Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34322e302f32342d3234203d3e203238323233.roa
File:                     3138392e3132362e34322e302f32342d3234203d3e203238323233.roa (raw, json)
Hash identifier:          Y+nK12mm48oNfava6RItPc0+/LMp1gZIpgC4OA0T+go=
Subject key identifier:   AB:BE:CA:57:7C:10:CB:F1:87:7E:BE:28:D3:77:01:E3:E3:72:6C:8C
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       507C70321C3AAEBF2C7393FBD665A4F92F736415
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34322e302f32342d3234203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:38:47 +0000
ROA not before:           Wed 05 Oct 2022 19:33:47 +0000
ROA not after:            Wed 04 Oct 2023 19:38:47 +0000
asID:                     28223
IP address blocks:        189.126.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7c:70:32:1c:3a:ae:bf:2c:73:93:fb:d6:65:a4:f9:2f:73:64:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:33:47 2022 GMT
            Not After : Oct  4 19:38:47 2023 GMT
        Subject: CN=ABBECA577C10CBF1877EBE28D37701E3E3726C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:16:c6:d9:59:3d:9d:a0:39:04:25:cd:89:
                    3c:ce:7b:17:e0:50:4a:1d:cb:4b:4f:ab:75:0c:59:
                    16:7e:5f:d6:44:e1:a9:a4:5b:e9:55:dd:79:33:43:
                    14:2e:9c:72:50:95:10:61:c4:d9:04:a7:50:77:07:
                    22:91:2f:b7:5d:1f:47:f2:7b:a3:e4:23:01:0e:80:
                    46:0c:fa:05:d2:89:23:f7:3f:4b:9b:5c:b5:cc:4b:
                    63:ca:c2:c8:68:24:cd:ed:a1:16:1c:54:1b:06:97:
                    24:8f:e0:77:20:04:c3:6a:81:bd:2c:18:33:35:71:
                    cb:96:8c:b4:24:01:1b:9f:bd:5d:17:81:d3:36:5d:
                    eb:10:c0:6d:34:16:6c:e8:5d:8e:39:d8:48:94:d7:
                    70:7f:92:e1:c9:e8:80:15:73:d3:e8:7d:e6:df:db:
                    04:ab:47:cc:23:aa:01:c4:2d:34:54:2a:45:fe:44:
                    76:a4:0f:b6:36:70:50:10:fc:05:2d:24:ad:6d:c2:
                    90:39:cc:07:aa:ff:21:47:65:2e:15:18:f4:b5:05:
                    dc:49:eb:02:51:d1:3a:12:20:0b:38:b0:30:88:b9:
                    cb:2a:b7:44:a0:82:e9:38:ac:4b:15:03:4b:f8:a0:
                    31:32:d4:ee:4d:61:e6:07:ba:05:4d:63:0d:61:39:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:CA:57:7C:10:CB:F1:87:7E:BE:28:D3:77:01:E3:E3:72:6C:8C
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34322e302f32342d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:bc:c5:75:b7:9d:dd:ea:f6:2d:e3:33:69:c2:dc:f1:2a:f0:
         d2:84:11:b1:21:64:d6:91:0f:78:30:9b:ee:e3:57:5d:99:1f:
         4e:1e:67:3f:83:86:62:1c:0e:cb:1d:3f:3a:c5:a8:ff:59:19:
         05:1a:dc:56:a2:05:19:e3:89:5f:e4:ee:18:79:9e:b6:79:df:
         17:ee:be:d8:8c:6a:b7:5c:2a:95:82:e1:e6:86:3e:51:ac:6e:
         d5:2f:96:72:92:41:9d:1d:1d:1b:3d:bc:96:1e:f4:09:b2:91:
         9f:5b:ca:3e:c0:01:99:1c:ab:5d:9b:25:63:30:ad:ee:6c:c3:
         4f:4c:b0:df:24:47:ab:2c:f3:a6:f9:85:99:b0:7e:b0:a2:d4:
         97:de:35:47:e0:16:5d:6c:70:df:2a:9c:21:a9:ce:dc:03:d6:
         8c:98:3f:89:f1:6d:f9:e7:08:30:58:85:0d:06:fc:ef:42:d4:
         19:53:04:93:ce:05:78:4c:c8:aa:ca:52:b4:b7:ad:f6:f4:71:
         22:07:e2:52:04:ec:b0:f0:8b:fe:f0:ca:a6:85:19:0b:ac:74:
         d5:9e:64:01:e8:3e:e4:b8:06:78:cb:f5:42:b8:09:59:7d:3d:
         c1:9b:19:3b:d5:1d:d5:43:06:c2:04:fb:40:08:69:fe:e2:55:
         25:7b:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org