Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233352e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233352e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          STtANosHdhxD5qaJ0ixf21srIiaf+/ShuNxx5vjy2I4=
Subject key identifier:   DF:EF:3A:B4:0F:A5:59:67:CE:BC:8F:E4:03:17:C7:9C:7B:DC:A5:D8
Certificate issuer:       /CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
Certificate serial:       35EC5680B738DEF9EF2AFC70D108A698BF4327F2
Authority key identifier: E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233352e302f32342d3234203d3e203631393130.roa
Signing time:             Mon 27 Mar 2023 01:26:51 +0000
ROA not before:           Mon 27 Mar 2023 01:21:51 +0000
ROA not after:            Mon 25 Mar 2024 01:26:51 +0000
asID:                     61910
IP address blocks:        201.87.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:56:80:b7:38:de:f9:ef:2a:fc:70:d1:08:a6:98:bf:43:27:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
        Validity
            Not Before: Mar 27 01:21:51 2023 GMT
            Not After : Mar 25 01:26:51 2024 GMT
        Subject: CN=DFEF3AB40FA55967CEBC8FE40317C79C7BDCA5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:f7:6e:0c:3e:75:96:9d:04:7d:0e:55:37:
                    ee:2d:03:e9:a0:e6:70:1e:eb:02:cb:53:62:05:5b:
                    06:22:b4:51:63:fa:3d:1a:41:7d:af:19:7d:95:48:
                    54:07:37:e0:c6:fe:2e:92:f1:ea:bb:e7:b3:95:82:
                    1e:a2:77:da:8f:93:16:2f:e2:62:47:2f:2c:4f:b7:
                    2f:c0:14:c0:42:b5:f2:8b:d6:c5:30:62:11:cd:76:
                    7a:46:b9:0c:1a:d3:e6:bc:2f:13:66:4c:98:93:eb:
                    9a:54:60:c7:25:16:ad:12:ae:30:fe:37:22:41:de:
                    44:53:aa:08:53:67:18:e7:b8:0e:f5:1f:b0:3e:0f:
                    11:e8:50:df:5a:fb:11:be:9d:cc:50:a6:91:17:52:
                    f7:98:2d:14:6a:80:19:b7:35:9a:8e:ae:ef:d7:31:
                    67:77:35:2c:ac:9a:0a:a0:3e:6b:11:cc:f1:d6:07:
                    32:c0:d6:f2:44:0e:f2:11:d2:06:dc:1c:07:b7:29:
                    f6:2f:03:71:fa:d2:23:40:65:60:88:d9:8f:66:fa:
                    34:2b:54:bf:e6:9c:e2:04:51:5c:2c:44:5f:aa:73:
                    b2:25:ee:b5:6e:07:a0:98:03:4e:6b:e9:71:e6:b7:
                    82:9c:c2:9a:fb:1b:a6:bf:10:f7:3d:b1:67:82:a9:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EF:3A:B4:0F:A5:59:67:CE:BC:8F:E4:03:17:C7:9C:7B:DC:A5:D8
            X509v3 Authority Key Identifier:
                keyid:E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233352e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:12:c9:f1:1b:fe:b3:fe:27:dc:34:5f:91:2b:cc:45:d7:f0:
         9c:9f:ea:aa:69:2d:3c:f8:ac:99:3e:6c:40:91:64:c4:4f:52:
         81:9e:6e:c3:db:61:ea:84:c5:71:b6:86:17:1f:09:e0:63:55:
         0e:e8:b4:e7:18:86:1f:8b:7f:62:ad:0d:5f:6e:c3:72:87:6d:
         c3:e3:df:ed:9f:27:1a:40:17:08:5d:44:df:34:e2:88:46:2a:
         0c:f9:db:4e:a9:02:b3:b1:e1:e4:0d:6c:0a:3c:2a:51:90:0d:
         14:b9:4f:da:89:93:99:26:df:1f:1e:d6:a3:c9:45:9a:76:4f:
         3f:4f:a4:2f:37:99:f1:a3:f9:7a:68:78:86:f3:06:3e:8a:89:
         7e:b9:b3:68:22:6b:3f:56:45:9d:99:83:f8:41:a5:bb:7a:b4:
         7e:72:ca:34:ba:6d:a6:ef:56:4c:86:46:9f:85:26:5e:4a:eb:
         d6:c0:bc:eb:8f:07:33:8b:56:e2:35:44:39:f6:7b:09:d1:bc:
         7f:2c:46:39:55:ad:cc:43:6d:36:ac:da:43:56:f6:71:d9:51:
         4e:18:73:82:65:f6:4a:6b:4e:ce:eb:91:e6:d7:64:bd:98:5f:
         8d:49:eb:48:bb:21:c9:b4:37:4e:af:32:63:f6:ab:a7:85:b2:
         b0:37:f6:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNexWgLc43vnvKvxw0QimmL9DJ/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk0RkY2Q0MxMzJDMTJDRTcyMkU0RDlFRkRDODUyRDI4
MENDMDgyNzAeFw0yMzAzMjcwMTIxNTFaFw0yNDAzMjUwMTI2NTFaMDMxMTAvBgNV
BAMTKERGRUYzQUI0MEZBNTU5NjdDRUJDOEZFNDAzMTdDNzlDN0JEQ0E1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6vduDD51lp0EfQ5VN+4tA+mg
5nAe6wLLU2IFWwYitFFj+j0aQX2vGX2VSFQHN+DG/i6S8eq757OVgh6id9qPkxYv
4mJHLyxPty/AFMBCtfKL1sUwYhHNdnpGuQwa0+a8LxNmTJiT65pUYMclFq0SrjD+
NyJB3kRTqghTZxjnuA71H7A+DxHoUN9a+xG+ncxQppEXUveYLRRqgBm3NZqOru/X
MWd3NSysmgqgPmsRzPHWBzLA1vJEDvIR0gbcHAe3KfYvA3H60iNAZWCI2Y9m+jQr
VL/mnOIEUVwsRF+qc7Il7rVuB6CYA05r6XHmt4Kcwpr7G6a/EPc9sWeCqcr5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3+86tA+lWWfOvI/kAxfHnHvcpdgwHwYDVR0j
BBgwFoAU6U/2zBMsEs5yLk2e/chS0oDMCCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMC9FOTRGRjZDQzEzMkMxMkNFNzIyRTREOUVGREM4NTJEMjgwQ0MwODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5NEZGNkNDMTMyQzEyQ0U3
MjJFNEQ5RUZEQzg1MkQyODBDQzA4MjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzAv
MzIzMDMxMmUzODM3MmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVfrMA0GCSqGSIb3DQEBCwUAA4IBAQAjEsnxG/6z
/ifcNF+RK8xF1/Ccn+qqaS08+KyZPmxAkWTET1KBnm7D22HqhMVxtoYXHwngY1UO
6LTnGIYfi39irQ1fbsNyh23D49/tnycaQBcIXUTfNOKIRioM+dtOqQKzseHkDWwK
PCpRkA0UuU/aiZOZJt8fHtajyUWadk8/T6QvN5nxo/l6aHiG8wY+iol+ubNoIms/
VkWdmYP4QaW7erR+cso0um2m71ZMhkafhSZeSuvWwLzrjwczi1biNUQ59nsJ0bx/
LEY5Va3MQ202rNpDVvZx2VFOGHOCZfZKa07O65Hm12S9mF+NSetIuyHJtDdOrzJj
9qunhbKwN/Yy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org