Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233382e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          z7b+yiGiDxVQNb2ZgkhLaf4+4qCaUZZd0MGhE9nhyE4=
Subject key identifier:   50:DB:00:36:41:40:22:F0:6C:07:A4:7F:85:72:90:48:51:5F:BE:16
Certificate issuer:       /CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
Certificate serial:       06A6906EA2E00AC228220933F312FC368E901492
Authority key identifier: B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa
Signing time:             Fri 17 Nov 2023 15:52:40 +0000
ROA not before:           Fri 17 Nov 2023 15:47:40 +0000
ROA not after:            Fri 15 Nov 2024 15:52:40 +0000
asID:                     61910
IP address blocks:        201.87.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a6:90:6e:a2:e0:0a:c2:28:22:09:33:f3:12:fc:36:8e:90:14:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Validity
            Not Before: Nov 17 15:47:40 2023 GMT
            Not After : Nov 15 15:52:40 2024 GMT
        Subject: CN=50DB0036414022F06C07A47F85729048515FBE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:80:d5:63:80:78:80:46:0d:cd:58:0f:b8:
                    c1:e3:4a:18:04:20:ee:53:94:bb:8b:98:08:25:50:
                    a3:62:20:62:d7:40:30:9e:fc:ae:76:db:79:87:4b:
                    c3:42:50:4e:3d:79:38:1b:97:6e:60:f2:f8:59:ea:
                    71:7b:f2:89:63:e0:ef:e6:c3:e2:13:66:a3:e3:a1:
                    59:af:84:67:c1:6b:62:e1:b2:14:87:53:57:e5:54:
                    0b:ec:be:b1:6c:26:fc:1b:17:ca:94:d3:76:16:77:
                    e4:a2:94:11:c9:72:4d:b3:8f:18:be:92:65:13:d0:
                    5b:c3:ed:b5:0e:e8:3d:c2:34:f3:c1:53:31:d5:82:
                    53:30:07:a1:0e:79:f4:eb:d2:bf:89:a6:8c:44:90:
                    bf:8c:c8:a9:90:d4:05:d0:67:b9:9e:50:ea:11:f7:
                    88:45:4c:2e:cb:ef:2d:50:c4:a3:79:24:ba:60:d5:
                    97:ab:aa:4c:cf:01:00:b3:c6:80:92:ee:f9:82:9c:
                    09:16:81:e7:96:8f:fb:e1:1b:7b:4f:9e:c3:4d:ca:
                    3f:8a:2b:fa:e4:a1:ef:26:e4:da:4c:29:0d:58:e4:
                    42:05:7b:d3:7e:60:09:fd:af:c7:63:74:d9:b5:47:
                    ea:67:95:b8:56:58:d0:d2:e2:2b:8d:78:c2:b3:ea:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:00:36:41:40:22:F0:6C:07:A4:7F:85:72:90:48:51:5F:BE:16
            X509v3 Authority Key Identifier:
                keyid:B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:70:25:dc:c5:65:7d:a0:5d:79:e5:47:3e:28:97:c7:f3:
         8f:72:17:39:ff:cf:67:28:16:6f:2c:2f:7e:6f:ac:4b:30:88:
         07:6f:9c:ee:96:87:de:ff:ec:6c:ec:35:17:87:ac:72:0c:8a:
         01:46:83:58:f9:8d:24:42:9a:d8:e4:b4:f4:d0:af:78:2a:7e:
         da:3b:15:67:34:68:73:74:04:bd:73:21:86:2c:09:6e:f8:86:
         b4:d9:bb:72:af:54:96:21:3a:a7:96:86:6c:e1:9b:af:a7:47:
         91:3c:bb:19:1d:aa:d9:8a:7b:48:df:27:d6:43:ba:3f:b8:58:
         2d:11:17:ae:5c:05:2a:70:98:41:13:1c:cf:92:2a:6e:b9:80:
         05:18:17:59:d7:2b:ec:ef:0e:65:f6:6d:90:67:b9:70:ae:31:
         cc:2c:a2:05:ed:92:f5:d1:41:88:89:8f:8b:de:4f:1b:41:98:
         07:02:6d:58:9e:5d:b4:22:df:12:cc:2c:80:89:58:4c:54:6b:
         1f:a5:0a:ec:62:34:ed:5b:1b:65:d1:41:47:08:c8:b3:4e:c7:
         2b:84:d3:8e:31:5c:32:a7:7a:6e:02:0a:23:ac:39:91:f0:a6:
         f5:93:f8:1a:67:9d:1a:10:45:e3:63:72:49:52:4e:01:78:44:
         85:34:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org