Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34302e302f32332d3233203d3e20323632363938.roa
File:                     3138372e3130322e34302e302f32332d3233203d3e20323632363938.roa (raw, json)
Hash identifier:          Mf3+zddwYGhjdQquVzKdgLptGcfa1pvsZEQHR8cB/aM=
Subject key identifier:   CE:D7:9A:FA:A1:A4:86:98:3A:26:1B:99:BD:41:75:CE:A9:CC:E8:2F
Certificate issuer:       /CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
Certificate serial:       41188CB52FB2CA6B8A2B85173910E720978A4330
Authority key identifier: FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34302e302f32332d3233203d3e20323632363938.roa
Signing time:             Mon 11 Apr 2022 11:54:07 +0000
ROA not before:           Mon 11 Apr 2022 11:49:07 +0000
ROA not after:            Mon 10 Apr 2023 11:54:07 +0000
asID:                     262698
IP address blocks:        187.102.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:8c:b5:2f:b2:ca:6b:8a:2b:85:17:39:10:e7:20:97:8a:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
        Validity
            Not Before: Apr 11 11:49:07 2022 GMT
            Not After : Apr 10 11:54:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:d9:71:18:de:27:03:09:f4:52:f8:44:99:
                    32:78:32:e2:af:36:ae:e7:07:25:41:63:40:94:5b:
                    9c:c2:45:fe:a3:16:75:87:f4:fc:15:56:39:98:fc:
                    d7:84:14:17:50:06:36:7e:bf:6f:de:ae:ee:35:36:
                    ea:33:dd:0d:66:6c:26:78:c2:4e:d5:e0:bf:aa:57:
                    76:7f:71:ab:b1:32:cc:3f:fd:c4:ab:c9:89:a4:a5:
                    87:a8:b1:9c:78:61:e2:ae:ee:bf:c5:bb:f1:bd:66:
                    3a:28:d1:08:fd:d3:a5:23:78:5e:b6:f4:f6:74:bc:
                    64:ca:bf:c6:27:2c:31:71:d0:a2:68:3a:b0:21:68:
                    4f:72:91:d8:67:dc:c6:16:ce:e1:43:9f:dc:cc:7d:
                    16:af:4f:4d:73:67:e8:68:d2:f7:61:d1:f4:cb:88:
                    e3:35:ce:a5:55:91:a7:19:c7:c7:7b:c2:95:09:fa:
                    5f:13:42:e0:61:17:d9:ea:6e:a7:05:33:79:d1:1c:
                    42:9c:68:ea:b7:b9:80:f5:b0:aa:9c:95:3a:b2:90:
                    6c:24:52:7a:5c:27:9b:1c:2c:c2:dd:a0:c5:0b:ee:
                    25:ed:95:fb:bb:e9:73:b6:13:35:fb:1d:c9:8e:ad:
                    b3:4d:a6:de:05:c1:54:65:1c:f9:89:55:e2:16:72:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:9A:FA:A1:A4:86:98:3A:26:1B:99:BD:41:75:CE:A9:CC:E8:2F
            X509v3 Authority Key Identifier:
                keyid:FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34302e302f32332d3233203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:a5:d5:f5:71:6f:e2:26:12:4a:16:92:f9:3b:8b:d3:0d:17:
         6b:b8:87:60:58:7b:18:16:a5:ea:54:5f:a0:d6:f7:a2:cd:eb:
         52:e0:41:97:57:6f:c9:a6:9e:e8:dd:da:27:00:97:3a:91:69:
         61:3f:c9:d3:9a:91:5d:55:f2:2d:29:fe:d5:2c:80:62:db:00:
         f1:f1:ce:e1:36:fe:80:e1:89:e4:d7:5d:d3:63:c2:63:7d:85:
         cd:f6:84:61:49:fa:15:c0:96:af:98:06:21:0e:6a:2a:e1:5e:
         4d:2a:9a:26:ef:a9:c5:3b:29:23:54:1e:45:d3:a9:c9:56:ae:
         c1:6a:94:ca:39:9e:4d:05:a9:4d:40:8e:c8:e4:53:24:12:1c:
         75:c2:53:41:11:53:ec:03:67:70:a0:29:e5:65:ca:e8:f9:9c:
         0d:c0:ff:30:52:87:37:8b:cd:ec:7c:24:ea:49:79:99:c9:68:
         bf:c7:06:24:97:6a:1f:e3:75:06:cd:27:c1:85:2f:76:3c:27:
         0e:7e:98:73:91:25:4f:b5:7e:37:4c:cb:ee:7a:9a:45:20:88:
         d5:86:86:8f:56:ed:9b:3f:39:27:79:8e:49:5b:83:e9:66:0d:
         55:83:d0:4b:d5:95:b3:c9:aa:b3:f1:6f:e4:a4:28:85:22:4f:
         15:a5:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org