Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32322d3234203d3e20323730353730.roa
File:                     3230312e34392e3133362e302f32322d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          ZZ1wDBhWOktFJJfBITqXvurcbgafKRx9EjEQCVERpLg=
Subject key identifier:   43:4F:AC:95:D0:CE:4D:E9:38:A8:A2:15:A0:8E:E4:1E:37:BE:20:BC
Certificate issuer:       /CN=84685401BCE2CBDE0A53CFFED25971B48BB8AD5E
Certificate serial:       71BFC2C3619FE6E28BD7B915E40DE7F66ACE834F
Authority key identifier: 84:68:54:01:BC:E2:CB:DE:0A:53:CF:FE:D2:59:71:B4:8B:B8:AD:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32322d3234203d3e20323730353730.roa
Signing time:             Sun 29 May 2022 20:14:55 +0000
ROA not before:           Sun 29 May 2022 20:09:55 +0000
ROA not after:            Sun 28 May 2023 20:14:55 +0000
asID:                     270570
IP address blocks:        201.49.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bf:c2:c3:61:9f:e6:e2:8b:d7:b9:15:e4:0d:e7:f6:6a:ce:83:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84685401BCE2CBDE0A53CFFED25971B48BB8AD5E
        Validity
            Not Before: May 29 20:09:55 2022 GMT
            Not After : May 28 20:14:55 2023 GMT
        Subject: CN=434FAC95D0CE4DE938A8A215A08EE41E37BE20BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:e7:10:10:62:55:a6:82:fd:a1:6a:0f:ac:
                    35:0c:17:b8:e0:a8:67:18:1f:4f:32:d2:07:ba:8b:
                    c9:53:81:50:e8:bb:f2:c0:57:70:47:c7:89:9a:e4:
                    7b:73:1a:05:d1:cc:fd:3f:17:a3:08:02:dc:cf:78:
                    5c:01:a9:0b:ef:fa:53:25:57:57:7e:ec:88:d7:00:
                    68:59:5f:24:d8:84:12:76:13:08:fe:33:1a:ee:6d:
                    84:39:59:da:fd:42:3a:fe:72:b1:d4:c1:59:70:ec:
                    06:30:b2:cb:be:c3:39:8b:1c:55:b2:94:31:0e:dd:
                    ee:7c:2e:bb:34:98:9f:d6:ef:e7:c2:ab:86:69:bf:
                    67:75:38:81:1b:fe:85:a0:5a:0c:aa:5e:f1:6d:bb:
                    56:54:6d:b5:43:98:e1:69:17:37:6f:9b:b2:1b:70:
                    21:cf:ab:d4:50:7c:23:f4:c5:1c:be:bb:8b:29:38:
                    fb:5a:7c:b4:25:57:d1:d6:93:05:3f:33:ad:ba:97:
                    8f:e2:af:55:c4:a5:32:0a:30:9c:2d:f1:5b:07:bc:
                    b1:03:ea:f3:07:85:f8:f7:df:2c:16:b0:28:f6:f5:
                    b0:35:32:02:3e:eb:fa:12:72:b2:a9:1b:dd:40:3c:
                    1e:aa:cb:dc:75:d3:6a:94:d1:18:e9:86:aa:b3:fc:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4F:AC:95:D0:CE:4D:E9:38:A8:A2:15:A0:8E:E4:1E:37:BE:20:BC
            X509v3 Authority Key Identifier:
                keyid:84:68:54:01:BC:E2:CB:DE:0A:53:CF:FE:D2:59:71:B4:8B:B8:AD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32322d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:26:7a:dd:2a:15:30:24:b8:cb:1c:4d:d4:49:a7:ff:88:cf:
         31:c5:07:36:f5:77:92:4b:33:a5:e7:38:c7:87:21:9b:82:96:
         85:cb:d4:22:f9:87:a0:be:60:eb:bd:d2:41:09:35:26:4b:cd:
         93:a7:f1:a7:d9:08:2f:c6:38:e7:53:2d:dc:13:03:46:dd:92:
         f9:55:40:43:a0:bd:48:76:d4:77:3d:e0:76:d0:63:6c:06:fd:
         b4:a3:db:2f:c6:c4:eb:47:f3:9d:1c:de:28:cf:08:d0:3d:8d:
         25:0c:04:ef:f9:f6:a7:c5:a3:7f:1e:f3:00:e6:d0:94:ba:f5:
         e2:e1:28:4b:41:df:dd:78:9d:f0:1d:0d:77:9f:e9:e3:d6:ae:
         6e:1b:cc:61:8f:4c:5c:4c:8d:69:97:89:27:45:08:1e:4a:6d:
         4f:5d:4e:5d:9f:89:16:97:58:b0:d2:67:e7:89:f2:14:d5:61:
         82:74:1e:f6:aa:b7:69:79:0c:c2:d8:61:bb:89:5c:ee:b2:1c:
         df:01:4c:63:76:b5:a4:9f:05:9a:14:c7:c3:16:a7:29:19:f3:
         39:79:eb:75:06:7d:f3:20:99:78:dd:c2:e9:cc:f5:87:04:8a:
         eb:25:fc:c2:24:15:98:f6:c4:5b:93:a2:bb:6c:37:85:08:e9:
         a6:19:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:08 2023 by rpki-client on console-fra.rpki-client.org