Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34302e302f32342d3234203d3e203238323233.roa
File:                     3138392e3132362e34302e302f32342d3234203d3e203238323233.roa (raw, json)
Hash identifier:          F/dSrsca0W3lZwcnTuLfM1Ae5ah+MJKD/n8SqD1NTSI=
Subject key identifier:   77:A8:A5:B9:6C:5F:B5:6F:77:F8:01:1A:9F:F2:89:A6:19:32:1C:56
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       221BF03F011DD0907D7FE1D4C2C5F372075FB744
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34302e302f32342d3234203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:38:25 +0000
ROA not before:           Wed 05 Oct 2022 19:33:25 +0000
ROA not after:            Wed 04 Oct 2023 19:38:25 +0000
asID:                     28223
IP address blocks:        189.126.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1b:f0:3f:01:1d:d0:90:7d:7f:e1:d4:c2:c5:f3:72:07:5f:b7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:33:25 2022 GMT
            Not After : Oct  4 19:38:25 2023 GMT
        Subject: CN=77A8A5B96C5FB56F77F8011A9FF289A619321C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:82:72:ca:79:e4:93:3e:a9:66:23:7f:29:
                    d4:35:cb:a5:9c:5f:c9:6a:1f:6d:e2:5d:04:b3:f4:
                    93:45:12:bc:b8:fa:69:81:b5:9d:09:9b:d7:6d:27:
                    32:90:9c:e2:05:28:4a:66:cd:e1:d7:fe:18:62:4d:
                    2a:b5:48:6c:38:f8:59:4b:0a:61:97:9f:c0:3d:e3:
                    6b:b7:d0:14:26:ed:fe:13:77:cd:98:a5:0d:31:48:
                    9e:f5:0d:d0:d6:fd:d3:f1:e4:f5:42:93:e3:cd:62:
                    15:bd:67:64:e1:a0:33:c7:65:95:2a:5a:6f:d1:2e:
                    19:28:6f:d2:11:84:17:a5:3d:b4:e4:aa:d0:ed:b8:
                    fb:83:47:65:e6:9b:a9:55:85:46:85:53:83:4d:32:
                    2a:78:be:7e:88:48:4f:ad:32:9b:9f:f4:d5:5d:07:
                    15:b7:e8:49:79:d6:ad:d8:4c:f4:8d:12:ae:26:d9:
                    41:61:d5:3a:49:02:b6:c7:7e:f8:fb:bb:65:6f:27:
                    49:3a:29:6b:1b:e0:37:64:76:7b:c8:9b:39:66:64:
                    31:2a:82:af:4e:f5:7a:19:b9:13:fa:91:2d:50:9f:
                    61:56:ef:14:3a:8a:0b:47:4a:c7:49:86:6c:88:33:
                    1a:ea:9b:44:c0:5d:67:87:ae:73:b8:05:c5:e0:81:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:A5:B9:6C:5F:B5:6F:77:F8:01:1A:9F:F2:89:A6:19:32:1C:56
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34302e302f32342d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:13:30:3f:ef:7e:41:13:5e:73:26:1d:af:67:4c:11:63:f7:
         07:67:ad:09:e5:d9:91:4b:da:40:58:b2:1a:92:70:11:32:0e:
         24:5b:fc:fc:15:ff:84:30:40:80:23:fa:79:ce:ac:4c:c1:5d:
         ca:94:d6:b0:fa:0f:ad:94:f5:ea:7f:69:db:d7:84:b7:68:9e:
         36:59:d3:e6:89:86:ca:fd:db:5a:9a:04:7c:82:26:56:d9:11:
         f2:dd:3d:fd:1f:63:eb:17:2d:23:30:cf:e1:89:a8:53:b6:81:
         2b:11:d4:01:d2:8b:fb:68:96:c9:eb:7d:4f:9c:4d:fd:df:69:
         60:cc:9a:29:f6:f1:5c:ba:de:9f:1f:8f:b4:55:02:e6:b4:a2:
         32:59:f9:2b:78:95:fd:35:c5:3f:ce:4e:53:f0:19:d0:f8:f4:
         b4:0e:db:f1:4f:c2:d8:08:ff:81:d3:1a:99:55:63:d0:7d:67:
         a6:6c:8b:61:94:ca:ea:e4:9c:c5:8e:eb:66:2c:b0:cc:44:6d:
         16:2c:b8:41:5f:04:38:5b:1b:c3:4c:e9:c0:a1:bb:88:bc:b0:
         09:d5:29:6d:e3:f5:53:70:2a:20:71:b9:9c:ea:30:a5:fd:e0:
         58:d7:c5:41:d0:6e:04:c3:20:ef:b0:bb:e4:55:d3:c6:bb:00:
         0e:6a:ca:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIhvwPwEd0JB9f+HUwsXzcgdft0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2M0I4Q0I5M0YyQkE2RkU2NzlDNTQ2MzBCNTI4NUZE
Nzg3OENGMzAeFw0yMjEwMDUxOTMzMjVaFw0yMzEwMDQxOTM4MjVaMDMxMTAvBgNV
BAMTKDc3QThBNUI5NkM1RkI1NkY3N0Y4MDExQTlGRjI4OUE2MTkzMjFDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkIJyynnkkz6pZiN/KdQ1y6Wc
X8lqH23iXQSz9JNFEry4+mmBtZ0Jm9dtJzKQnOIFKEpmzeHX/hhiTSq1SGw4+FlL
CmGXn8A942u30BQm7f4Td82YpQ0xSJ71DdDW/dPx5PVCk+PNYhW9Z2ThoDPHZZUq
Wm/RLhkob9IRhBelPbTkqtDtuPuDR2Xmm6lVhUaFU4NNMip4vn6ISE+tMpuf9NVd
BxW36El51q3YTPSNEq4m2UFh1TpJArbHfvj7u2VvJ0k6KWsb4DdkdnvImzlmZDEq
gq9O9XoZuRP6kS1Qn2FW7xQ6igtHSsdJhmyIMxrqm0TAXWeHrnO4BcXggavjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUd6iluWxftW93+AEan/KJphkyHFYwHwYDVR0j
BBgwFoAUvmO4y5Pyum/mecVGMLUoX9eHjPMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhSaXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4
c0ovMC9CRTYzQjhDQjkzRjJCQTZGRTY3OUM1NDYzMEI1Mjg1RkQ3ODc4Q0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFNjNCOENCOTNGMkJBNkZF
Njc5QzU0NjMwQjUyODVGRDc4NzhDRjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIUmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzAv
MzEzODM5MmUzMTMyMzYyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvX4oMA0GCSqGSIb3DQEBCwUAA4IBAQDDEzA/735B
E15zJh2vZ0wRY/cHZ60J5dmRS9pAWLIaknARMg4kW/z8Ff+EMECAI/p5zqxMwV3K
lNaw+g+tlPXqf2nb14S3aJ42WdPmiYbK/dtamgR8giZW2RHy3T39H2PrFy0jMM/h
iahTtoErEdQB0ov7aJbJ631PnE3932lgzJop9vFcut6fH4+0VQLmtKIyWfkreJX9
NcU/zk5T8BnQ+PS0DtvxT8LYCP+B0xqZVWPQfWembIthlMrq5JzFjutmLLDMRG0W
LLhBXwQ4WxvDTOnAobuIvLAJ1Slt4/VTcCogcbmc6jCl/eBY18VB0G4EwyDvsLvk
VdPGuwAOasqe
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:56 2025 by rpki-client