Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233342e302f32332d3233203d3e203631393130.roa
File:                     3230312e38372e3233342e302f32332d3233203d3e203631393130.roa (raw, json)
Hash identifier:          IReR05sbWwDL/6+K4MF6xP2KCR2Fiff3WEyJacQxPUU=
Subject key identifier:   3A:CD:E5:A8:CD:10:70:74:FD:64:94:25:40:D0:AE:A4:C8:37:91:50
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       160ADE4D07B3F992780D249596C278AF8B9DD657
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233342e302f32332d3233203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:39 +0000
ROA not before:           Fri 17 Nov 2023 15:47:39 +0000
ROA not after:            Fri 15 Nov 2024 15:52:39 +0000
asID:                     61910
IP address blocks:        201.87.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:de:4d:07:b3:f9:92:78:0d:24:95:96:c2:78:af:8b:9d:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:39 2023 GMT
            Not After : Nov 15 15:52:39 2024 GMT
        Subject: CN=3ACDE5A8CD107074FD64942540D0AEA4C8379150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:f9:cc:84:fc:77:2a:2b:14:1a:42:9c:24:
                    a1:9e:71:9a:58:39:16:f2:56:eb:03:04:f2:3c:ef:
                    6f:cc:a8:59:98:8f:c5:15:cc:44:ed:47:a3:35:ee:
                    44:25:9f:a7:31:a6:2d:83:33:de:d0:95:f9:0f:5b:
                    bf:30:8a:89:ef:da:d2:7a:0f:ac:48:c0:66:73:b8:
                    66:a5:fd:0a:e2:80:b7:5c:28:b1:21:f4:4c:9f:06:
                    bd:27:10:6e:ab:aa:e6:29:29:41:c0:18:e2:ae:4f:
                    a2:29:18:2a:e1:93:10:f2:93:ed:66:aa:4a:9f:71:
                    74:81:06:63:5f:7c:1a:b0:a2:f4:55:d2:14:ea:f0:
                    fc:7e:32:98:53:82:a6:af:23:73:cb:08:89:54:af:
                    63:97:10:b8:37:1b:26:b6:88:3d:73:1d:ec:a1:90:
                    d9:de:3a:5c:66:bf:ce:04:be:63:f9:02:86:09:b0:
                    4f:38:fc:f1:02:f8:7b:7e:c2:20:ee:14:83:5c:82:
                    88:0e:20:62:71:26:84:00:75:54:e4:1c:18:f4:84:
                    98:26:f0:9f:95:ab:73:0b:e0:20:e6:c7:1a:77:8e:
                    ee:ba:73:ce:77:cc:ef:be:58:69:0c:1c:12:19:c8:
                    51:d7:52:a6:cd:40:d8:87:a9:e2:9c:4d:06:9b:10:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CD:E5:A8:CD:10:70:74:FD:64:94:25:40:D0:AE:A4:C8:37:91:50
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233342e302f32332d3233203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:c8:a9:e4:6f:66:45:8e:d1:72:25:ec:07:8f:c0:7b:2c:
         16:c8:16:7d:98:a2:12:18:3b:54:62:3a:dc:27:b6:3d:50:70:
         0e:81:ef:bb:bd:e3:5e:dc:a1:7b:72:a8:f5:39:2f:59:96:f4:
         76:c7:7b:60:03:1b:a4:00:04:19:ac:ef:43:72:58:f9:83:e2:
         c3:c5:48:f0:ca:b3:ee:f3:39:10:73:d4:db:17:af:8f:e8:8f:
         ad:d9:41:76:37:7d:0c:ee:77:5b:33:55:79:20:a4:f0:9c:44:
         db:36:37:54:16:6c:4f:ac:a2:f0:3b:48:c6:70:9b:0f:21:eb:
         45:77:69:9b:29:0d:89:f8:95:c3:16:86:79:ae:20:2b:fb:cc:
         18:fa:14:ee:7d:25:e5:ff:db:a7:45:c5:5d:9e:bb:6a:6b:f3:
         2c:8e:b3:95:90:e2:6a:d0:50:5a:f1:42:1c:b0:72:a5:e9:bf:
         23:78:8b:d0:55:b5:3f:d4:e7:a1:05:53:8f:a7:a2:68:16:74:
         e4:ea:01:c1:79:93:bb:ae:4c:50:51:cd:bc:c3:41:db:d8:bb:
         e5:06:30:fc:fb:54:48:2b:b7:7a:86:55:f4:46:23:5a:75:41:
         95:51:21:e2:9c:ca:2f:07:0a:a9:ac:cc:8b:b5:13:ee:f0:c7:
         7d:b0:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org