b:92:78:50:54:b1:af:d9:d9:f9:ec:85:
                    b3:ca:11:25:43:88:9f:75:c4:0d:a7:5b:33:b1:f6:
                    56:92:88:de:86:93:95:c2:f8:77:66:0b:0e:cf:8b:
                    88:d2:a8:77:f5:bb:cf:b2:d9:a5:aa:9b:60:10:56:
                    8f:78:c1:52:53:73:44:6c:d0:b5:eb:c1:d8:b5:68:
                    33:7f:bc:01:48:2d:27:93:5b:c2:00:5d:07:97:89:
                    92:be:9b:80:9d:17:af:18:d3:a4:7e:14:88:2a:db:
                    51:04:06:37:0a:e2:7a:0a:d6:c2:aa:6a:59:a1:6d:
                    f9:e7:b1:7d:3d:60:eb:aa:c9:12:c3:01:1b:b0:7d:
                    e2:53:d7:76:d9:f5:2b:ff:a5:82:5c:e3:ab:fc:e1:
                    db:b2:51:f2:00:cc:b8:8d:a0:2e:c8:f4:d8:34:8d:
                    ea:df:b2:0c:99:5c:33:9b:52:16:e1:e4:34:a1:43:
                    34:0e:24:ce:6f:31:24:72:60:86:44:dc:e4:6a:91:
                    52:68:93:38:ee:c0:e8:5b:b6:2c:d6:fb:0a:b4:af:
                    67:f6:de:41:a2:d6:3a:0b:b1:c5:5b:8f:9f:c8:ea:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:69:0F:BF:85:EA:48:32:A6:6A:EC:85:B9:E7:6D:9F:BC:A6:1C
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33382e302f32332d3233203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:21:21:8c:38:18:be:36:9f:92:6e:d4:73:ff:21:85:5d:2c:
         a1:73:81:c4:98:c0:9f:fe:d0:19:62:07:ac:76:81:82:b3:94:
         b5:44:2c:cb:0f:77:dc:6b:bf:3e:31:73:7a:e0:ee:31:16:90:
         a5:32:25:ed:01:2f:06:3d:58:e2:6a:fc:c9:82:25:76:6f:e7:
         42:2e:b4:54:b0:5f:3a:d1:9b:05:1d:86:4c:80:79:e8:fe:d5:
         05:cb:97:31:17:d2:1e:51:7e:56:ec:bc:fa:e9:53:39:bf:53:
         6d:d3:5d:ca:0c:c4:34:0f:ad:46:54:ca:8e:f0:8d:fd:6a:87:
         0f:c5:30:62:aa:d3:c5:64:7f:15:b3:8d:c6:1b:c8:b8:d4:bb:
         8d:a8:c0:29:08:41:f1:a4:3d:5b:72:c5:51:35:c5:92:bf:aa:
         bc:c9:e4:34:62:8c:ea:91:bf:10:76:f8:57:a6:13:dd:89:80:
         a8:47:aa:63:c9:7f:17:99:b1:4d:24:45:26:5f:f1:88:ce:88:
         8b:75:83:d3:f0:60:d2:e7:6c:79:c6:94:25:fc:35:05:7b:2f:
         35:4c:95:f2:57:95:c0:40:52:76:01:29:6f:ba:b0:62:31:9d:
         2c:c7:20:09:22:4a:69:15:7c:66:59:fa:82:8a:b7:b2:a5:5e:
         30:e5:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org