Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3138372e34352e34382e302f32302d3234203d3e20323638333233.roa
File:                     3138372e34352e34382e302f32302d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          AijakrAaQV7qfVZaA5E+HQ/oxXc7HmUPp5ODna9HcBs=
Subject key identifier:   68:0A:F4:15:9B:9C:07:D1:29:C8:E1:A1:8A:07:0F:F6:06:41:EF:C8
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       2529DDCAC898F54EFCBB4E6248DF184EA8D996F7
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3138372e34352e34382e302f32302d3234203d3e20323638333233.roa
Signing time:             Tue 19 Mar 2024 13:01:15 +0000
ROA not before:           Tue 19 Mar 2024 12:56:15 +0000
ROA not after:            Tue 18 Mar 2025 13:01:15 +0000
asID:                     268323
IP address blocks:        187.45.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:dd:ca:c8:98:f5:4e:fc:bb:4e:62:48:df:18:4e:a8:d9:96:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Mar 19 12:56:15 2024 GMT
            Not After : Mar 18 13:01:15 2025 GMT
        Subject: CN=680AF4159B9C07D129C8E1A18A070FF60641EFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:81:82:17:ff:e9:16:11:e9:95:e2:ff:a3:
                    bd:9b:ba:14:20:96:0b:4b:f9:fe:6f:2c:a2:6e:ea:
                    78:00:5a:d3:98:51:3a:5e:15:de:89:a2:8f:cb:ea:
                    5b:7d:56:b0:b3:b6:7d:7d:4c:06:2a:e9:ef:21:7c:
                    81:6e:eb:cb:70:c3:43:c6:28:ae:59:21:f9:f6:57:
                    3a:8a:fb:84:7e:53:95:23:be:09:61:1a:7f:32:35:
                    96:7e:fa:49:e4:b8:ed:2b:38:aa:05:aa:a9:aa:dc:
                    7e:48:0e:93:84:f9:16:3f:44:d7:e1:ed:6e:ad:3f:
                    da:a6:e2:93:0b:9f:40:11:2e:e0:a7:52:6c:73:a8:
                    12:f2:22:31:26:bc:0e:e5:45:2e:47:16:b0:b1:2a:
                    2b:bb:79:58:c3:8d:b2:ed:ff:ac:a2:ca:3d:2d:46:
                    f6:9d:eb:3b:30:06:d1:36:3b:18:2c:9f:0c:bd:92:
                    9f:67:45:55:fb:53:a9:0f:ff:be:eb:a8:dd:e0:4e:
                    49:50:7a:64:1b:74:a1:fc:8a:84:c3:8c:2d:46:b7:
                    dc:93:e1:39:2b:7d:06:69:9b:e1:29:a2:79:22:24:
                    62:97:72:1f:e4:cc:29:98:d7:ad:52:3b:ea:57:28:
                    6a:65:4c:96:cd:ed:2e:7d:dc:8b:7a:7e:94:0d:83:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0A:F4:15:9B:9C:07:D1:29:C8:E1:A1:8A:07:0F:F6:06:41:EF:C8
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3138372e34352e34382e302f32302d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:c7:ef:78:f1:e0:0c:e2:40:45:ad:14:3f:d0:68:7b:d8:
         f2:b4:b4:d1:62:fd:5a:0b:4d:e2:e1:64:a8:24:bc:45:d4:c2:
         16:99:af:6f:7f:5d:ac:69:f0:b3:1c:b4:1d:aa:08:54:03:5a:
         73:d7:ab:d4:00:8a:13:67:a9:33:ad:73:d2:e2:92:77:b3:32:
         de:51:a0:ba:1f:13:58:b4:55:9c:aa:d7:c9:7c:e4:f4:35:ca:
         07:7f:03:d0:a5:5a:8b:03:0e:c5:6f:a1:37:ee:c2:18:4c:5b:
         65:55:68:ba:b0:ad:f5:af:f5:6f:7c:79:e5:81:3d:65:bc:ab:
         1f:56:57:c1:bb:63:80:65:32:87:79:1f:94:63:3b:6c:6d:40:
         50:94:da:31:f9:71:3b:3e:6d:30:77:7a:31:e5:2c:f8:fc:66:
         cd:86:a5:72:10:ae:10:b4:b4:ef:33:bf:4a:76:65:6f:80:38:
         c8:12:81:0e:c6:21:2a:5b:71:c6:a0:3a:74:2b:d3:d0:2d:c6:
         5a:1f:07:40:e5:3c:ac:31:11:e3:46:52:50:dd:6e:9a:83:86:
         a0:ad:7c:3a:8c:e7:53:91:49:e1:21:b7:8c:e2:78:ab:78:fe:
         4b:f7:ca:f6:5a:d3:3b:f1:eb:00:ec:6f:fc:07:ed:60:e2:9c:
         17:30:55:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJSndysiY9U78u05iSN8YTqjZlvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBREFBODY2MTRGNkU0QzNCMTBGNDhEOUFCRDUwMzc4
OTYyRDI5NTAeFw0yNDAzMTkxMjU2MTVaFw0yNTAzMTgxMzAxMTVaMDMxMTAvBgNV
BAMTKDY4MEFGNDE1OUI5QzA3RDEyOUM4RTFBMThBMDcwRkY2MDY0MUVGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJ4GCF//pFhHpleL/o72buhQg
lgtL+f5vLKJu6ngAWtOYUTpeFd6Joo/L6lt9VrCztn19TAYq6e8hfIFu68tww0PG
KK5ZIfn2VzqK+4R+U5UjvglhGn8yNZZ++knkuO0rOKoFqqmq3H5IDpOE+RY/RNfh
7W6tP9qm4pMLn0ARLuCnUmxzqBLyIjEmvA7lRS5HFrCxKiu7eVjDjbLt/6yiyj0t
Rvad6zswBtE2Oxgsnwy9kp9nRVX7U6kP/77rqN3gTklQemQbdKH8ioTDjC1Gt9yT
4TkrfQZpm+EponkiJGKXch/kzCmY161SO+pXKGplTJbN7S593It6fpQNg1TNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaAr0FZucB9EpyOGhigcP9gZB78gwHwYDVR0j
BBgwFoAUTa2qhmFPbkw7EPSNmr1QN4li0pUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFo
bmYvMC80REFEQUE4NjYxNEY2RTRDM0IxMEY0OEQ5QUJENTAzNzg5NjJEMjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREQURBQTg2NjE0RjZFNEMz
QjEwRjQ4RDlBQkQ1MDM3ODk2MkQyOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3QVpWRnB1bjhEUmNmNzI3TW9yS2J0V3Z2dHpuQVNlejJIdVhwSDgxaG5mLzAv
MzEzODM3MmUzNDM1MmUzNDM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuy0wMA0GCSqGSIb3DQEBCwUAA4IBAQArJMfvePHg
DOJARa0UP9Boe9jytLTRYv1aC03i4WSoJLxF1MIWma9vf12safCzHLQdqghUA1pz
16vUAIoTZ6kzrXPS4pJ3szLeUaC6HxNYtFWcqtfJfOT0NcoHfwPQpVqLAw7Fb6E3
7sIYTFtlVWi6sK31r/VvfHnlgT1lvKsfVlfBu2OAZTKHeR+UYztsbUBQlNox+XE7
Pm0wd3ox5Sz4/GbNhqVyEK4QtLTvM79KdmVvgDjIEoEOxiEqW3HGoDp0K9PQLcZa
HwdA5TysMRHjRlJQ3W6ag4agrXw6jOdTkUnhIbeM4nireP5L98r2WtM78esA7G/8
B+1g4pwXMFUl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org