Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233382e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          9rWLCRjZBDwG92vl1Ls/MIKN2BMFL73V9IhC2/jK2HI=
Subject key identifier:   1A:58:E2:90:DF:A1:10:19:D1:F6:64:4E:E4:7F:A0:2A:82:04:D9:DD
Certificate issuer:       /CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
Certificate serial:       653B714895343C29290F3EDAAC995749FAB052E2
Authority key identifier: E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa
Signing time:             Mon 27 Mar 2023 01:27:14 +0000
ROA not before:           Mon 27 Mar 2023 01:22:14 +0000
ROA not after:            Mon 25 Mar 2024 01:27:14 +0000
asID:                     61910
IP address blocks:        201.87.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3b:71:48:95:34:3c:29:29:0f:3e:da:ac:99:57:49:fa:b0:52:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
        Validity
            Not Before: Mar 27 01:22:14 2023 GMT
            Not After : Mar 25 01:27:14 2024 GMT
        Subject: CN=1A58E290DFA11019D1F6644EE47FA02A8204D9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:0b:81:51:ac:fd:ec:14:e1:40:e7:a7:cd:
                    35:4d:90:7f:06:35:49:57:3a:87:18:00:f4:ca:f7:
                    82:c7:ca:78:c4:bd:05:d5:4e:d7:32:03:82:49:fc:
                    c8:1b:eb:f1:ad:d9:72:2f:78:13:50:7a:9d:bf:9e:
                    8c:04:83:cf:a3:5e:e1:cc:13:26:5c:a9:e0:50:85:
                    15:6b:03:63:41:75:51:e7:32:74:55:3e:7d:ff:dd:
                    31:11:6f:22:3f:1d:a4:22:6d:2f:2e:14:87:7c:a0:
                    99:3e:65:9a:01:94:b6:2c:b9:81:5a:11:da:a5:60:
                    67:37:ee:ff:c7:96:60:6a:93:70:d4:d1:09:74:ff:
                    7e:7c:70:b7:ab:99:7f:ba:a5:17:83:93:76:79:98:
                    c4:1a:47:57:32:e0:12:60:3c:f1:24:a6:58:a1:07:
                    a0:95:d2:ed:17:c4:3a:e5:2d:ec:eb:01:2b:1e:94:
                    0b:0f:45:47:bd:d3:b2:a3:08:87:0f:3b:5f:59:8b:
                    36:ef:6e:08:75:c6:3e:47:6a:34:ce:20:b5:7f:2e:
                    0d:eb:2b:ce:90:99:14:5f:91:20:2c:00:df:5a:5e:
                    da:0a:6c:ca:5c:c2:99:f4:ae:6b:cd:a7:f5:69:99:
                    db:2d:18:2f:25:f5:00:91:a0:f8:e4:fc:5e:f9:3f:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:E2:90:DF:A1:10:19:D1:F6:64:4E:E4:7F:A0:2A:82:04:D9:DD
            X509v3 Authority Key Identifier:
                keyid:E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:6b:bd:f3:28:ee:0c:a2:9a:9f:4f:9c:49:b9:72:d6:ee:
         8f:fe:b8:81:32:d2:a7:da:b3:6b:9d:3e:0b:9a:72:ae:1e:85:
         7c:6d:8f:ad:29:45:1e:59:83:0a:b1:81:c9:3f:55:79:d6:b6:
         c4:ee:d7:08:f6:09:63:cd:60:a1:e4:9c:dd:28:9e:83:fc:de:
         b8:00:60:4a:23:29:1f:70:52:ce:b2:ba:d4:0a:fd:af:bb:d0:
         18:8c:f6:e4:4e:54:f7:90:a4:71:aa:c6:1e:f4:91:e8:75:fa:
         42:69:20:20:eb:9b:15:8f:fd:77:76:8b:38:99:9f:0b:ed:cf:
         3c:a1:45:b6:a2:b8:16:57:94:20:aa:af:5c:28:a1:0b:f2:a7:
         80:0d:24:fd:7f:2b:4f:1c:8b:cd:d3:a9:af:77:b6:99:ce:81:
         f4:f7:dd:bf:ff:46:f3:95:aa:12:0a:71:2f:ff:64:9c:48:32:
         11:fe:94:92:93:8f:75:61:88:f1:82:52:02:94:3b:c4:37:49:
         e1:aa:06:ee:78:78:72:50:10:53:fd:57:0a:78:bd:ca:73:95:
         0e:39:39:26:d4:e6:4a:37:af:e2:4e:6f:74:f9:8b:a2:0a:27:
         b9:19:c1:c4:a2:60:80:02:70:f1:6d:df:4f:8c:01:88:88:0c:
         32:c5:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org