Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          sfpkoAj7K0rZowRwl5+jMjPXga9A2iLDNAPhkRmEzFM=
Subject key identifier:   A9:89:45:1A:46:88:07:2C:3C:10:10:26:08:D1:28:78:C0:BE:BB:D8
Certificate issuer:       /CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
Certificate serial:       13DF7840BC57C1D94EA1132F1372A85295836451
Authority key identifier: E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa
Signing time:             Mon 27 Mar 2023 01:26:35 +0000
ROA not before:           Mon 27 Mar 2023 01:21:35 +0000
ROA not after:            Mon 25 Mar 2024 01:26:35 +0000
asID:                     61910
IP address blocks:        201.87.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:df:78:40:bc:57:c1:d9:4e:a1:13:2f:13:72:a8:52:95:83:64:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
        Validity
            Not Before: Mar 27 01:21:35 2023 GMT
            Not After : Mar 25 01:26:35 2024 GMT
        Subject: CN=A989451A4688072C3C10102608D12878C0BEBBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:89:04:fa:ff:0b:4a:db:cb:d7:05:14:8a:
                    88:99:37:6d:10:3e:29:9c:78:33:79:a8:2c:e6:91:
                    dd:82:86:42:7e:66:d4:10:8e:c3:f6:ed:a0:98:7a:
                    d6:3a:94:a4:eb:ea:93:a0:a8:2e:5f:8c:74:1e:50:
                    d2:ca:2c:2a:5f:ea:95:6c:8a:18:31:d9:b9:92:35:
                    1c:26:de:8f:ac:6b:9a:a1:b8:0c:78:b5:3f:4a:58:
                    14:f5:ee:a2:ab:e6:29:81:00:e8:b4:e7:af:64:60:
                    9a:4b:f9:a9:91:0c:39:c4:01:5a:76:e3:1a:52:ea:
                    23:0a:12:d0:70:ea:6b:95:e0:d0:d8:60:97:38:37:
                    53:a8:03:06:c3:c0:9a:cc:81:37:5b:07:f6:2d:1e:
                    9d:af:71:cd:74:8c:9a:df:2e:3d:24:23:9f:bc:13:
                    cd:8d:70:d4:e6:07:87:b1:3e:e9:93:1e:0f:3f:97:
                    2c:ad:7a:75:5d:a7:bd:19:66:df:34:da:83:95:bb:
                    97:4a:8a:a1:20:0d:a0:f8:f2:ed:e2:e3:35:7b:78:
                    35:14:99:ec:38:b6:27:44:78:60:b5:23:af:c6:ca:
                    0a:22:47:39:13:6c:77:ed:4b:2a:fc:a4:e0:2b:5c:
                    ef:d5:e5:62:5c:7c:2e:89:98:9b:52:21:ed:be:19:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:89:45:1A:46:88:07:2C:3C:10:10:26:08:D1:28:78:C0:BE:BB:D8
            X509v3 Authority Key Identifier:
                keyid:E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:95:be:2f:c0:73:75:48:7b:61:0d:7a:d0:aa:c0:2a:a4:
         f3:1f:9c:5e:f5:c3:6f:0e:7d:d1:a0:f4:dc:9e:81:ae:be:b7:
         84:45:20:be:3d:ca:1d:a8:1c:d4:0d:ab:59:d2:0a:2a:d5:76:
         c5:cc:af:7a:4c:11:54:40:ec:82:2f:18:19:6c:a7:bb:9c:b0:
         c0:b7:df:6b:7d:0b:5e:ef:8d:bb:1b:19:52:86:31:f7:2c:a7:
         0d:30:0c:21:38:24:8b:d5:d9:ca:57:6a:f3:b4:06:98:70:73:
         86:6f:66:01:6c:8c:f6:b5:ba:01:12:c0:ba:83:72:57:d1:26:
         a1:87:7a:3a:72:5d:b4:92:63:39:ee:b9:b6:06:38:67:03:3f:
         7b:41:c6:9f:1c:d7:d0:75:bb:84:ef:53:58:8d:20:ca:f5:ae:
         74:2e:4c:b9:6b:4b:40:a4:e3:c9:7d:88:89:76:00:68:45:f9:
         64:4f:47:08:9a:31:f9:0d:81:00:f0:3c:42:2e:b0:ae:7f:e3:
         47:e1:e7:d1:9b:59:f3:f7:ce:2a:28:61:b4:ba:f7:6d:50:2c:
         2e:5d:53:db:e9:01:ae:8f:7a:96:7a:80:c4:be:84:c0:4b:a8:
         d3:5a:df:12:fb:08:89:7d:be:66:5a:18:8b:a5:6e:87:c1:38:
         0a:ce:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org