Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa
File:                     3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (raw, json)
Hash identifier:          MHoVlP5nJOzkED6D//vj/7xhGuTMnCf0dXZRjdFP9C4=
Subject key identifier:   23:BB:CD:FD:F7:19:5C:96:12:82:98:7E:FE:43:E2:73:92:DD:45:8F
Certificate issuer:       /CN=52B7E63BBE7861E4DB242A3939B52DFCB25EAC25
Certificate serial:       54E4A51E069027564EB189E8741A4B5D0929F3E0
Authority key identifier: 52:B7:E6:3B:BE:78:61:E4:DB:24:2A:39:39:B5:2D:FC:B2:5E:AC:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa
Signing time:             Thu 04 Apr 2024 07:44:36 +0000
ROA not before:           Thu 04 Apr 2024 07:39:36 +0000
ROA not after:            Thu 03 Apr 2025 07:44:36 +0000
asID:                     61850
IP address blocks:        201.149.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e4:a5:1e:06:90:27:56:4e:b1:89:e8:74:1a:4b:5d:09:29:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B7E63BBE7861E4DB242A3939B52DFCB25EAC25
        Validity
            Not Before: Apr  4 07:39:36 2024 GMT
            Not After : Apr  3 07:44:36 2025 GMT
        Subject: CN=23BBCDFDF7195C961282987EFE43E27392DD458F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:d6:01:44:a2:06:8a:b3:8e:d9:9c:c3:1b:
                    7a:86:8b:5a:8f:00:5a:3e:77:05:cb:44:87:13:41:
                    a6:22:ab:e7:99:aa:60:6a:9f:8f:89:cb:c1:e6:2b:
                    66:91:b2:8c:21:05:a7:a8:59:ac:19:17:66:ed:0d:
                    7d:40:9a:26:ef:4c:9a:82:12:83:7e:f6:fc:6b:4e:
                    2a:b7:38:78:5c:3f:a1:c9:2f:50:17:b4:65:78:57:
                    0a:9e:75:5d:e8:1d:76:5f:21:63:9d:c2:7b:09:a2:
                    63:f3:d3:5b:cf:9f:e8:83:3a:3a:49:1e:6b:4d:60:
                    b5:41:77:15:38:b5:26:41:95:4d:17:3a:d3:36:97:
                    70:82:06:db:82:8a:ec:38:9f:7d:cb:b7:bb:ba:ff:
                    72:38:f1:19:94:b7:58:35:83:39:fd:41:73:fa:95:
                    6e:6a:ee:57:69:06:46:9e:c2:b1:38:d8:47:c8:4c:
                    9f:c0:1b:74:fd:c4:ae:ec:69:69:28:d3:89:c1:e7:
                    93:91:1f:0c:af:e8:5d:8e:22:9c:46:1d:56:2f:7a:
                    cd:0e:e2:7e:3b:45:66:6e:34:32:66:3f:f5:9f:0f:
                    99:4b:9e:88:52:d2:a4:a0:c4:48:78:f5:28:5b:1f:
                    6b:bd:c0:1d:78:8d:1b:8e:7c:6e:b3:2c:6d:64:21:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BB:CD:FD:F7:19:5C:96:12:82:98:7E:FE:43:E2:73:92:DD:45:8F
            X509v3 Authority Key Identifier:
                keyid:52:B7:E6:3B:BE:78:61:E4:DB:24:2A:39:39:B5:2D:FC:B2:5E:AC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:2d:5d:dc:0b:54:4f:d7:25:1f:06:29:a0:94:f8:77:9d:
         7a:4f:ed:f0:57:4a:28:97:4b:08:5f:52:08:12:11:0a:06:24:
         26:8c:70:01:77:06:0c:b4:68:ae:dc:5b:e3:8b:5c:53:66:d9:
         7d:e9:c6:b2:4a:6d:94:4a:b2:a0:d5:7d:c6:bb:3e:68:44:d3:
         b6:3e:95:33:03:88:da:8e:42:35:e0:c9:42:ac:15:a5:9d:ca:
         50:5c:b5:cf:26:9d:7b:28:69:5e:30:26:e9:f1:9a:a3:42:72:
         4e:f9:3b:b4:0b:26:b0:cc:f9:07:ba:be:12:01:d9:62:bb:56:
         15:70:c7:6b:a5:a1:93:d0:8a:7c:d0:91:f5:84:3d:e0:f8:64:
         23:c1:c5:d8:df:f0:a3:90:8d:c8:c6:2a:3e:c1:54:e1:0c:7b:
         98:23:ff:53:a9:8d:15:48:59:da:06:87:2c:bf:d8:d6:72:48:
         98:b2:c8:c8:f5:86:c6:d9:62:20:00:c8:69:b0:f0:6e:23:d5:
         5d:66:57:19:a3:d0:db:0b:1b:e3:19:34:96:16:63:c8:72:08:
         dc:54:24:ed:2b:e9:b5:c6:d8:47:1e:71:cf:7c:ae:f3:23:af:
         fb:6e:b0:5a:51:38:e8:96:37:39:75:b2:05:53:e2:b8:82:f8:
         11:a7:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org