Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e33382e302f32332d3233203d3e20323632363938.roa
File:                     3138372e3130322e33382e302f32332d3233203d3e20323632363938.roa (raw, json)
Hash identifier:          k5ET7h15zFz/68pOZPm1dpHgSW+eNPJuzYGt6AwcBJg=
Subject key identifier:   5C:BF:B8:FD:1A:93:0F:35:30:3F:82:B0:5C:38:56:5A:BE:9B:B0:05
Certificate issuer:       /CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
Certificate serial:       195B58AC23C92694BE19269290B8CD3AF11D4756
Authority key identifier: FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e33382e302f32332d3233203d3e20323632363938.roa
Signing time:             Wed 20 Apr 2022 20:19:18 +0000
ROA not before:           Wed 20 Apr 2022 20:14:18 +0000
ROA not after:            Wed 19 Apr 2023 20:19:18 +0000
asID:                     262698
IP address blocks:        187.102.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5b:58:ac:23:c9:26:94:be:19:26:92:90:b8:cd:3a:f1:1d:47:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
        Validity
            Not Before: Apr 20 20:14:18 2022 GMT
            Not After : Apr 19 20:19:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:e3:45:05:9c:ea:e6:27:a8:65:11:43:dd:
                    5d:31:b1:a5:c4:45:c0:2e:9d:ea:ea:6e:24:22:69:
                    32:24:a0:cb:e8:34:5f:42:d5:be:e2:99:0b:67:7c:
                    4f:c2:07:19:fa:2b:e5:4e:ca:6a:94:17:2c:3a:1c:
                    48:f4:bc:8d:3d:49:53:0f:78:23:ea:cd:08:45:80:
                    96:6d:86:56:8f:e5:3c:b6:9e:d1:2c:67:2e:b1:8c:
                    58:0f:33:22:a1:ae:00:33:aa:d5:6a:8a:f6:20:40:
                    91:a0:94:0f:9c:c8:b0:4a:20:3e:55:d0:ca:b3:33:
                    70:64:37:97:bf:3c:80:5b:51:d4:1f:26:fc:d1:a9:
                    5a:55:3e:20:9f:b5:6d:10:3a:25:c7:dd:80:38:ce:
                    94:d6:84:85:c4:da:d4:16:e2:a7:9d:96:ce:d7:b4:
                    cd:a8:43:6e:7f:bd:84:75:5c:cb:b4:e0:88:22:a7:
                    55:42:56:cc:a6:e1:b1:04:4c:3a:3e:d4:18:c4:0a:
                    85:6f:8b:c8:be:0d:2f:af:0d:70:c1:74:c5:f3:2c:
                    6d:28:17:60:c5:49:1c:fe:06:9d:76:57:8f:b0:af:
                    d2:d4:36:48:b4:ca:bf:46:ad:8d:13:44:5a:3f:4a:
                    2d:70:9e:0f:89:9a:6d:8a:6c:43:67:0a:5e:02:c2:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BF:B8:FD:1A:93:0F:35:30:3F:82:B0:5C:38:56:5A:BE:9B:B0:05
            X509v3 Authority Key Identifier:
                keyid:FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e33382e302f32332d3233203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:3b:6f:9e:90:71:9f:b8:63:a5:82:d7:93:e6:73:c7:9b:
         9b:b0:11:08:2e:89:e4:69:0c:a7:2e:1a:62:49:96:cb:86:0c:
         ef:ae:f2:21:75:0f:a4:39:37:7d:6f:14:a5:f6:90:e9:a3:56:
         76:e5:dc:6d:87:d0:72:57:5e:ad:47:92:51:e8:7b:31:cc:83:
         29:c2:03:8f:c3:b1:46:c9:14:2e:44:ab:b2:44:5e:84:d2:4b:
         b3:ee:b1:32:a6:9e:f5:aa:59:f2:c0:ac:b6:f1:18:73:02:d7:
         b2:f7:fc:ed:4e:8b:fd:bb:a1:90:dc:b5:71:49:fc:96:35:ca:
         d6:30:e0:17:bc:19:a2:fd:52:9f:1d:ee:6d:15:83:e2:cc:83:
         8e:d5:b4:a8:73:2d:e8:46:7c:c6:d0:c0:72:b5:5b:56:a7:4f:
         03:02:74:b6:a5:3b:c4:ad:d0:e1:ef:46:37:1a:96:6c:06:20:
         ac:83:e4:8c:44:7a:94:bd:a3:c1:58:3d:8d:d4:fa:c4:70:12:
         c5:7e:1c:e8:01:a3:6b:31:b9:48:1d:49:26:a9:2f:03:9b:84:
         5a:b7:71:33:cb:72:27:8a:63:bd:32:37:fb:05:12:17:81:51:
         a5:0e:0c:f1:9d:6e:4c:eb:69:ed:85:0e:8d:7c:71:b6:c6:0f:
         8b:e1:ab:c7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUGVtYrCPJJpS+GSaSkLjNOvEdR1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUxRUE5MzFFRTUzMUU4RTQyRTQ5NDNFQUQxODkyMjcz
MEYyQjMzNDAeFw0yMjA0MjAyMDE0MThaFw0yMzA0MTkyMDE5MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI4REUzNDUwNTlDRUFFNjI3
QTg2NTExNDNERDVEMzFCMUE1QzQ0NUMwMkU5REVBRUE2RTI0MjI2OTMyMjRBMENC
RTgzNDVGNDJENUJFRTI5OTBCNjc3QzRGQzIwNzE5RkEyQkU1NEVDQTZBOTQxNzJD
M0ExQzQ4RjRCQzhEM0Q0OTUzMEY3ODIzRUFDRDA4NDU4MDk2NkQ4NjU2OEZFNTND
QjY5RUQxMkM2NzJFQjE4QzU4MEYzMzIyQTFBRTAwMzNBQUQ1NkE4QUY2MjA0MDkx
QTA5NDBGOUNDOEIwNEEyMDNFNTVEMENBQjMzMzcwNjQzNzk3QkYzQzgwNUI1MUQ0
MUYyNkZDRDFBOTVBNTUzRTIwOUZCNTZEMTAzQTI1QzdERDgwMzhDRTk0RDY4NDg1
QzREQUQ0MTZFMkE3OUQ5NkNFRDdCNENEQTg0MzZFN0ZCRDg0NzU1Q0NCQjRFMDg4
MjJBNzU1NDI1NkNDQTZFMUIxMDQ0QzNBM0VENDE4QzQwQTg1NkY4QkM4QkUwRDJG
QUYwRDcwQzE3NEM1RjMyQzZEMjgxNzYwQzU0OTFDRkUwNjlENzY1NzhGQjBBRkQy
RDQzNjQ4QjRDQUJGNDZBRDhEMTM0NDVBM0Y0QTJENzA5RTBGODk5QTZEOEE2QzQz
NjcwQTVFMDJDMjhERTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwo3jRQWc6uYnqGURQ91dMbGlxEXALp3q6m4kImkyJKDL6DRfQtW+
4pkLZ3xPwgcZ+ivlTspqlBcsOhxI9LyNPUlTD3gj6s0IRYCWbYZWj+U8tp7RLGcu
sYxYDzMioa4AM6rVaor2IECRoJQPnMiwSiA+VdDKszNwZDeXvzyAW1HUHyb80ala
VT4gn7VtEDolx92AOM6U1oSFxNrUFuKnnZbO17TNqENuf72EdVzLtOCIIqdVQlbM
puGxBEw6PtQYxAqFb4vIvg0vrw1wwXTF8yxtKBdgxUkc/gaddlePsK/S1DZItMq/
Rq2NE0RaP0otcJ4PiZptimxDZwpeAsKN5wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFy/uP0akw81MD+CsFw4Vlq+m7AFMB8GA1UdIwQYMBaAFP4eqTHuUx6OQuSUPq0Y
kicw8rM0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zob240MmoyeW5tdktX
N0RDR1hxU1FOV2lYN1NHOENIZ1E4eWhMYnJlbldqLzAvRkUxRUE5MzFFRTUzMUU4
RTQyRTQ5NDNFQUQxODkyMjczMEYyQjMzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRTFFQTkzMUVFNTMxRThFNDJFNDk0M0VBRDE4OTIyNzMwRjJC
MzM0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GaG9uNDJqMnlubXZLVzdEQ0dY
cVNRTldpWDdTRzhDSGdROHloTGJyZW5Xai8wLzMxMzgzNzJlMzEzMDMyMmUzMzM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzYzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u2YmMA0GCSqGSIb3DQEBCwUAA4IBAQBdkTtvnpBxn7hjpYLXk+Zzx5ubsBEILonk
aQynLhpiSZbLhgzvrvIhdQ+kOTd9bxSl9pDpo1Z25dxth9ByV16tR5JR6HsxzIMp
wgOPw7FGyRQuRKuyRF6E0kuz7rEypp71qlnywKy28RhzAtey9/ztTov9u6GQ3LVx
SfyWNcrWMOAXvBmi/VKfHe5tFYPizIOO1bSocy3oRnzG0MBytVtWp08DAnS2pTvE
rdDh70Y3GpZsBiCsg+SMRHqUvaPBWD2N1PrEcBLFfhzoAaNrMblIHUkmqS8Dm4Ra
t3Ezy3InimO9Mjf7BRIXgVGlDgzxnW5M62nthQ6NfHG2xg+L4avH
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:26 2025 by rpki-client