Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32332d3233203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32332d3233203d3e203631393130.roa (raw, json)
Hash identifier:          i2qCtcK2KD3GZu1LIQiLjrNxrE4YvANZaKXy8PjbiDU=
Subject key identifier:   32:3B:E5:B7:E9:7A:92:4D:1F:0D:92:AF:2A:C9:10:63:24:F9:BD:81
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       1DAA5BFA529D822CCBC5EEFE005C7C049654671F
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32332d3233203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:41 +0000
ROA not before:           Fri 17 Nov 2023 15:47:41 +0000
ROA not after:            Fri 15 Nov 2024 15:52:41 +0000
asID:                     61910
IP address blocks:        201.87.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:aa:5b:fa:52:9d:82:2c:cb:c5:ee:fe:00:5c:7c:04:96:54:67:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:41 2023 GMT
            Not After : Nov 15 15:52:41 2024 GMT
        Subject: CN=323BE5B7E97A924D1F0D92AF2AC9106324F9BD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:ce:a4:ce:e3:8a:2a:21:39:23:1e:2a:f2:
                    b9:a9:d9:14:b3:90:d2:d7:ca:36:13:78:a1:28:d8:
                    93:f7:e2:a7:75:ba:bd:a1:d6:c5:d2:dd:28:6f:98:
                    70:35:46:91:ac:7b:ea:86:c2:0b:5d:57:aa:1c:5f:
                    95:29:25:93:bd:bf:50:8b:ad:23:e2:5c:c3:4e:8a:
                    1a:3c:5a:ec:b6:95:d1:70:d8:e2:de:bd:d2:de:ca:
                    97:e4:63:3b:3c:06:90:35:0c:b7:7d:0c:c3:55:68:
                    91:9d:69:50:84:93:60:73:70:0e:79:d3:70:5a:22:
                    b5:5d:23:f4:ea:ab:13:91:17:6b:76:50:65:cc:b5:
                    8f:6c:42:ba:bc:5c:cc:ac:f3:d5:68:c9:13:29:2e:
                    55:87:49:12:b5:fa:90:05:6b:56:d0:31:ca:6a:11:
                    74:28:d0:ab:77:1c:3e:fa:41:e5:e7:ab:93:a8:dd:
                    ad:a1:5f:b0:83:35:63:ad:ef:6a:75:35:bf:1b:d2:
                    6e:67:b1:54:24:dd:fc:eb:a9:86:f2:e6:23:c0:ee:
                    14:3c:10:46:a7:3a:75:18:e7:9e:89:48:2f:c5:f9:
                    b4:05:30:3b:9d:09:ac:48:fe:d7:09:17:6d:a0:cb:
                    32:2d:52:05:35:e6:58:a4:31:ee:c5:0e:38:08:1e:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3B:E5:B7:E9:7A:92:4D:1F:0D:92:AF:2A:C9:10:63:24:F9:BD:81
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233322e302f32332d3233203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:c6:5d:ad:fa:0f:f9:0b:7d:47:20:a4:39:ae:ea:73:08:
         4e:de:2e:33:c4:39:62:6e:99:48:e7:f0:c7:c4:4d:1d:19:ac:
         32:57:19:39:82:fc:82:da:d9:6e:2a:91:40:36:9c:e0:6a:2f:
         64:e5:23:3d:08:85:5f:fd:da:58:34:e3:f9:88:80:db:59:80:
         e7:2e:e7:96:a7:98:96:00:06:bd:07:26:27:a6:8d:9d:48:ea:
         55:fa:2e:1e:0b:12:ce:76:ae:42:a7:13:bb:c2:d2:b8:71:ed:
         87:7b:9f:eb:25:f1:ba:77:62:b7:52:78:3c:fc:03:c1:74:29:
         be:9b:96:e2:26:93:87:c1:5f:3e:4a:cf:16:5a:73:97:c4:d3:
         f7:98:08:70:e0:88:79:ea:8f:fd:9d:9a:d6:6b:72:b6:bd:e1:
         35:b0:57:96:b7:92:a6:11:0c:a2:5e:9d:bf:ac:c5:cf:0f:c7:
         04:25:de:83:65:c1:73:78:91:48:8d:4b:40:1d:67:b1:46:42:
         23:3c:9c:39:37:58:7f:62:66:b3:37:b0:c2:32:2c:0f:2f:ce:
         6b:3e:87:85:ae:ec:e0:83:8c:2d:60:94:e6:91:01:e5:b5:44:
         c8:35:b4:0a:c5:0e:f1:eb:53:fe:fd:63:5b:cf:ed:23:7e:86:
         4b:56:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org