Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/3230312e3134382e3136342e302f32322d3332203d3e203631383635.roa
File:                     3230312e3134382e3136342e302f32322d3332203d3e203631383635.roa (raw, json)
Hash identifier:          Qqan3MCBaEDV8UF7nQFuz8usLOnhd6xv0kM3Lb/bLUA=
Subject key identifier:   A4:88:E8:99:5A:FF:81:A0:F1:A8:BC:A1:36:3C:0D:A0:49:82:C6:4A
Certificate issuer:       /CN=7FD5A0FF623119B8974387FB5C14E5A564074C0E
Certificate serial:       5EDD0089031B4F5D6B539118A13B6D0036B5EF17
Authority key identifier: 7F:D5:A0:FF:62:31:19:B8:97:43:87:FB:5C:14:E5:A5:64:07:4C:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/3230312e3134382e3136342e302f32322d3332203d3e203631383635.roa
Signing time:             Mon 11 Sep 2023 17:51:59 +0000
ROA not before:           Mon 11 Sep 2023 17:46:59 +0000
ROA not after:            Mon 09 Sep 2024 17:51:59 +0000
asID:                     61865
IP address blocks:        201.148.164.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:dd:00:89:03:1b:4f:5d:6b:53:91:18:a1:3b:6d:00:36:b5:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD5A0FF623119B8974387FB5C14E5A564074C0E
        Validity
            Not Before: Sep 11 17:46:59 2023 GMT
            Not After : Sep  9 17:51:59 2024 GMT
        Subject: CN=A488E8995AFF81A0F1A8BCA1363C0DA04982C64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:45:6b:09:6b:69:87:ee:4a:49:3d:3f:27:
                    57:80:ab:2e:25:b8:38:15:9c:db:ab:c8:2a:ae:a9:
                    5e:24:c8:05:79:a4:0d:69:cb:0a:7b:46:d6:fb:ed:
                    fc:5f:a0:18:93:30:d6:3a:2e:1d:07:db:80:8b:20:
                    f9:5a:32:aa:dd:ca:90:45:40:60:cc:15:54:b3:57:
                    c5:f1:20:92:22:dd:22:95:33:81:f3:d4:01:77:ec:
                    f9:26:f3:a0:85:3e:03:20:b6:dd:3e:09:d4:c3:ac:
                    8c:cd:e2:fd:0a:1b:1f:3c:42:34:c7:9b:f5:b2:0e:
                    42:33:58:f3:69:56:07:e7:7c:e3:4b:2d:20:17:f7:
                    7c:38:e4:92:ed:aa:9f:cc:a9:25:7c:96:46:54:77:
                    7a:ad:24:18:16:f6:bd:7a:0d:e2:27:5d:1a:af:23:
                    e7:2f:e8:99:00:5d:1d:36:fb:f8:26:71:20:82:37:
                    71:d7:80:06:a9:fd:57:62:5c:d4:8d:8d:1a:e1:5a:
                    77:fb:11:3d:2c:5e:92:17:04:e3:3e:e2:37:17:12:
                    b7:58:2d:7f:bc:3e:df:71:e5:38:13:70:07:28:ce:
                    6e:d5:dd:1c:51:fc:54:63:89:20:e2:8f:c1:1c:8f:
                    65:60:92:e2:22:14:cd:54:48:7c:66:32:ac:65:0a:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:88:E8:99:5A:FF:81:A0:F1:A8:BC:A1:36:3C:0D:A0:49:82:C6:4A
            X509v3 Authority Key Identifier:
                keyid:7F:D5:A0:FF:62:31:19:B8:97:43:87:FB:5C:14:E5:A5:64:07:4C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/3230312e3134382e3136342e302f32322d3332203d3e203631383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:13:c7:d5:b4:43:1a:39:ea:3d:e9:d0:6b:5f:b2:ff:cb:d3:
         56:19:c1:f9:3d:0e:3b:95:5f:77:c1:6c:60:3a:0a:a1:b5:fd:
         7c:f3:b8:aa:49:75:81:c4:e2:94:05:a7:1b:f0:2e:0f:64:50:
         f3:07:5c:23:fd:78:b7:96:ab:f2:98:c2:90:23:d0:a4:2b:68:
         54:32:53:74:99:b1:1d:de:56:9a:7c:97:bd:01:c5:eb:9b:f1:
         3e:9c:a9:34:ee:b3:ed:bd:73:6d:d2:16:cd:f3:ea:94:17:7f:
         8a:3b:62:18:e5:ae:7c:2d:ad:fa:9e:fa:d5:dc:bc:e0:5f:b5:
         9e:2c:cf:c3:34:67:61:4a:1b:78:5d:bc:a1:52:29:e2:ce:1b:
         2b:d4:3e:88:3a:eb:ad:6c:09:d6:52:9e:0f:68:70:ae:46:15:
         28:7b:6e:60:42:08:63:f5:20:36:45:ab:2d:6e:68:e0:de:e7:
         16:e8:73:c8:2d:f5:bd:d7:38:69:37:ab:66:3d:52:30:15:c4:
         be:99:3c:1c:6f:9b:79:40:7d:b2:84:70:77:af:83:d9:a3:5b:
         ce:bf:15:31:fc:e6:c4:e8:10:c1:03:f1:d1:cd:4e:4b:7d:8e:
         0a:8c:62:4e:95:4a:9c:77:76:75:19:de:72:22:53:c5:08:aa:
         99:fa:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org