Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32322d3233203d3e203631393130.roa (raw, json)
Hash identifier:          oWjfLTuo0QdIkOhY6rlCo6YhM4Ulo6nqUnmtqSip16U=
Subject key identifier:   D5:DE:68:C3:4E:8B:6B:E4:B9:0C:19:69:F2:94:7C:50:BF:32:99:67
Certificate issuer:       /CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
Certificate serial:       369CD8F334FEF384336AA156CAEE7A33F423507E
Authority key identifier: E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
Signing time:             Mon 27 Mar 2023 01:29:45 +0000
ROA not before:           Mon 27 Mar 2023 01:24:45 +0000
ROA not after:            Mon 25 Mar 2024 01:29:45 +0000
asID:                     61910
IP address blocks:        201.87.232.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:d8:f3:34:fe:f3:84:33:6a:a1:56:ca:ee:7a:33:f4:23:50:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
        Validity
            Not Before: Mar 27 01:24:45 2023 GMT
            Not After : Mar 25 01:29:45 2024 GMT
        Subject: CN=D5DE68C34E8B6BE4B90C1969F2947C50BF329967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:a5:2d:24:aa:d0:25:25:3a:cd:8b:4d:31:
                    e2:d1:2d:ef:d7:1a:29:d9:97:f2:c1:98:12:7b:68:
                    39:8b:17:53:51:e8:42:4c:f9:2f:36:91:e4:3e:9a:
                    59:1b:e5:20:43:05:54:06:6e:e9:8c:f5:ce:72:67:
                    54:e8:19:f2:91:4e:65:97:50:bc:d7:19:df:65:d7:
                    fe:d1:79:1d:ca:fa:b9:84:47:a5:d0:7b:0e:c1:da:
                    05:8f:77:3f:a2:85:66:6f:05:76:1b:99:1e:aa:d0:
                    2a:d3:3e:6b:62:02:95:2b:35:2b:99:3c:ca:0e:f3:
                    04:8d:2e:8e:c6:7a:38:36:73:89:f2:9d:8c:1d:33:
                    de:e9:40:5f:4c:75:5d:6e:20:6e:13:95:91:12:05:
                    df:72:52:50:c0:af:97:12:07:59:cb:71:2f:8d:cf:
                    eb:cb:bc:db:d9:80:45:47:21:84:33:5f:7c:64:31:
                    24:4b:bd:51:b0:e1:00:5f:56:1f:e7:75:e5:0a:98:
                    23:bd:b0:43:06:84:c7:d5:46:5f:fa:be:f2:f1:67:
                    a5:2d:16:17:80:de:37:da:3b:ad:97:0f:15:91:5d:
                    59:87:d2:1f:b3:57:f0:a6:72:83:ca:62:70:52:6e:
                    41:3f:69:33:85:8b:8f:bf:f0:39:51:17:0d:0e:b7:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DE:68:C3:4E:8B:6B:E4:B9:0C:19:69:F2:94:7C:50:BF:32:99:67
            X509v3 Authority Key Identifier:
                keyid:E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:34:b6:20:08:42:ea:b9:6e:04:c6:7c:87:2e:77:10:25:a7:
         3f:b6:fa:ff:9f:2f:9f:fa:86:ef:2e:dc:91:92:55:bb:f7:60:
         25:80:d7:99:3d:16:d4:c8:26:2d:84:92:23:4e:64:28:b1:bb:
         cc:5c:f2:ba:2b:be:59:b6:1c:d6:76:37:a3:0f:56:42:ea:03:
         18:ae:36:ff:42:4c:08:01:31:0e:59:66:f2:89:8b:8f:6c:14:
         63:ed:b6:6b:6b:0a:6b:d1:39:f3:32:bf:a0:2d:ff:35:8a:53:
         f6:a7:a2:5c:57:29:73:48:40:82:5b:48:5b:18:d3:1d:5f:17:
         02:2c:9d:e2:fa:a5:e6:d5:ba:a4:83:6c:71:5e:c8:c1:21:58:
         10:19:98:4b:1e:7d:dc:7b:73:80:5b:c3:11:c9:f3:63:f2:27:
         78:0f:fa:1a:4f:69:ea:c8:6d:21:c1:b8:07:85:0b:86:75:9a:
         58:9c:77:02:8c:ae:cf:f8:49:4f:12:00:1b:6b:a0:ce:2f:e7:
         2b:bd:f4:ce:f9:46:ac:2f:86:91:9b:c9:37:9e:3c:e9:f4:68:
         64:b5:ef:ce:16:b1:8f:07:61:08:dd:a1:49:77:7e:d9:79:df:
         74:37:de:ee:ea:25:1b:80:1b:af:85:27:b6:25:93:d3:af:af:
         10:b0:9a:34
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNpzY8zT+84QzaqFWyu56M/QjUH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk0RkY2Q0MxMzJDMTJDRTcyMkU0RDlFRkRDODUyRDI4
MENDMDgyNzAeFw0yMzAzMjcwMTI0NDVaFw0yNDAzMjUwMTI5NDVaMDMxMTAvBgNV
BAMTKEQ1REU2OEMzNEU4QjZCRTRCOTBDMTk2OUYyOTQ3QzUwQkYzMjk5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKKUtJKrQJSU6zYtNMeLRLe/X
GinZl/LBmBJ7aDmLF1NR6EJM+S82keQ+mlkb5SBDBVQGbumM9c5yZ1ToGfKRTmWX
ULzXGd9l1/7ReR3K+rmER6XQew7B2gWPdz+ihWZvBXYbmR6q0CrTPmtiApUrNSuZ
PMoO8wSNLo7Gejg2c4nynYwdM97pQF9MdV1uIG4TlZESBd9yUlDAr5cSB1nLcS+N
z+vLvNvZgEVHIYQzX3xkMSRLvVGw4QBfVh/ndeUKmCO9sEMGhMfVRl/6vvLxZ6Ut
FheA3jfaO62XDxWRXVmH0h+zV/CmcoPKYnBSbkE/aTOFi4+/8DlRFw0Ot+g3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1d5ow06La+S5DBlp8pR8UL8ymWcwHwYDVR0j
BBgwFoAU6U/2zBMsEs5yLk2e/chS0oDMCCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMC9FOTRGRjZDQzEzMkMxMkNFNzIyRTREOUVGREM4NTJEMjgwQ0MwODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5NEZGNkNDMTMyQzEyQ0U3
MjJFNEQ5RUZEQzg1MkQyODBDQzA4MjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzAv
MzIzMDMxMmUzODM3MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzNjMx
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyVfoMA0GCSqGSIb3DQEBCwUAA4IBAQAVNLYgCELq
uW4ExnyHLncQJac/tvr/ny+f+obvLtyRklW792AlgNeZPRbUyCYthJIjTmQosbvM
XPK6K75ZthzWdjejD1ZC6gMYrjb/QkwIATEOWWbyiYuPbBRj7bZrawpr0TnzMr+g
Lf81ilP2p6JcVylzSECCW0hbGNMdXxcCLJ3i+qXm1bqkg2xxXsjBIVgQGZhLHn3c
e3OAW8MRyfNj8id4D/oaT2nqyG0hwbgHhQuGdZpYnHcCjK7P+ElPEgAba6DOL+cr
vfTO+UasL4aRm8k3njzp9Ghkte/OFrGPB2EI3aFJd37Zed90N97u6iUbgBuvhSe2
JZPTr68QsJo0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org