Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233342e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233342e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          7ohPN6CgZhqFauyYHQc3imP7vuCX3PUI1CAp1muNwYY=
Subject key identifier:   F3:9E:2F:E3:59:07:22:F8:8A:12:B5:43:99:27:80:D8:1F:D4:6C:A0
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       3A770AEFF8B2816E304CD1926C4156FDBFDC800D
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233342e302f32342d3234203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:39 +0000
ROA not before:           Fri 17 Nov 2023 15:47:39 +0000
ROA not after:            Fri 15 Nov 2024 15:52:39 +0000
asID:                     61910
IP address blocks:        201.87.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:0a:ef:f8:b2:81:6e:30:4c:d1:92:6c:41:56:fd:bf:dc:80:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:39 2023 GMT
            Not After : Nov 15 15:52:39 2024 GMT
        Subject: CN=F39E2FE3590722F88A12B543992780D81FD46CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:8c:8d:cd:4c:f6:eb:28:a0:6a:12:10:3b:
                    5f:57:f2:ae:01:08:54:28:fe:17:c6:ce:65:40:d5:
                    7e:29:38:bd:70:a0:46:8d:db:a1:19:18:df:d7:44:
                    1b:e6:f3:39:0c:f1:52:05:57:ad:82:ad:3e:e3:ca:
                    90:53:71:2e:8a:e3:e6:3d:b0:c3:9b:38:ca:90:e7:
                    ee:62:7b:a2:34:ad:e5:bf:dd:bb:5e:f7:a2:7a:3c:
                    48:d0:12:1c:19:0b:4a:3d:eb:8b:4f:e6:87:3c:0b:
                    79:10:06:22:27:db:cf:a5:77:5d:6b:3c:49:e5:fc:
                    d4:50:92:9b:5b:83:c0:a8:b7:e5:7b:c4:36:3d:4f:
                    34:fd:8c:b1:4c:4d:56:1d:00:16:da:14:9f:aa:71:
                    40:8f:b3:88:22:04:05:cb:84:f2:a8:72:02:65:1b:
                    b5:34:c3:2b:cc:f8:2b:6f:48:50:20:c2:97:30:88:
                    0c:6b:79:88:18:ae:f9:4a:20:31:a9:f6:71:fd:68:
                    0f:74:af:74:d7:41:65:43:5a:04:3e:9a:84:d8:9a:
                    8d:96:d1:92:ad:a0:1b:ca:0f:52:a1:4f:24:bd:28:
                    bf:24:32:15:f7:05:80:c9:81:31:4d:de:53:7b:19:
                    7a:a2:36:f2:a1:8c:cb:48:f8:f5:96:34:b3:bc:b6:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9E:2F:E3:59:07:22:F8:8A:12:B5:43:99:27:80:D8:1F:D4:6C:A0
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233342e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:83:b4:8c:e2:12:60:a6:3d:ee:93:a2:c5:53:25:5f:97:de:
         3f:ef:ac:e1:80:47:4c:a6:93:29:c5:37:3e:85:49:ab:1b:16:
         03:20:98:ad:69:3b:ce:cc:84:24:3b:e6:f4:fb:65:c2:19:ce:
         0c:fd:ee:28:4c:cb:83:f4:99:aa:b2:3b:93:07:ef:6d:58:15:
         b2:f7:3a:7c:ac:1f:dd:59:dd:e9:85:ae:5b:84:8a:a9:05:db:
         5b:3c:26:18:75:f1:ff:49:35:1c:b8:a3:4c:52:ed:9e:2b:45:
         59:33:ca:77:e8:71:21:fa:4b:81:d7:4c:92:3c:59:fc:94:55:
         8e:7a:90:4a:bc:2a:04:bf:1e:38:b8:33:7c:1a:82:ce:24:46:
         66:8d:c3:6f:df:1d:0e:1f:d0:6a:6b:bc:30:fa:be:fd:7d:2e:
         6e:ad:49:44:9a:c1:c0:c8:2e:fe:43:da:47:e9:62:bd:3c:9f:
         df:cf:5c:da:05:d7:c2:73:85:b8:fd:9f:a4:f2:16:f1:5f:ce:
         f8:45:78:53:08:ec:f5:00:90:34:7a:94:85:56:19:6c:66:ef:
         b1:95:31:de:0a:c1:5a:5a:70:5a:28:eb:51:de:35:f8:4e:20:
         53:b4:c7:74:2c:b5:87:49:b5:af:1b:5d:ab:2f:32:c7:8c:23:
         da:a3:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org