Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233362e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          s5PLlWirlP9yIz0vcYBO6/R2IzY4A/5/Owhgcecn8c8=
Subject key identifier:   AE:85:C7:4F:C6:2C:E9:F4:6B:FE:C0:BB:96:BA:A6:9D:87:97:29:40
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       029E0FC21E7B92381B0AD87DCDA310F3A69E801E
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:41 +0000
ROA not before:           Fri 17 Nov 2023 15:47:41 +0000
ROA not after:            Fri 15 Nov 2024 15:52:41 +0000
asID:                     61910
IP address blocks:        201.87.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9e:0f:c2:1e:7b:92:38:1b:0a:d8:7d:cd:a3:10:f3:a6:9e:80:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:41 2023 GMT
            Not After : Nov 15 15:52:41 2024 GMT
        Subject: CN=AE85C74FC62CE9F46BFEC0BB96BAA69D87972940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:58:49:a5:52:88:14:11:20:71:72:a3:8a:
                    7a:65:2f:bd:90:14:71:f4:e7:db:3e:08:1c:1e:29:
                    1f:48:03:a8:c1:13:61:ad:37:b7:9f:45:a0:ab:fe:
                    ce:c2:99:c4:24:05:62:df:7a:11:b0:99:9a:db:3f:
                    53:12:a7:73:03:6a:e3:a0:76:c4:58:96:f7:67:cb:
                    d3:a4:86:7f:b7:4a:21:1e:f8:9c:c0:b5:17:c9:89:
                    54:b5:d5:9f:4d:e7:ae:0b:82:a2:c4:61:cc:1c:bf:
                    ce:c2:cb:f1:12:73:02:a7:e1:15:5e:95:ef:b7:2f:
                    87:aa:d8:42:0d:71:dc:64:a2:1e:49:e3:d3:18:ec:
                    7c:55:df:a1:8d:17:ee:a0:28:9e:01:6d:1c:a6:29:
                    84:19:0c:ae:81:32:97:b6:43:9b:a8:ba:fc:38:ac:
                    4c:e7:38:c8:80:c1:8e:e1:cc:05:06:06:a9:33:6a:
                    43:12:78:da:69:f8:94:fe:aa:b9:56:c5:c0:08:00:
                    94:30:bf:87:ca:1d:da:85:b5:fb:df:bf:c1:d4:32:
                    75:28:4b:14:fb:86:15:56:d0:a5:de:d0:6a:61:b3:
                    3e:00:88:09:f2:d8:a2:4e:99:42:6a:31:a8:78:75:
                    cb:92:c6:ee:e2:f7:33:20:e6:a5:5e:0e:c3:3b:66:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:85:C7:4F:C6:2C:E9:F4:6B:FE:C0:BB:96:BA:A6:9D:87:97:29:40
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:31:04:e3:c3:09:07:fb:10:2d:f5:4f:25:61:b0:98:f0:d0:
         26:1c:e4:99:b8:b7:42:13:99:59:79:5a:c4:13:91:ea:4a:a8:
         6f:17:d8:16:b8:bc:c3:1e:3c:0b:7f:b0:ec:06:4d:84:6d:a9:
         7c:fa:f2:3d:1a:6d:f9:23:d6:97:0c:19:5a:ed:97:8e:f8:34:
         b5:cf:05:4c:7b:78:f6:1e:00:48:4b:79:46:5c:90:16:91:d1:
         77:33:42:c4:b7:58:80:c0:34:ad:6e:79:33:7a:6e:38:67:65:
         05:3e:cd:7d:e3:49:bb:59:d6:88:88:e3:b0:d1:6e:2c:fc:d2:
         62:89:8d:c8:47:e8:84:50:03:39:d7:9d:ef:cd:d6:36:49:72:
         b5:93:1e:cf:a5:4c:18:39:fa:60:5c:8c:50:1e:c2:1b:11:bd:
         78:1e:cb:aa:df:68:4d:cf:07:7e:3e:67:b3:94:e0:1d:84:6e:
         2f:a6:e2:a6:f6:c4:4f:e9:48:0e:a5:b0:3c:fb:d3:5f:d0:c0:
         20:3a:d4:bd:69:58:9c:26:55:65:79:eb:5a:0e:41:36:dc:90:
         6a:e2:e4:ab:f0:0b:77:55:d5:84:2a:71:d0:d2:80:eb:9e:0b:
         32:15:1f:9f:d1:e3:69:3b:d9:0a:f7:2c:7b:ac:fd:8b:cb:fd:
         f8:88:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org