Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa
File:                     3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa (raw, json)
Hash identifier:          QFzM8+D4Jsuf2R3j28krK480vTHCcv9p0TpLCXEvh9k=
Subject key identifier:   75:69:80:E3:75:FB:F6:78:3D:FD:E6:96:D1:19:E8:AC:12:52:AD:CA
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       5038D8390BC05CA4C1394804D53F16AA9544512B
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa
Signing time:             Tue 23 May 2023 17:19:44 +0000
ROA not before:           Tue 23 May 2023 17:14:44 +0000
ROA not after:            Tue 21 May 2024 17:19:44 +0000
asID:                     270570
IP address blocks:        201.49.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:38:d8:39:0b:c0:5c:a4:c1:39:48:04:d5:3f:16:aa:95:44:51:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: May 23 17:14:44 2023 GMT
            Not After : May 21 17:19:44 2024 GMT
        Subject: CN=756980E375FBF6783DFDE696D119E8AC1252ADCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:62:ec:94:95:ff:71:1c:80:f1:71:36:00:
                    8b:3a:db:a5:38:de:e9:a8:de:b1:7b:42:15:b6:41:
                    62:fd:00:6a:f2:4f:4f:47:28:37:2c:63:73:db:8e:
                    e2:9f:b8:65:60:06:10:92:4b:bf:8c:1f:05:b4:a4:
                    09:d0:6e:ae:13:51:34:cd:cc:ae:2d:cf:99:11:36:
                    45:f4:9c:56:ba:a6:f0:a4:e7:10:c1:72:81:75:48:
                    7b:c5:69:20:27:a1:52:59:b7:66:ad:e7:2c:ab:da:
                    f3:02:54:ee:42:14:e8:3c:41:5b:ca:c0:76:46:11:
                    29:30:0e:23:84:72:ef:25:cc:d4:b4:91:ed:e5:c6:
                    dc:d3:a7:9b:10:66:c8:94:a6:a6:30:6c:47:50:9a:
                    fe:85:56:03:32:a1:d8:99:8c:b0:fe:34:51:29:07:
                    cb:32:58:d1:58:2a:42:9f:27:ea:57:e2:24:e4:93:
                    e4:cc:20:e3:d1:ed:d8:21:cb:a4:9d:13:ed:71:0b:
                    e8:94:e2:e5:8f:ab:e3:26:ff:52:ee:a0:ee:6e:b8:
                    f0:dd:f3:33:6b:d8:5e:2f:d0:ce:24:35:22:5e:4d:
                    31:4d:92:e4:e9:64:c2:dc:2b:b4:2b:a5:70:2a:38:
                    b2:fa:ed:ec:03:cc:36:f8:85:99:1e:42:0c:da:26:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:69:80:E3:75:FB:F6:78:3D:FD:E6:96:D1:19:E8:AC:12:52:AD:CA
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:29:49:cb:6d:81:06:d7:6b:71:ff:3a:51:ba:29:53:81:d9:
         67:7b:71:3e:96:c2:79:f3:ce:10:3e:0a:72:6e:84:04:21:b0:
         8c:0f:7b:fb:35:3d:50:fa:4a:1f:41:54:ca:93:bc:ea:82:a4:
         f4:99:e9:fb:2e:2a:41:51:14:44:40:49:2c:01:3f:cf:25:84:
         42:c0:77:87:c2:79:0d:c7:52:8a:dd:73:42:9e:a6:6a:f9:57:
         de:6a:aa:c1:56:4d:1e:ac:16:4d:fe:48:d8:9d:8f:40:ba:31:
         8c:d3:93:a1:2e:2e:da:85:9c:15:84:3d:1b:2f:37:ac:e8:88:
         4b:25:dd:14:8b:d8:97:d2:56:f5:af:62:a3:e6:af:ea:a3:49:
         a9:eb:86:1c:a3:5b:ab:02:4c:0b:da:12:4c:c2:44:c1:d3:a6:
         9b:a9:33:04:c6:4c:79:73:a3:fc:a1:0d:73:ae:60:24:9c:f1:
         1b:6e:58:78:56:62:00:36:48:1a:17:6c:35:9c:b6:f1:f4:20:
         95:ea:e2:09:3f:fe:d3:98:56:25:e7:63:d2:d8:d1:05:bd:a6:
         ec:e2:ac:81:0c:dd:32:0f:43:1c:01:34:1e:e3:7b:37:69:73:
         55:58:41:bd:62:c9:f5:96:a8:c2:1f:d6:e4:5e:73:55:18:7e:
         7c:b2:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org