Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa
File:                     3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          xkeir6+90FcBh/WYPK654+0X1bO8kdgdBgy4K6favaY=
Subject key identifier:   0D:08:61:C0:79:AF:62:A9:7D:94:7D:67:06:12:18:43:8C:2A:13:82
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       7A9A00E28BACBE50EC2704E13B3EA9A0BB8F2366
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa
Signing time:             Tue 23 May 2023 17:19:45 +0000
ROA not before:           Tue 23 May 2023 17:14:45 +0000
ROA not after:            Tue 21 May 2024 17:19:45 +0000
asID:                     270570
IP address blocks:        201.49.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9a:00:e2:8b:ac:be:50:ec:27:04:e1:3b:3e:a9:a0:bb:8f:23:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: May 23 17:14:45 2023 GMT
            Not After : May 21 17:19:45 2024 GMT
        Subject: CN=0D0861C079AF62A97D947D67061218438C2A1382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:d5:4d:4c:69:06:2c:76:cd:8b:cc:41:af:
                    fb:64:e3:d7:0c:ae:30:ec:4f:7f:81:d1:34:49:0c:
                    79:22:89:78:f0:73:26:70:e8:1b:9a:6f:5e:81:4d:
                    6b:78:85:63:e1:80:9e:ac:3f:35:8a:84:c9:30:b3:
                    bc:c9:3e:cf:42:07:53:45:76:a1:6d:19:98:92:43:
                    e7:8b:62:b0:3e:27:99:70:99:6e:bd:1f:ac:22:f4:
                    73:f2:dc:0c:13:0e:f1:d0:b3:96:6e:a6:f3:46:84:
                    44:af:91:f7:9e:7a:a2:9f:74:1a:f4:68:d6:7c:4b:
                    90:55:a2:f9:c0:d4:20:7b:22:60:c7:c8:d0:c7:bb:
                    4a:fd:28:08:e9:61:de:f7:f2:95:ae:46:15:93:b8:
                    15:43:6c:e6:3b:85:6a:7e:bb:74:7c:b3:c9:5d:39:
                    cb:0e:13:16:4a:a1:a7:46:db:27:4c:37:ad:02:b2:
                    29:4f:b6:ce:c2:d7:75:c8:b2:b4:fb:c3:7c:fc:c2:
                    69:64:2b:25:55:30:a4:0c:07:73:fa:ff:18:11:0f:
                    9e:2b:48:57:78:c9:a3:7e:b8:7e:f2:ec:a1:d8:ce:
                    83:ad:11:e3:12:e2:46:f0:9d:04:b9:46:e3:05:f7:
                    57:7f:3f:35:29:4e:f1:ac:c9:de:cc:b0:16:5d:6b:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:08:61:C0:79:AF:62:A9:7D:94:7D:67:06:12:18:43:8C:2A:13:82
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:29:9f:ee:62:1c:44:34:9e:57:16:98:15:71:a9:82:e0:93:
         31:e4:17:4a:8e:96:29:09:60:37:1c:f0:3b:77:09:0d:2f:8d:
         e3:76:86:14:88:5b:0c:f3:b1:e8:b9:35:b9:b8:5c:07:33:dd:
         08:b9:1b:60:cb:37:32:cc:0b:1d:cd:64:76:35:e0:63:d3:13:
         20:9c:e3:31:53:c4:67:40:69:de:4c:30:1c:cf:31:a3:41:ab:
         39:4d:21:4b:a8:2b:e0:92:db:67:f5:2b:8a:72:a6:51:e7:eb:
         02:73:b3:b3:0b:14:4d:1d:67:e8:28:81:81:50:13:ca:a4:82:
         1d:5f:f8:aa:71:64:88:91:6f:d8:df:56:52:f0:71:2d:98:5e:
         75:d1:86:5a:28:70:45:53:77:e6:0d:b1:df:26:a9:16:1f:0d:
         67:60:4c:6b:18:fa:e4:e6:79:2e:c2:af:18:81:ae:e8:b4:61:
         de:10:b9:f3:a6:11:b6:8c:2c:94:de:f7:91:0f:3e:cf:30:03:
         4d:76:ac:94:52:e9:54:dc:ce:e9:a2:c6:22:42:d3:64:f8:95:
         26:43:ec:87:55:c3:34:11:a5:f1:85:7f:ed:cb:77:51:36:60:
         8f:94:a2:b6:86:78:eb:59:65:a2:d4:fb:d3:4e:87:3c:35:0c:
         92:ba:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org