Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131382e302f32342d3234203d3e203631383539.roa
File:                     3230312e3134392e3131382e302f32342d3234203d3e203631383539.roa (raw, json)
Hash identifier:          v3+u6QS67MGljtdv1RhbabfkVVChM383dCnU6PR76p0=
Subject key identifier:   C4:B2:A9:66:CD:DB:8A:01:25:C1:CB:35:42:F7:32:B5:CD:E1:D3:CD
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       5251CB15BAE1D995F4FC6C1EB55A08B5CB1C6082
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131382e302f32342d3234203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:42:41 +0000
ROA not before:           Wed 07 Jun 2023 13:37:41 +0000
ROA not after:            Wed 05 Jun 2024 13:42:41 +0000
asID:                     61859
IP address blocks:        201.149.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:51:cb:15:ba:e1:d9:95:f4:fc:6c:1e:b5:5a:08:b5:cb:1c:60:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:37:41 2023 GMT
            Not After : Jun  5 13:42:41 2024 GMT
        Subject: CN=C4B2A966CDDB8A0125C1CB3542F732B5CDE1D3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:fe:33:f7:a6:0e:20:aa:17:bc:5a:dd:1b:
                    51:cb:94:f0:f4:2a:07:69:23:77:12:1a:90:97:23:
                    fe:4e:ba:21:02:91:81:0f:11:5b:60:e1:be:52:07:
                    ea:ee:ce:78:7a:36:a9:b7:24:63:f3:c5:31:83:38:
                    cd:68:1b:5b:82:e6:72:23:21:98:e9:11:c2:b7:33:
                    c3:f1:3d:c0:1d:ed:76:91:04:d9:34:cd:27:66:37:
                    54:db:80:2a:0a:65:fe:e9:b6:e5:54:cf:aa:39:90:
                    80:19:58:ea:49:d6:46:54:1f:2a:da:5c:70:8e:4b:
                    62:dd:1e:7c:ca:6d:9b:d4:58:33:7f:2d:57:dd:c1:
                    84:83:76:a3:2d:97:fe:c0:b0:83:22:a7:c1:b7:71:
                    68:68:7c:a4:40:c6:75:e6:a0:41:cf:aa:6a:51:4d:
                    2c:5c:3a:f8:94:1e:55:2c:6e:e7:6d:ed:45:aa:8d:
                    aa:cf:3c:b9:19:a3:7b:ff:51:bd:86:66:ba:5a:dd:
                    ee:90:2c:23:77:44:8d:c8:54:33:8c:de:86:3c:1d:
                    60:3c:68:d5:44:66:3f:ed:b5:e3:3c:d1:86:00:3f:
                    82:ba:7e:c1:64:9c:3b:94:98:82:45:0b:aa:8d:fa:
                    67:d3:03:7b:6f:de:ac:7d:25:1a:c8:7a:41:f0:6b:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B2:A9:66:CD:DB:8A:01:25:C1:CB:35:42:F7:32:B5:CD:E1:D3:CD
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131382e302f32342d3234203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:6a:e6:ab:d5:14:35:f1:f3:00:42:b0:fb:b2:24:49:5c:
         a2:62:28:42:a4:3d:80:e0:5e:d5:08:57:54:18:99:09:cc:11:
         c2:5e:62:ce:9c:3c:5a:d7:3b:ce:72:35:cc:7b:69:26:10:c9:
         09:7a:cd:2d:4c:57:35:6b:19:7a:b3:a6:4b:b2:53:f4:73:9f:
         26:f8:08:27:cc:70:6c:eb:42:37:73:69:29:a3:2d:71:88:69:
         a9:8b:35:f1:4f:4a:4e:f0:d2:f7:5a:86:3b:9e:dc:0e:2a:66:
         aa:09:7c:bc:96:e3:f9:00:46:56:27:0e:31:04:f0:3d:a6:98:
         2a:19:6f:40:20:1d:d5:18:87:6c:6c:9e:c1:70:13:88:df:26:
         8c:9d:13:ce:8c:b7:74:80:73:3e:78:1b:94:f1:c4:74:a0:a4:
         d5:ef:9b:84:55:b1:f8:ed:78:bb:d5:8c:6d:32:98:51:3f:7c:
         16:eb:ed:f8:72:a5:1d:86:c1:7f:8e:a7:09:db:1f:29:92:a0:
         b1:46:ee:32:6f:36:69:b2:c2:af:e2:69:f5:8a:25:60:20:7c:
         e1:f0:ab:af:66:50:c2:f4:9d:da:a7:0a:c6:4f:22:ef:7c:30:
         21:1b:83:a7:ef:14:6d:74:2f:b4:97:9a:fa:70:8b:fb:bc:08:
         7c:33:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org