Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa
File:                     3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          JnL4OGHV9r4dGYNsSMOjnoO9rvTdtNVXbC7Ll5uQPVg=
Subject key identifier:   16:4E:99:96:82:A7:FE:87:D9:C0:C9:5E:FD:65:C4:CE:B7:2A:C0:E6
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       6D31626D6F0D36061D97829FFE20018871121E8F
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa
Signing time:             Tue 23 May 2023 17:19:43 +0000
ROA not before:           Tue 23 May 2023 17:14:43 +0000
ROA not after:            Tue 21 May 2024 17:19:43 +0000
asID:                     270570
IP address blocks:        201.49.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:62:6d:6f:0d:36:06:1d:97:82:9f:fe:20:01:88:71:12:1e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: May 23 17:14:43 2023 GMT
            Not After : May 21 17:19:43 2024 GMT
        Subject: CN=164E999682A7FE87D9C0C95EFD65C4CEB72AC0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:5e:29:29:7b:4f:ed:ca:41:2a:59:3c:18:
                    1a:b9:c0:b8:c2:2e:5c:89:da:ef:5b:59:2b:1e:09:
                    ed:72:b3:d2:db:8e:e9:6f:81:48:6d:cf:44:a2:ff:
                    78:bc:12:cb:1f:ef:4b:0b:82:00:f1:8b:08:9d:2c:
                    fe:8f:d5:f8:04:88:3d:5b:26:0b:6e:06:85:bb:0b:
                    0b:a3:08:49:e0:0c:e1:24:9b:27:86:35:6e:d8:e5:
                    5e:ee:95:9e:3b:8b:08:68:ff:e5:cc:86:f0:d5:9a:
                    2b:20:a2:4d:2c:5a:9d:1f:ac:f8:f2:53:bb:41:4a:
                    cc:3e:52:ab:70:89:62:13:11:e8:40:52:f1:b8:df:
                    e4:8f:e6:58:90:8f:04:37:19:f2:0b:8c:f3:4c:02:
                    45:e8:65:94:07:a1:50:eb:be:05:14:3f:c2:6d:0e:
                    30:c1:67:90:da:fd:fe:8f:63:e8:49:c0:e6:ce:c3:
                    29:3f:36:15:f4:29:ff:4a:0c:d0:a4:60:1a:26:29:
                    db:2e:4d:c1:a0:35:5a:2b:63:41:40:a3:f2:aa:42:
                    6f:c7:0c:e7:d0:eb:80:46:a2:f1:ba:9c:00:7a:ef:
                    2f:cc:7b:1d:48:11:da:81:d6:59:b3:0b:93:06:80:
                    e9:48:3d:2d:8f:f6:ed:6c:77:1d:1d:d4:2c:a8:f0:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:99:96:82:A7:FE:87:D9:C0:C9:5E:FD:65:C4:CE:B7:2A:C0:E6
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:26:8c:c2:f5:32:ba:27:b2:30:29:9e:91:20:62:15:7a:
         22:19:f7:98:db:2b:e4:3c:1a:d8:4e:ac:b0:f6:10:fc:64:cd:
         e8:9b:d2:ac:d1:9c:03:59:f1:39:6e:87:a2:92:8e:89:18:c2:
         05:b9:85:6d:0d:ac:1c:3b:85:36:68:56:1b:82:f9:c7:40:e2:
         83:3c:54:4c:30:64:0a:5f:3e:26:64:88:48:2b:df:6a:b8:c5:
         7b:08:99:d0:d0:0f:95:ac:b6:16:6b:14:f7:bb:8a:05:6a:f8:
         ad:64:65:13:63:cf:e7:ff:91:2d:12:06:f3:06:79:32:0a:82:
         81:a9:fc:e8:25:d1:1d:4c:2d:21:82:bc:06:a9:0c:87:6c:b7:
         7c:68:11:2f:cd:6c:f7:82:c3:9a:c1:2f:fe:a8:d7:19:fd:bc:
         46:78:ec:c2:39:a2:a9:e8:a2:df:8e:86:83:b6:91:b8:96:22:
         a1:0e:d4:92:72:75:8b:d5:ee:15:b6:8d:37:ca:01:5d:34:51:
         04:4a:c5:e3:a8:e1:b3:4c:94:f0:08:20:78:17:e2:0f:8a:17:
         a2:df:21:36:e1:4b:c5:0f:c7:da:5f:f0:4e:26:e8:70:2f:6f:
         7e:4a:95:2a:52:01:5f:f7:ed:b0:04:fc:39:54:ea:bc:af:80:
         0d:37:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org