Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32342d3234203d3e203631383539.roa
File:                     3230312e3134392e3131362e302f32342d3234203d3e203631383539.roa (raw, json)
Hash identifier:          yrMMEer6tBK51UB3a1NIwGPjU7dRgIiDHurgC5/IGo8=
Subject key identifier:   5D:E9:48:F5:5C:59:46:5B:1A:50:9C:3E:B2:FE:48:EE:22:48:BE:D1
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       5F874F0456787946A2D74EC1EC29159843F85000
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32342d3234203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:42:19 +0000
ROA not before:           Wed 07 Jun 2023 13:37:19 +0000
ROA not after:            Wed 05 Jun 2024 13:42:19 +0000
asID:                     61859
IP address blocks:        201.149.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:87:4f:04:56:78:79:46:a2:d7:4e:c1:ec:29:15:98:43:f8:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:37:19 2023 GMT
            Not After : Jun  5 13:42:19 2024 GMT
        Subject: CN=5DE948F55C59465B1A509C3EB2FE48EE2248BED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:b4:38:c6:d1:bf:0e:e4:95:a6:dd:0e:99:
                    4e:13:af:0b:01:2b:eb:b4:67:39:67:13:e4:66:c6:
                    ec:fe:1e:f6:4a:b9:30:4a:3b:e1:ab:3e:1e:85:b6:
                    74:10:0e:e8:c4:23:4b:ce:28:fe:a3:92:ce:a9:ad:
                    36:0b:66:25:e1:6b:25:40:bf:a1:d7:33:2e:27:0b:
                    83:61:ea:5a:ed:dd:71:7c:94:14:da:23:41:82:6f:
                    59:9f:6b:f9:41:0b:e0:6f:e2:2c:be:eb:2d:8c:3b:
                    5e:1c:ab:ba:70:44:28:75:e3:e1:44:cf:92:6e:8b:
                    c5:53:76:18:e6:30:22:15:62:b8:b8:35:7b:89:db:
                    6b:dc:98:12:20:40:91:9f:bc:b8:4d:3e:6b:a0:60:
                    d7:7c:02:32:41:55:7c:3c:07:67:ec:4d:0c:ec:3e:
                    0c:46:94:bf:0c:3a:5f:11:65:a8:9e:31:a2:fa:76:
                    eb:50:56:ea:a2:3c:af:50:2d:63:fc:e3:68:7a:80:
                    9a:65:a1:84:6b:60:36:23:22:d0:0a:a9:e7:a0:cf:
                    b7:54:3c:4d:56:5f:0d:7d:c3:9b:dd:ed:31:97:07:
                    b5:c2:db:e9:72:98:7a:6b:77:c4:35:4b:5c:14:21:
                    da:5d:23:42:19:c9:9c:45:59:88:f6:0a:c2:ee:2d:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E9:48:F5:5C:59:46:5B:1A:50:9C:3E:B2:FE:48:EE:22:48:BE:D1
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32342d3234203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:c3:18:55:f7:dd:4f:f7:65:75:8b:28:dc:72:7d:c4:10:
         97:5f:5b:7d:ee:ce:f8:c8:80:8c:f6:f6:58:64:c8:52:ab:53:
         0b:93:2c:43:c9:43:90:9e:fe:c9:2a:ff:8f:b7:3a:6c:ad:b2:
         35:e0:cd:95:2e:ef:c2:25:16:93:5f:b6:26:94:35:dd:9d:e4:
         e0:63:8d:88:7b:45:c5:f0:02:9b:50:20:62:69:11:09:ff:7d:
         9a:27:07:42:df:86:3a:46:68:cb:06:d5:c7:69:9e:13:d7:d5:
         8d:ec:87:1d:0b:72:44:08:2c:5c:91:4f:0a:a5:d0:cc:1f:e5:
         df:fb:08:6d:25:3b:f6:66:12:c3:1d:88:bb:8e:e1:02:48:77:
         06:d1:1d:3f:55:97:57:3d:32:ad:36:6c:84:5a:91:17:33:8c:
         f4:be:a7:ef:31:c6:ae:9a:74:2d:48:ac:e1:f3:0c:47:cb:b0:
         17:8d:ab:af:9f:f1:5d:6e:e9:c4:74:14:e0:b0:41:03:e5:77:
         12:e3:69:f5:7c:0f:c1:0a:ae:93:44:ef:59:c1:02:4e:07:e6:
         05:8e:30:e8:02:b2:63:b7:61:1e:aa:e1:7b:b0:d4:da:e9:85:
         f0:9e:6f:ee:2a:a2:c5:f5:ec:9c:66:ad:a6:26:c6:08:61:90:
         2a:67:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org