Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34352e302f32342d3234203d3e203238323233.roa
File:                     3138392e3132362e34352e302f32342d3234203d3e203238323233.roa (raw, json)
Hash identifier:          X2LvtrDQB/+6M3N5q2+LhVxIwSYNYsEhZwiSyJA5CYo=
Subject key identifier:   42:B7:A0:BF:0E:C7:BE:C3:E7:C1:28:3E:F1:15:F1:B5:BA:9C:1A:3C
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       3B5D6A941FDECDF125995A740B590E28B8AFB9AA
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34352e302f32342d3234203d3e203238323233.roa
Signing time:             Wed 05 Oct 2022 19:39:12 +0000
ROA not before:           Wed 05 Oct 2022 19:34:12 +0000
ROA not after:            Wed 04 Oct 2023 19:39:12 +0000
asID:                     28223
IP address blocks:        189.126.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5d:6a:94:1f:de:cd:f1:25:99:5a:74:0b:59:0e:28:b8:af:b9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: Oct  5 19:34:12 2022 GMT
            Not After : Oct  4 19:39:12 2023 GMT
        Subject: CN=42B7A0BF0EC7BEC3E7C1283EF115F1B5BA9C1A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:9b:ff:4b:05:08:28:2e:9a:95:24:a6:73:
                    df:d5:32:0d:91:d7:32:4b:f3:69:38:c5:69:e1:64:
                    6f:2b:6b:0a:53:7a:08:b5:9d:f2:bb:0c:47:9f:c3:
                    c5:1a:ce:fc:57:6d:13:41:43:e2:29:93:f2:9f:aa:
                    83:ba:9c:49:85:3d:a1:0e:b8:c2:a6:79:23:a6:b0:
                    cb:3f:9b:19:e2:02:c0:c6:97:3b:7b:80:71:b7:6e:
                    39:71:b6:5d:e5:b1:ba:6a:5b:09:b4:16:77:71:17:
                    ba:ab:3c:0d:b2:4b:f2:fd:2c:f8:66:4a:b6:4c:f7:
                    05:d4:51:75:57:fb:73:8d:2c:23:0f:e4:c1:82:d5:
                    96:34:dc:24:36:6c:1a:70:9c:e2:dd:42:3e:ce:c5:
                    23:f2:f0:85:32:b9:f5:d2:9a:4a:b7:57:3b:bb:46:
                    43:ff:10:c1:8a:b2:79:58:93:75:f3:2d:94:64:83:
                    cb:71:3b:70:05:e0:cb:8d:a1:30:17:4d:ff:91:a0:
                    23:cc:e6:6c:02:bd:c1:43:94:46:37:22:3c:0a:17:
                    65:82:32:81:eb:37:0c:a7:ed:3d:bb:54:80:69:25:
                    a0:e6:6c:cf:0b:da:b4:43:53:5b:82:d7:6d:04:f2:
                    ec:1f:6e:67:d3:90:80:91:37:ad:da:c2:39:c1:50:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:A0:BF:0E:C7:BE:C3:E7:C1:28:3E:F1:15:F1:B5:BA:9C:1A:3C
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e34352e302f32342d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:2f:41:a0:20:04:09:14:bd:c1:12:ed:ce:a8:dc:99:6a:07:
         01:30:fb:95:23:a6:da:1d:73:27:8c:ab:b5:85:1d:2e:47:7e:
         83:c8:50:cb:a0:c8:b4:69:97:db:78:f8:71:66:eb:e4:3b:35:
         d8:5f:e7:74:13:aa:ad:bb:27:a2:cf:7f:d8:00:cc:af:f9:f9:
         e2:88:ca:08:19:ef:47:d2:bb:c0:19:e4:5d:75:78:82:d4:4a:
         79:c5:4a:f3:fc:2b:0c:6f:d6:76:84:d7:55:b3:7b:9f:5a:b9:
         76:02:99:66:04:ef:25:61:54:1b:5e:c4:62:c2:d1:da:dc:65:
         0f:ab:42:07:49:c9:d3:de:80:c0:16:32:46:b7:ae:2f:7b:72:
         9a:b8:7b:8b:0c:8b:36:57:a1:9d:c8:7f:5f:40:06:70:a7:0b:
         e0:a1:b0:e4:8e:78:fe:4a:c0:d9:8b:3d:15:a0:bf:14:6a:d3:
         4a:f7:7a:c0:3d:e0:e6:af:53:68:af:22:88:30:24:e4:07:d9:
         b3:07:95:25:54:21:45:45:65:a7:a6:66:b9:2d:52:ce:bb:b7:
         97:86:48:19:cd:f8:75:7b:97:24:ad:c7:fd:37:04:21:68:f3:
         83:92:d6:d8:59:19:81:fb:f7:eb:b5:79:49:00:7f:4d:80:38:
         bf:df:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org