Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131372e302f32342d3234203d3e203631383539.roa
File:                     3230312e3134392e3131372e302f32342d3234203d3e203631383539.roa (raw, json)
Hash identifier:          fdRR7Uam3krJyZnUHkKFCTFXb3b2RfaFDeE5r1rrpdQ=
Subject key identifier:   55:FF:B4:6E:19:16:87:30:BD:00:37:27:C4:4F:7F:6D:D2:49:50:71
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       54135339C440008B0D40235B69B11FB44F030E0A
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131372e302f32342d3234203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:42:32 +0000
ROA not before:           Wed 07 Jun 2023 13:37:32 +0000
ROA not after:            Wed 05 Jun 2024 13:42:32 +0000
asID:                     61859
IP address blocks:        201.149.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:13:53:39:c4:40:00:8b:0d:40:23:5b:69:b1:1f:b4:4f:03:0e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:37:32 2023 GMT
            Not After : Jun  5 13:42:32 2024 GMT
        Subject: CN=55FFB46E19168730BD003727C44F7F6DD2495071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:dd:f9:2b:25:f5:48:75:82:a2:02:3b:73:
                    c8:49:20:40:a4:be:25:57:9f:8a:6c:43:6b:b5:88:
                    73:38:77:85:cd:84:96:f6:58:b9:b1:73:bb:ac:75:
                    4f:11:bf:f9:e7:cc:98:9e:22:6b:39:f6:c5:17:ce:
                    38:bc:28:70:2f:cd:27:12:ea:a2:a5:26:e1:fd:fc:
                    35:40:a8:04:64:9e:71:28:14:e1:50:06:3a:ea:ba:
                    dd:14:fd:6a:57:91:71:6d:41:04:23:5d:27:84:fa:
                    08:68:10:e2:55:70:0b:91:7e:25:47:b8:14:41:bf:
                    d0:1b:36:f0:85:79:8c:85:07:cb:0c:00:0f:c4:06:
                    b1:ce:bc:ca:f3:b1:03:e5:c1:f7:59:53:83:2a:81:
                    58:3d:ba:b6:3c:ae:b6:50:0f:6c:19:4c:1e:57:85:
                    84:ce:b8:fe:e1:4b:ed:c7:99:b5:28:b3:19:cb:f6:
                    8d:8d:8f:f3:ad:38:d8:f8:0e:be:80:8f:a6:85:03:
                    58:b3:b9:13:89:2a:67:40:fd:56:ec:5f:7b:eb:db:
                    03:31:bf:fb:06:a3:06:ed:25:ee:03:c9:74:c1:9d:
                    6d:25:69:3e:70:e3:e0:ca:23:c0:75:0e:0f:46:28:
                    ce:66:f1:3d:a5:0a:e8:b8:e9:c2:37:8c:50:ee:36:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:B4:6E:19:16:87:30:BD:00:37:27:C4:4F:7F:6D:D2:49:50:71
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131372e302f32342d3234203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:6d:67:dd:99:cf:61:da:be:ab:c3:47:c6:59:ba:1f:e7:
         34:dd:3b:d6:47:02:70:bd:cf:3b:9c:6f:67:88:ec:f7:e2:ba:
         82:2d:8d:ad:25:af:9d:8a:4c:52:da:8e:da:fa:7e:c2:82:08:
         36:5f:6f:8b:96:26:7b:eb:2d:e6:3b:f2:4a:94:83:7b:6d:ae:
         fb:7e:3d:46:ab:0a:71:7f:80:2f:73:40:53:7d:8a:ee:40:d5:
         b5:f3:6e:20:11:2a:ca:2d:c4:a0:d8:c9:54:46:3f:89:22:14:
         8d:f1:66:1c:7d:fb:41:5f:12:63:47:00:07:93:be:34:53:69:
         16:c2:03:b6:01:64:78:f8:fb:de:4a:f4:c9:f4:d8:04:a4:a9:
         ad:78:a8:80:b9:e8:ee:fd:12:2d:ca:54:5e:84:27:84:6f:1d:
         ec:af:b7:61:29:27:6c:dc:75:10:ef:ae:e4:13:0b:49:78:3c:
         60:0d:2f:74:6a:24:e1:d9:85:a2:54:5e:a8:3d:b9:1a:eb:de:
         49:9f:91:c3:c1:d5:24:f1:6b:65:86:9d:4f:46:61:85:25:d6:
         80:04:8b:a5:17:14:37:75:5c:bc:2d:5a:85:1a:bc:35:ac:ae:
         6c:9d:b9:76:ef:0e:a5:a7:54:b4:01:1d:71:50:41:b2:fe:74:
         21:dc:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org