Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233332e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          PnBq37DAWyX9HzACCBZ9Drhg7D+azT7vP8qq2WQELL0=
Subject key identifier:   37:CB:4B:AF:24:08:70:83:9C:EC:74:A2:DB:8F:1A:34:73:59:ED:0B
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       7826C78809C0A36E501518AC64E9C381F4645D5E
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:40 +0000
ROA not before:           Fri 17 Nov 2023 15:47:40 +0000
ROA not after:            Fri 15 Nov 2024 15:52:40 +0000
asID:                     61910
IP address blocks:        201.87.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:26:c7:88:09:c0:a3:6e:50:15:18:ac:64:e9:c3:81:f4:64:5d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:40 2023 GMT
            Not After : Nov 15 15:52:40 2024 GMT
        Subject: CN=37CB4BAF240870839CEC74A2DB8F1A347359ED0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fd:bb:ee:06:05:30:ab:b2:cd:8a:6f:1a:c9:
                    35:46:b4:74:e5:7f:26:e6:ef:a9:5b:4a:87:08:25:
                    d4:6d:44:b9:bb:5d:eb:a6:f7:9c:fb:98:da:18:e5:
                    0d:1b:20:90:80:ce:63:00:b0:1a:0f:9f:a1:db:15:
                    53:af:56:dd:fd:0b:3c:f4:18:7e:d6:0a:7b:bf:c5:
                    32:51:bb:c5:db:6d:e8:9e:29:1b:48:e2:e5:de:14:
                    4a:6f:25:64:d0:c0:2e:ae:3f:67:b4:6e:d4:4a:df:
                    52:59:cd:b3:e2:e4:07:71:7d:87:c9:d2:45:37:0a:
                    ac:08:a1:33:e2:3a:55:38:77:bf:59:c4:cc:fc:8c:
                    eb:39:c0:45:cf:a2:4c:ee:ea:b7:b2:9f:be:fc:44:
                    2d:35:ac:c0:5e:18:36:34:5f:16:1c:c9:81:35:a3:
                    b5:42:03:8c:0c:43:e5:51:1e:c8:e8:94:ad:ee:8e:
                    88:a1:19:fb:1a:1b:3a:fb:08:11:eb:1e:f3:d8:0d:
                    c9:bf:26:25:16:44:93:59:18:0e:9b:39:30:45:83:
                    ff:53:d9:f1:9f:26:c3:1c:23:97:6d:e8:35:5d:89:
                    e0:c2:15:31:0a:92:24:24:a4:53:87:66:37:f9:47:
                    f6:9c:fb:de:48:2e:01:6b:be:d3:f6:76:04:1e:0b:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:4B:AF:24:08:70:83:9C:EC:74:A2:DB:8F:1A:34:73:59:ED:0B
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:17:84:3f:61:57:17:44:69:7a:a8:c7:e0:55:dc:04:ee:03:
         6d:63:b9:ac:54:43:58:a5:58:58:c6:fe:e2:01:53:59:0a:a0:
         5e:87:3f:4d:d2:61:b2:8b:9c:a0:74:94:b3:1d:45:5b:dc:5a:
         8d:1c:d5:be:29:21:23:10:8b:e2:a0:fa:f2:51:4b:0b:49:d7:
         41:d2:cf:d6:b6:e1:f1:1b:4a:a7:6a:bc:3b:b4:79:2a:1f:8c:
         03:2c:c8:21:cd:fb:d1:10:02:bf:f3:41:67:53:3f:4e:57:a4:
         0e:ed:99:8a:5e:b9:22:22:16:da:97:44:d5:ae:7d:44:6f:95:
         f5:66:ca:eb:71:5e:5f:59:c6:13:c8:c8:ea:29:27:fb:10:40:
         57:22:df:2f:66:35:46:7e:8a:1f:35:e2:cc:3f:95:32:c0:10:
         af:8d:c4:9e:fd:e9:d5:c6:30:3f:32:23:95:3d:b9:29:df:98:
         23:5c:c0:2f:c0:b5:1a:1d:73:31:e5:e6:d6:cd:20:7f:a9:6d:
         25:35:ba:46:fb:06:86:e1:e2:32:62:67:3b:ef:11:d6:65:89:
         4a:9d:64:0d:01:14:3f:ea:91:8a:e4:13:44:40:42:4f:37:48:
         8e:fd:8c:38:8b:a6:45:00:ec:48:f8:36:4c:12:0f:e2:a4:eb:
         26:44:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org