Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          +CZ2D3klgjACEgGDFBeYeNz7z18vQEFbmYxZNwdP2XA=
Subject key identifier:   45:50:45:45:C3:26:07:54:A3:E1:FA:E0:4D:51:31:99:B2:9E:8E:2E
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       7DBC8040F74050B467A7FE51AF4566411906D2F6
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:40 +0000
ROA not before:           Fri 17 Nov 2023 15:47:40 +0000
ROA not after:            Fri 15 Nov 2024 15:52:40 +0000
asID:                     61910
IP address blocks:        201.87.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bc:80:40:f7:40:50:b4:67:a7:fe:51:af:45:66:41:19:06:d2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:40 2023 GMT
            Not After : Nov 15 15:52:40 2024 GMT
        Subject: CN=45504545C3260754A3E1FAE04D513199B29E8E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:4a:63:8e:74:5d:12:90:ab:07:54:e2:cc:
                    25:28:65:5c:4e:35:16:4f:b4:73:13:0d:dd:c3:fb:
                    dd:86:3c:c9:34:3c:da:18:77:d4:98:9c:d6:a2:db:
                    e1:8b:f0:6a:cb:c9:44:e7:a5:cb:a9:0e:41:14:9d:
                    d6:db:8c:74:b8:2f:33:59:69:1f:df:7b:a3:40:d2:
                    aa:4b:7c:10:b5:a8:dc:00:a6:6e:c4:96:e9:9d:ba:
                    29:a7:f1:c9:8a:ef:a9:f7:c8:14:bb:4a:c5:b6:e5:
                    d5:6e:76:8d:38:0f:17:38:af:5c:0f:37:04:2a:fd:
                    e6:33:82:fb:ee:26:b4:c1:7b:2a:cf:b9:d7:1b:f4:
                    85:d6:85:45:fa:4c:7d:00:7d:54:25:ba:a7:ae:1b:
                    4f:10:5e:2d:67:c0:bc:47:c1:41:ff:a7:f6:d1:fb:
                    0e:68:e0:01:09:3d:10:7e:89:43:6f:ca:30:35:db:
                    61:dc:71:c6:f0:c1:54:70:81:1a:b5:8b:52:ae:7d:
                    ea:19:2f:95:03:10:4b:5e:58:e4:58:45:49:f1:88:
                    2f:2e:6f:b7:85:51:4f:c2:cc:1b:48:ea:f5:f9:05:
                    2d:fc:a5:3c:41:e4:cf:e0:07:24:4d:c7:7b:68:64:
                    49:be:53:a3:9a:44:f4:e2:07:5d:a0:ad:aa:73:ab:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:45:45:C3:26:07:54:A3:E1:FA:E0:4D:51:31:99:B2:9E:8E:2E
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:a2:5d:7a:06:71:51:ad:b5:56:a2:c6:53:ec:ca:ee:9d:
         6b:bf:cd:7d:89:ed:92:33:ba:bb:2c:d3:b5:36:e1:e0:d7:c2:
         5b:f5:31:72:ce:01:e2:58:3e:25:69:4c:c1:1f:01:e9:e5:6c:
         31:ba:cf:47:6d:7e:60:c1:c8:57:29:f1:9d:b3:2f:26:19:0a:
         d1:3e:83:38:6e:40:60:3e:e5:77:3a:f9:2f:ef:44:63:fc:97:
         39:22:d0:15:63:1d:04:86:09:42:fb:f7:81:22:22:ac:4d:3d:
         5c:ae:1a:05:9b:72:ec:16:13:b0:bb:56:cc:64:99:90:61:58:
         8a:0d:44:86:e2:ee:0f:07:aa:66:de:3a:e4:8a:03:82:63:02:
         8b:08:88:65:90:21:ea:3a:ca:da:67:0c:4f:bb:a6:ac:c3:78:
         76:5b:72:d2:c0:b7:ea:30:6c:6b:1a:c7:76:5a:4d:3c:6c:e9:
         5d:4f:23:b1:3e:40:55:c6:20:ca:fa:3e:4d:eb:00:28:6a:c9:
         23:92:99:04:ac:c8:c1:0c:50:f8:cb:49:1d:74:a3:3a:54:14:
         b7:9c:4c:0d:b2:08:1e:fe:01:4f:c3:aa:20:48:5e:41:16:54:
         65:f5:58:35:3a:81:4d:a6:b7:df:94:b1:23:4e:43:a1:b9:20:
         c1:02:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org