Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/3230312e34392e3134342e302f32312d3234203d3e203533313539.roa
File:                     3230312e34392e3134342e302f32312d3234203d3e203533313539.roa (raw, json)
Hash identifier:          HSounvVQLLxJjC5KLZejrdVlTvUwJf9WsDIQBGgDUTM=
Subject key identifier:   5A:1E:22:12:94:84:97:46:D3:5A:AC:5D:EB:7D:5B:45:76:84:5C:B3
Certificate issuer:       /CN=4BD815496A29ACD5D24059D50295D687057A0AAF
Certificate serial:       4DA2BBE600DEA678E4C8D0D16CA9F1DCF3F5DEA4
Authority key identifier: 4B:D8:15:49:6A:29:AC:D5:D2:40:59:D5:02:95:D6:87:05:7A:0A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD815496A29ACD5D24059D50295D687057A0AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/3230312e34392e3134342e302f32312d3234203d3e203533313539.roa
Signing time:             Tue 11 Jul 2023 15:41:57 +0000
ROA not before:           Tue 11 Jul 2023 15:36:57 +0000
ROA not after:            Tue 09 Jul 2024 15:41:57 +0000
asID:                     53159
IP address blocks:        201.49.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a2:bb:e6:00:de:a6:78:e4:c8:d0:d1:6c:a9:f1:dc:f3:f5:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD815496A29ACD5D24059D50295D687057A0AAF
        Validity
            Not Before: Jul 11 15:36:57 2023 GMT
            Not After : Jul  9 15:41:57 2024 GMT
        Subject: CN=5A1E221294849746D35AAC5DEB7D5B4576845CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:c1:3e:d2:ea:92:32:7f:1f:e4:45:6c:37:
                    f7:40:d0:74:91:39:73:18:22:04:4f:69:16:8f:4c:
                    ca:7f:1f:c1:82:33:0b:f8:46:b0:53:87:2f:44:99:
                    41:91:01:8d:40:58:8b:00:f7:fc:16:89:2a:81:09:
                    d9:7d:57:00:cd:d4:d6:26:29:f3:fa:1a:73:ed:e2:
                    bd:7b:78:c4:2d:13:ce:5d:a8:ba:19:82:dc:33:f2:
                    28:8e:77:f3:05:cd:81:5d:fe:ba:15:a4:35:ad:9b:
                    57:08:0f:5c:5e:bb:d9:2f:a2:4d:05:56:12:12:4a:
                    bc:01:a7:2b:dd:60:27:04:32:17:f0:92:74:48:78:
                    3b:64:33:03:de:f7:3d:bf:3b:a8:d3:36:23:86:19:
                    ba:15:53:88:c3:2b:5c:82:3b:bc:26:ee:5c:2f:e4:
                    9e:de:c4:ee:c7:27:5b:cc:6a:89:38:bd:11:6f:7d:
                    f7:d6:6c:b3:b6:29:94:11:7e:0f:f1:42:65:b4:de:
                    57:6d:af:fa:24:a2:33:de:e1:6f:d4:87:6c:47:03:
                    09:7b:12:00:8f:4f:52:24:fa:5b:91:fa:7a:22:9c:
                    3e:9b:78:44:e7:e1:da:ea:6f:cf:0f:09:d6:57:1a:
                    50:4f:5b:c6:f0:e2:f1:b4:c4:24:6e:f4:a9:3b:bf:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1E:22:12:94:84:97:46:D3:5A:AC:5D:EB:7D:5B:45:76:84:5C:B3
            X509v3 Authority Key Identifier:
                keyid:4B:D8:15:49:6A:29:AC:D5:D2:40:59:D5:02:95:D6:87:05:7A:0A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4BD815496A29ACD5D24059D50295D687057A0AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD815496A29ACD5D24059D50295D687057A0AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/3230312e34392e3134342e302f32312d3234203d3e203533313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:87:61:b3:c3:aa:06:34:54:4e:d4:ed:7e:e6:1c:05:09:
         bd:d2:ad:fe:6e:25:61:95:c7:30:6f:68:cb:3f:f2:e9:19:e6:
         7b:9f:6f:83:fb:24:27:4e:f1:47:93:be:34:c7:7c:8c:23:fd:
         86:d2:a9:1f:d0:50:23:ba:26:38:7b:63:f5:ec:90:87:22:30:
         ca:21:95:ac:ac:f0:cc:8b:52:d9:a1:42:e7:1a:73:9d:f4:49:
         af:8e:fb:9d:62:66:83:04:39:7a:4c:64:6a:f1:0f:c9:46:c9:
         0a:12:f1:2f:34:77:22:32:c1:6b:09:ba:91:a0:05:cf:c8:00:
         f6:57:17:2d:76:82:d1:fa:e7:a2:44:f4:ea:8d:7e:62:21:17:
         c2:81:0b:63:90:74:b6:57:95:42:d0:95:63:81:a6:24:c8:1f:
         6e:ac:8f:94:4d:d9:9d:d1:f9:48:2d:f4:d7:38:b3:08:1f:7f:
         31:68:32:82:b5:94:01:44:49:1f:fe:3e:ce:5b:7a:86:74:e4:
         b5:6c:80:00:e5:63:7e:7b:fc:aa:7e:8c:c2:37:c2:d3:5e:a8:
         83:50:ce:1c:26:38:5b:e9:c8:d3:b1:49:83:89:05:ad:89:09:
         4b:e5:bc:e6:f0:7b:e9:a2:96:b4:8b:73:9f:9b:7e:4a:09:44:
         6b:b1:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org