Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/3230312e3134302e3235322e302f32322d3234203d3e203631383331.roa
File:                     3230312e3134302e3235322e302f32322d3234203d3e203631383331.roa (raw, json)
Hash identifier:          IYj9b4/dCiNKoKQ6T3hTL09/MXfLgy4mdRvhxPuM7Hs=
Subject key identifier:   24:37:D9:E0:C6:48:BE:B6:65:A2:D8:41:FD:44:B6:B6:D2:C0:5D:38
Certificate issuer:       /CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
Certificate serial:       502002D1D99C66AB04E58431EB721820D7065236
Authority key identifier: BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/3230312e3134302e3235322e302f32322d3234203d3e203631383331.roa
Signing time:             Tue 26 Sep 2023 23:51:12 +0000
ROA not before:           Tue 26 Sep 2023 23:46:12 +0000
ROA not after:            Tue 24 Sep 2024 23:51:12 +0000
asID:                     61831
IP address blocks:        201.140.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:02:d1:d9:9c:66:ab:04:e5:84:31:eb:72:18:20:d7:06:52:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
        Validity
            Not Before: Sep 26 23:46:12 2023 GMT
            Not After : Sep 24 23:51:12 2024 GMT
        Subject: CN=2437D9E0C648BEB665A2D841FD44B6B6D2C05D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:14:c8:63:ee:78:04:96:0f:1f:29:9b:33:91:
                    f9:9d:43:e9:b7:30:a1:21:6a:00:75:af:0c:70:70:
                    f3:db:70:38:8f:a2:00:01:7f:1f:6b:ce:ab:2c:77:
                    1d:23:94:6c:2a:31:78:f5:5f:e1:76:ae:26:ad:50:
                    29:6b:e2:51:44:2c:2f:46:76:fe:91:18:a1:f0:6a:
                    bd:dd:46:76:98:29:3f:e3:9f:81:21:39:28:fc:16:
                    03:b4:69:2b:55:d9:c8:c5:33:e3:12:1e:a5:37:3e:
                    e7:eb:a6:3a:a3:ce:07:ae:dc:ad:e7:61:c8:6a:10:
                    93:6e:19:a9:26:aa:bb:ed:f9:08:3f:4b:57:94:bd:
                    83:1b:2d:62:c9:3c:4d:04:02:47:7e:bf:7c:8f:68:
                    f9:cd:d5:14:4f:91:38:5f:9a:48:f3:d2:e7:93:71:
                    7c:51:d2:b5:b1:29:85:d9:a2:71:1e:b8:c7:7f:70:
                    b8:f3:15:ab:aa:40:af:83:af:bd:52:b5:21:90:2e:
                    04:8f:ee:b1:f6:b3:de:64:c3:7a:cd:e9:fe:3b:eb:
                    c6:5c:f6:4d:d5:0c:63:00:a0:db:c3:37:ef:30:2a:
                    58:f3:5c:de:52:3d:06:97:84:86:92:b8:4b:dd:de:
                    aa:d1:36:f1:26:1c:63:98:83:2a:ba:d8:77:0a:24:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:37:D9:E0:C6:48:BE:B6:65:A2:D8:41:FD:44:B6:B6:D2:C0:5D:38
            X509v3 Authority Key Identifier:
                keyid:BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/3230312e3134302e3235322e302f32322d3234203d3e203631383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:97:28:8a:27:3f:4b:ff:2a:64:8b:35:ca:d9:5b:13:32:1a:
         c8:b6:77:72:18:90:be:b0:aa:cc:35:20:9e:27:98:88:cf:2a:
         d8:f0:66:b7:e8:f2:b9:5b:30:31:70:9e:cc:28:9c:7c:26:fc:
         44:b4:bc:da:63:01:26:9e:a2:7a:ec:2c:8e:e1:20:66:e1:05:
         93:69:60:d4:32:4c:a4:a9:1f:13:45:cb:42:9c:b7:2b:6d:94:
         00:21:df:5f:c3:48:37:5f:51:c1:66:84:be:a2:bb:c0:e7:0f:
         16:1d:9f:28:da:09:e2:93:67:fa:8c:48:c8:c1:98:6d:28:e6:
         b5:1f:8e:87:18:e1:f2:2b:e3:ef:be:5b:b4:87:2e:cc:23:31:
         42:59:44:73:20:e8:a5:fd:8b:74:ea:42:3a:87:30:e7:a4:0c:
         f0:45:b3:3b:d2:7e:b5:a9:3f:f0:25:9b:22:65:77:01:c1:cc:
         d3:1e:2d:99:f8:79:84:3f:e9:71:51:4e:33:67:e9:9c:f0:ac:
         cd:85:72:f1:45:d7:01:74:0d:f9:56:46:c0:2a:4d:cb:5e:85:
         d5:74:ac:b4:d2:24:5a:c3:d2:f9:c7:b6:9d:57:7d:95:43:b9:
         c9:33:8f:56:6b:a4:99:66:7a:24:d9:55:e2:a1:77:a8:4b:5c:
         df:ac:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org