Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32322d3233203d3e203631393130.roa (raw, json)
Hash identifier:          hmCzzEK7zHRvp+MtXuV17HaJ7TuMZ8KqnSwYaD1jKiU=
Subject key identifier:   0C:A4:8C:8B:D5:CF:02:0B:6C:6E:70:FB:EA:79:D4:D6:EC:5E:B1:4E
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       5172F5F7B24E906F346E3965601D8A8EDBD1C33C
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:40 +0000
ROA not before:           Fri 17 Nov 2023 15:47:40 +0000
ROA not after:            Fri 15 Nov 2024 15:52:40 +0000
asID:                     61910
IP address blocks:        201.87.232.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:72:f5:f7:b2:4e:90:6f:34:6e:39:65:60:1d:8a:8e:db:d1:c3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:40 2023 GMT
            Not After : Nov 15 15:52:40 2024 GMT
        Subject: CN=0CA48C8BD5CF020B6C6E70FBEA79D4D6EC5EB14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:14:2a:19:51:96:d6:ed:ad:0a:40:56:9a:
                    db:96:db:17:94:7f:2a:8b:cc:bf:c5:a7:cc:49:70:
                    44:9d:74:b2:bd:9c:30:b1:66:e9:51:f3:fd:59:ac:
                    3a:90:89:60:fd:de:e5:1b:5b:fe:64:11:85:3c:87:
                    7e:15:ac:89:00:16:58:ac:e5:cc:60:a8:2e:1e:52:
                    15:c4:2d:68:e7:d3:d0:68:25:84:01:9f:15:07:a6:
                    fd:1c:61:0f:f7:74:75:b9:8a:1d:26:87:c1:ad:bd:
                    1e:da:79:37:39:61:39:95:9d:fb:55:ce:af:2a:0e:
                    45:4c:49:5b:85:cc:63:0f:a2:6f:fa:1e:6f:5b:b1:
                    92:55:f0:ff:71:f7:2a:20:55:9c:71:89:f2:bf:6e:
                    c2:5e:dc:ea:fd:dd:80:f2:d0:d6:5b:77:68:9a:80:
                    66:17:fe:58:13:3a:84:c7:49:a7:6e:c5:c8:ab:dc:
                    1a:e6:9f:6c:64:73:21:8d:8b:22:3a:96:bf:68:f8:
                    e1:54:e2:92:f4:52:c5:0d:31:df:cb:eb:d3:0f:b3:
                    36:b9:4d:82:0c:d2:5f:9a:28:ab:50:28:ba:f5:1f:
                    b0:ba:de:77:24:02:27:83:ba:a2:00:4d:d9:5c:11:
                    01:b2:51:13:a5:36:5a:10:e9:08:db:b6:5a:15:7c:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:8C:8B:D5:CF:02:0B:6C:6E:70:FB:EA:79:D4:D6:EC:5E:B1:4E
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32322d3233203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:65:2a:a7:15:f2:12:66:37:8a:95:04:90:9f:ab:5a:fa:fa:
         2d:2b:c5:a6:15:80:8e:7a:26:1a:d2:46:03:83:e6:a3:ae:c1:
         4b:46:1c:a9:bb:6a:8e:4d:b3:f2:b2:3a:08:fa:b0:b2:80:ea:
         c3:08:1d:e9:3c:3d:e6:36:cc:78:f5:b1:d0:43:fd:88:c3:6b:
         fb:97:61:14:10:b2:55:b6:b9:05:0d:19:7c:cd:0e:e2:64:a6:
         2f:04:25:a5:ae:4d:d4:7d:92:2e:34:c7:3d:fe:84:9f:b6:07:
         2d:f8:9f:c8:0e:bc:63:be:c5:b5:20:20:f1:50:12:cb:c8:82:
         5c:67:54:28:9a:2d:09:93:2b:e6:67:02:4c:66:ad:57:12:37:
         8d:3e:7e:1b:54:e1:2c:f9:99:1b:82:ef:87:2a:ca:8e:21:6b:
         46:15:11:88:f7:56:00:84:c0:a9:0c:be:5b:96:d3:f9:95:38:
         02:04:34:40:7f:96:b5:78:91:05:83:2d:26:bc:fb:dc:2c:9b:
         fe:c1:2c:c0:01:05:48:28:81:c2:30:2d:f5:bf:0c:a6:d4:86:
         ce:e3:2c:55:07:ee:51:6f:e4:48:38:1f:f5:b3:b9:8b:2c:ca:
         db:2a:be:8f:63:b0:45:f8:7d:fc:3e:ea:5b:0f:8c:31:7b:51:
         83:de:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org