Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233362e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          l3zoLO0fk+VdiwM1/lrJzVLwkOdEltcst1PeJvcY6Ww=
Subject key identifier:   B1:4F:AA:EA:CF:17:AD:74:1F:16:52:A7:73:F6:B5:26:85:C9:62:83
Certificate issuer:       /CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
Certificate serial:       0D9E8F38223A20F9400285CD413AB900BA600808
Authority key identifier: E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa
Signing time:             Mon 27 Mar 2023 01:27:07 +0000
ROA not before:           Mon 27 Mar 2023 01:22:07 +0000
ROA not after:            Mon 25 Mar 2024 01:27:07 +0000
asID:                     61910
IP address blocks:        201.87.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9e:8f:38:22:3a:20:f9:40:02:85:cd:41:3a:b9:00:ba:60:08:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
        Validity
            Not Before: Mar 27 01:22:07 2023 GMT
            Not After : Mar 25 01:27:07 2024 GMT
        Subject: CN=B14FAAEACF17AD741F1652A773F6B52685C96283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:42:84:44:9c:c6:fe:99:0a:1d:32:d1:75:
                    84:e6:c9:ea:cb:f2:89:82:2a:d6:c9:c2:eb:a9:44:
                    6e:7c:ce:7c:1d:b7:7e:0f:81:0d:4d:59:bf:90:ff:
                    f8:e0:44:9b:1a:67:c8:30:a7:01:e9:5a:61:84:61:
                    de:50:82:73:75:01:71:30:6b:37:1c:50:c9:f3:43:
                    e7:e3:c0:2f:01:c5:4a:de:b1:c7:8d:10:fb:92:d6:
                    38:69:99:20:a3:d4:3c:64:85:32:28:f2:42:9a:60:
                    69:23:d8:b9:f4:d2:48:9b:95:32:83:27:84:2b:9c:
                    cf:7e:92:71:bf:ca:60:88:5b:47:82:c4:82:1f:9f:
                    53:02:20:2f:de:df:67:6a:c8:c9:09:1b:e2:a5:ad:
                    00:65:e6:9c:5f:fd:fb:5b:cb:87:19:86:5b:66:db:
                    b0:38:a0:a5:f0:c4:21:ff:2e:19:4f:dc:ef:5a:6b:
                    47:da:cd:db:b1:89:56:ea:48:b9:e6:d7:d4:48:6b:
                    03:a9:7f:cd:f4:f0:9c:01:65:7a:e7:5f:3c:cc:9b:
                    ac:74:be:1a:45:d1:79:24:d4:3a:02:db:28:6e:b2:
                    f9:24:23:b9:df:39:ab:aa:36:8d:02:b5:05:93:75:
                    84:a5:b3:1b:42:ab:81:4b:fa:5e:08:5b:ca:b2:c1:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:AA:EA:CF:17:AD:74:1F:16:52:A7:73:F6:B5:26:85:C9:62:83
            X509v3 Authority Key Identifier:
                keyid:E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:60:5f:81:a1:ef:f4:b3:e8:35:ba:9b:e4:ed:69:63:c7:a7:
         6e:21:a5:be:1f:82:90:f6:41:fc:40:76:da:cf:45:d1:db:e5:
         02:81:82:56:1d:f6:1d:b4:11:3d:01:51:07:a3:6e:3a:ac:64:
         de:fd:96:f8:83:c7:cf:a5:90:67:e0:e2:c0:e7:fb:e8:3c:22:
         f2:bc:37:0a:a7:70:f5:15:5b:eb:47:a7:43:7b:7c:fd:9f:2d:
         c5:75:d4:a4:64:e8:35:b1:3f:ea:8f:de:82:85:8c:35:b3:ac:
         bd:07:5b:00:99:6c:2b:3a:ef:0c:ac:f8:82:68:f0:7a:a6:27:
         83:5f:a4:7f:95:9d:8d:05:27:1f:b3:75:da:5e:9f:65:21:d2:
         ab:01:0d:f7:81:80:0a:d3:e6:27:1e:16:1f:41:9d:d4:fe:eb:
         30:26:1f:fa:9c:7c:fd:0f:2a:8b:6a:64:6f:28:05:90:7d:54:
         dc:04:2f:5c:f1:15:9e:6f:05:86:2a:b3:81:ed:77:08:b8:5f:
         43:72:7f:70:3b:8c:16:da:d3:08:f9:ba:cb:d6:ec:96:d1:4c:
         ed:54:be:25:1d:a7:59:85:28:8b:92:a6:d4:1b:ca:57:cc:01:
         cc:36:23:52:66:c9:92:d0:8f:ef:cf:29:e5:3d:56:30:3d:63:
         79:e5:d3:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDZ6POCI6IPlAAoXNQTq5ALpgCAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk0RkY2Q0MxMzJDMTJDRTcyMkU0RDlFRkRDODUyRDI4
MENDMDgyNzAeFw0yMzAzMjcwMTIyMDdaFw0yNDAzMjUwMTI3MDdaMDMxMTAvBgNV
BAMTKEIxNEZBQUVBQ0YxN0FENzQxRjE2NTJBNzczRjZCNTI2ODVDOTYyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJkKERJzG/pkKHTLRdYTmyerL
8omCKtbJwuupRG58znwdt34PgQ1NWb+Q//jgRJsaZ8gwpwHpWmGEYd5QgnN1AXEw
azccUMnzQ+fjwC8BxUresceNEPuS1jhpmSCj1DxkhTIo8kKaYGkj2Ln00kiblTKD
J4QrnM9+knG/ymCIW0eCxIIfn1MCIC/e32dqyMkJG+KlrQBl5pxf/ftby4cZhltm
27A4oKXwxCH/LhlP3O9aa0fazduxiVbqSLnm19RIawOpf8308JwBZXrnXzzMm6x0
vhpF0Xkk1DoC2yhusvkkI7nfOauqNo0CtQWTdYSlsxtCq4FL+l4IW8qywW75AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsU+q6s8XrXQfFlKnc/a1JoXJYoMwHwYDVR0j
BBgwFoAU6U/2zBMsEs5yLk2e/chS0oDMCCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMC9FOTRGRjZDQzEzMkMxMkNFNzIyRTREOUVGREM4NTJEMjgwQ0MwODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5NEZGNkNDMTMyQzEyQ0U3
MjJFNEQ5RUZEQzg1MkQyODBDQzA4MjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzAv
MzIzMDMxMmUzODM3MmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVfsMA0GCSqGSIb3DQEBCwUAA4IBAQACYF+Boe/0
s+g1upvk7Wljx6duIaW+H4KQ9kH8QHbaz0XR2+UCgYJWHfYdtBE9AVEHo246rGTe
/Zb4g8fPpZBn4OLA5/voPCLyvDcKp3D1FVvrR6dDe3z9ny3FddSkZOg1sT/qj96C
hYw1s6y9B1sAmWwrOu8MrPiCaPB6pieDX6R/lZ2NBScfs3XaXp9lIdKrAQ33gYAK
0+YnHhYfQZ3U/uswJh/6nHz9DyqLamRvKAWQfVTcBC9c8RWebwWGKrOB7XcIuF9D
cn9wO4wW2tMI+brL1uyW0UztVL4lHadZhSiLkqbUG8pXzAHMNiNSZsmS0I/vzynl
PVYwPWN55dMf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org