Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0/3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa
File:                     3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa (raw, json)
Hash identifier:          GBovelobGJjk7AdvO4GqdTp4hvukyzO9d+8prBbA2aE=
Subject key identifier:   37:57:AF:88:05:1F:30:72:D0:3A:6F:C2:B1:F0:95:35:73:33:69:10
Certificate issuer:       /CN=479E06F5B6EE099F824DB92D356B4DBA466A88B2
Certificate serial:       2BB640E41AD2E39D434454D94FF277BB86CBB695
Authority key identifier: 47:9E:06:F5:B6:EE:09:9F:82:4D:B9:2D:35:6B:4D:BA:46:6A:88:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/479E06F5B6EE099F824DB92D356B4DBA466A88B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0/3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa
Signing time:             Thu 15 Jun 2023 22:21:01 +0000
ROA not before:           Thu 15 Jun 2023 22:16:01 +0000
ROA not after:            Thu 13 Jun 2024 22:21:01 +0000
asID:                     61872
IP address blocks:        201.149.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b6:40:e4:1a:d2:e3:9d:43:44:54:d9:4f:f2:77:bb:86:cb:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479E06F5B6EE099F824DB92D356B4DBA466A88B2
        Validity
            Not Before: Jun 15 22:16:01 2023 GMT
            Not After : Jun 13 22:21:01 2024 GMT
        Subject: CN=3757AF88051F3072D03A6FC2B1F0953573336910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:c8:4c:f4:3a:7a:c1:20:d5:c4:b4:3f:23:
                    64:69:c9:8d:95:a8:e1:e5:a0:1f:98:28:f6:3f:15:
                    ba:6a:ba:41:4a:1c:3d:78:17:0e:b4:f2:f0:8c:ba:
                    34:b7:6e:1b:d7:a4:ef:16:ba:8e:4d:f8:ae:8c:0e:
                    77:21:0c:fe:6d:12:16:92:33:99:76:12:a3:ce:75:
                    e1:01:42:9f:8e:20:a5:9f:4d:b3:62:60:e6:dd:78:
                    04:f2:6f:cd:da:1d:ba:ea:9d:2d:97:ad:83:a5:af:
                    71:26:2e:e6:f2:6d:4c:90:db:8f:28:16:8d:d7:cc:
                    94:98:8c:b0:65:2e:55:43:f3:85:6b:42:fe:a4:0f:
                    07:7d:9f:f2:2f:e6:d0:ef:50:8c:dc:de:d1:00:a6:
                    20:b2:28:c2:31:41:60:7a:5f:ca:5d:3b:98:c4:39:
                    ae:15:51:69:80:f0:8d:e6:06:6f:e6:0c:90:13:da:
                    c2:71:0f:97:a4:4e:d4:26:4b:6f:a3:f9:29:58:ac:
                    5f:9f:1b:6b:94:9c:e5:ce:6f:43:fe:c2:de:cf:16:
                    2b:ab:95:e7:6d:d5:75:1e:d3:de:09:f1:f5:68:8e:
                    bd:e3:81:3c:01:04:7b:15:56:dd:e6:2b:c9:73:92:
                    27:0e:20:b7:30:f5:0c:f4:8a:80:63:9e:81:9f:d9:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:AF:88:05:1F:30:72:D0:3A:6F:C2:B1:F0:95:35:73:33:69:10
            X509v3 Authority Key Identifier:
                keyid:47:9E:06:F5:B6:EE:09:9F:82:4D:B9:2D:35:6B:4D:BA:46:6A:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0/479E06F5B6EE099F824DB92D356B4DBA466A88B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/479E06F5B6EE099F824DB92D356B4DBA466A88B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0/3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:e7:ac:0a:f1:a2:0c:af:8c:32:f9:45:03:9a:6b:3a:22:
         14:77:94:bd:77:7a:0e:d1:b1:8c:b4:5e:23:c3:5e:fb:19:46:
         a1:07:65:54:10:79:ae:4b:de:2b:30:4d:b0:e6:34:25:5b:e3:
         48:d6:7a:23:7c:ad:0a:60:e2:31:93:cc:73:7a:7d:f0:d9:c9:
         b1:e5:20:b1:3b:6c:a0:25:cd:c1:2e:09:29:ef:8e:22:61:39:
         16:25:ed:83:b6:87:cd:1f:a8:c1:aa:dc:70:45:dd:f8:ce:29:
         87:2c:65:bc:66:3c:e2:3a:9b:92:b0:c8:b2:12:ce:cd:24:8b:
         51:bb:fb:1f:a2:99:4b:37:5b:98:56:2f:0f:5c:d4:bc:45:21:
         ce:c9:08:77:53:ac:b9:4f:86:ed:17:e7:1a:d7:9a:26:3a:97:
         f3:0c:ad:db:b4:13:7d:f3:32:e2:d8:ff:cc:91:a9:b2:a1:da:
         e9:71:52:88:dc:0a:79:ac:bd:96:c5:e8:9f:5a:0f:33:de:19:
         2e:63:9c:d3:06:98:cf:43:4a:f7:05:ae:01:ae:99:e6:ed:af:
         b3:4e:b8:73:f6:88:a8:fe:1e:3a:88:ca:af:ca:ae:d8:7b:4c:
         81:34:62:05:2f:37:cf:39:82:2d:5a:8c:5e:97:6e:90:27:33:
         65:65:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org