Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34302e302f32312d3231203d3e203238323233.roa
File:                     3138392e3132362e34302e302f32312d3231203d3e203238323233.roa (raw, json)
Hash identifier:          7uf93gBDRkk8vyKNSlv0Kj682Zp4+SI/Yc63+PfeHzU=
Subject key identifier:   7E:22:D6:24:76:E1:7F:70:55:85:66:6C:56:FD:EC:6D:AF:9A:96:B5
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       72971293E50964FCBDD26698508862AB0859AF0E
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34302e302f32312d3231203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:38:12 +0000
ROA not before:           Wed 05 Oct 2022 19:33:12 +0000
ROA not after:            Wed 04 Oct 2023 19:38:12 +0000
asID:                     28223
IP address blocks:        189.126.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:97:12:93:e5:09:64:fc:bd:d2:66:98:50:88:62:ab:08:59:af:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:33:12 2022 GMT
            Not After : Oct  4 19:38:12 2023 GMT
        Subject: CN=7E22D62476E17F705585666C56FDEC6DAF9A96B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:67:c8:a1:e5:21:64:c8:95:77:c9:af:6b:
                    40:23:18:27:02:d7:7f:f3:fb:75:fd:61:16:6e:19:
                    18:2e:23:83:db:14:41:d2:50:29:6f:34:a0:b7:40:
                    cb:da:34:c6:91:37:6f:65:ec:5f:0a:32:9b:ef:13:
                    bd:5f:62:a1:e3:c6:5e:7f:b8:5e:be:d7:d8:3e:0b:
                    a0:8e:a8:f4:81:23:d3:b7:7c:9f:13:de:ca:8a:de:
                    01:1b:38:7d:39:53:cd:f0:63:db:70:cf:30:04:a9:
                    08:61:fd:ec:f7:6a:30:a3:a3:59:81:63:24:50:dd:
                    fc:5b:bc:84:c9:06:bc:36:74:2c:09:50:00:e0:29:
                    49:94:b9:22:f4:c2:a3:9d:49:c9:89:7c:b6:19:a3:
                    fd:e2:06:7c:5a:4a:33:64:a4:04:fb:ba:e1:85:41:
                    c7:18:9d:89:92:04:f8:ad:9a:72:8f:04:be:05:60:
                    37:ce:55:a2:46:38:3b:52:6f:16:9e:7c:0f:83:95:
                    5a:0d:f2:ba:f2:58:f4:42:ee:99:48:43:a8:ba:9d:
                    c4:fa:20:19:e3:af:b9:24:d2:c2:1a:37:fa:17:ce:
                    67:13:7e:46:29:39:70:45:ca:e9:76:d7:1d:1e:f9:
                    8d:5b:e5:d5:5a:52:7e:3b:cc:fb:18:8d:c1:61:cf:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:22:D6:24:76:E1:7F:70:55:85:66:6C:56:FD:EC:6D:AF:9A:96:B5
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34302e302f32312d3231203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:ce:3d:eb:49:1f:18:47:a6:83:c6:5d:db:af:58:40:b9:
         51:7b:f5:6a:21:16:cc:0c:f5:26:a6:de:df:c1:36:9e:8c:0f:
         8d:db:8a:3e:5c:de:46:40:8a:26:06:f4:0f:d5:c0:8b:21:99:
         71:e3:e2:07:0d:32:d9:5c:2a:34:2f:b9:a4:8d:f4:68:08:e8:
         4b:dc:57:de:5c:c1:78:6c:e4:dc:c2:9c:97:d3:50:e3:cc:53:
         00:b1:ac:30:14:c8:63:d9:b3:a9:a5:ec:3e:9a:ef:a8:ec:99:
         4e:6a:d7:da:bb:0f:f6:73:8a:34:2e:ce:92:cf:0f:e0:f4:e1:
         e5:b7:a4:27:75:0d:d9:70:d6:45:df:b5:64:73:35:10:a6:cd:
         d3:1b:9e:98:6f:87:eb:21:cc:36:4c:7d:0c:67:7d:e2:6a:20:
         76:d9:f1:59:5b:62:bf:70:e9:7b:06:5c:c2:c3:ef:29:f6:6b:
         76:15:3f:8e:5d:f4:79:3d:d9:f5:cd:db:72:a9:08:7d:07:f5:
         bc:eb:4b:37:0d:e7:e7:2e:97:c7:23:28:fc:c0:47:ca:7d:f9:
         d5:81:54:c6:58:68:b3:ef:ba:5d:8e:44:68:1d:f3:17:b9:3f:
         6f:7d:b8:93:48:81:f5:6a:d4:9a:f8:a5:f9:ad:10:ed:31:f8:
         1f:cf:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org