Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233392e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233392e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          NNSBu5QzO1K7e91EsmFbqe3i2IciSyzbNUzpvlkCSnQ=
Subject key identifier:   D3:DC:88:40:19:F9:72:73:AA:0C:C9:2B:AF:57:E1:E0:06:B0:78:E7
Certificate issuer:       /CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
Certificate serial:       0DFC8182B58914297999643F019E6A33AE3E4F32
Authority key identifier: E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233392e302f32342d3234203d3e203631393130.roa
Signing time:             Mon 27 Mar 2023 01:27:16 +0000
ROA not before:           Mon 27 Mar 2023 01:22:16 +0000
ROA not after:            Mon 25 Mar 2024 01:27:16 +0000
asID:                     61910
IP address blocks:        201.87.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fc:81:82:b5:89:14:29:79:99:64:3f:01:9e:6a:33:ae:3e:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94FF6CC132C12CE722E4D9EFDC852D280CC0827
        Validity
            Not Before: Mar 27 01:22:16 2023 GMT
            Not After : Mar 25 01:27:16 2024 GMT
        Subject: CN=D3DC884019F97273AA0CC92BAF57E1E006B078E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:4d:af:cc:df:30:f2:16:36:87:97:6e:99:
                    f2:02:4f:20:45:83:6a:e0:05:aa:7a:ca:d0:3f:ab:
                    00:bf:cd:3d:61:08:07:37:1f:f4:f8:b3:01:d4:71:
                    be:b5:e4:7d:8b:eb:dc:15:14:6f:6b:61:4b:2c:12:
                    25:7a:a1:a0:a5:32:f2:60:6c:0f:35:3e:9c:3b:34:
                    b7:36:a8:46:84:22:f1:52:d4:d2:fa:69:d1:0b:54:
                    fb:ff:dd:c2:bb:c8:0d:1d:7b:88:a2:76:4a:8b:6b:
                    29:c1:13:85:59:20:7c:ea:c6:23:4e:de:d9:e5:13:
                    ae:e6:4c:b3:78:62:84:1e:2d:82:5c:cd:ce:ce:27:
                    a2:c8:e8:65:5c:15:55:a3:13:a0:0d:87:b1:8d:3e:
                    a5:1e:b6:a7:3c:ea:be:b6:e9:47:45:08:7d:60:84:
                    51:6c:23:a0:ba:f6:a4:de:05:9e:b1:34:54:48:5f:
                    c8:20:c5:f3:dc:76:f7:94:49:ea:2c:a1:d4:de:9a:
                    e3:94:9b:58:bf:5c:f3:b8:09:cd:70:a4:65:78:a5:
                    ce:b0:b4:d6:e1:d5:16:6d:58:f3:06:68:ae:48:c5:
                    1a:90:4c:de:08:18:f7:af:55:0e:09:34:cc:60:85:
                    14:9f:d6:03:f8:b4:64:5c:51:4c:d4:35:6b:67:fc:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DC:88:40:19:F9:72:73:AA:0C:C9:2B:AF:57:E1:E0:06:B0:78:E7
            X509v3 Authority Key Identifier:
                keyid:E9:4F:F6:CC:13:2C:12:CE:72:2E:4D:9E:FD:C8:52:D2:80:CC:08:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94FF6CC132C12CE722E4D9EFDC852D280CC0827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/3230312e38372e3233392e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:d8:93:d0:df:6a:25:3d:e3:ef:e8:49:c8:7a:b5:08:2c:
         58:bf:6e:05:55:ad:81:07:14:af:76:11:f5:1c:73:d1:3d:5d:
         a1:49:26:d7:e5:4f:80:3c:74:16:09:eb:e1:82:63:95:6b:f0:
         ec:a1:d1:c9:9e:9b:21:06:be:17:bf:49:8d:0f:59:b9:50:3a:
         f9:78:89:dc:18:59:38:e5:60:58:f6:d9:8f:75:9a:e0:22:2b:
         e1:4f:68:42:a5:fa:92:af:c0:d5:83:ff:5d:ae:71:26:61:93:
         56:b4:82:40:74:81:8d:e7:4e:3c:b6:3e:fc:15:6e:d2:cc:c5:
         c0:3c:ec:10:97:14:14:ad:9e:c4:37:38:85:b0:a3:3f:15:8c:
         87:49:cf:bb:b7:1d:ec:59:3b:28:9c:3e:43:9b:b5:02:a3:42:
         8e:00:05:ee:47:ef:3a:78:42:ad:bd:f7:b8:3d:db:f1:41:c8:
         9d:cf:b8:b5:86:6c:35:c0:a6:39:09:36:33:18:40:5f:63:73:
         55:e5:8e:c8:84:ab:d7:d7:dd:ad:96:11:72:47:ab:16:82:33:
         7d:8f:bc:ba:8f:d3:a6:1e:64:6d:c9:78:1e:4e:f1:3d:83:2d:
         78:5a:cc:d9:3a:10:5e:bc:ff:62:68:f9:9d:61:6b:fc:7d:80:
         ed:a5:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org