Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132342e302f32322d3232203d3e203631383434.roa
File:                     3230312e3134382e3132342e302f32322d3232203d3e203631383434.roa (raw, json)
Hash identifier:          SX2wCbnFvb2VOw9rRjHxNTUKSLbW+UnwPxYD19aFVP4=
Subject key identifier:   93:7D:26:FF:6E:24:34:3B:8D:93:89:9E:D7:16:BC:B3:22:6E:1B:0A
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       7443469A0417B6869375F5B4A933A72F85F3987C
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132342e302f32322d3232203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:44:01 +0000
ROA not before:           Thu 28 Sep 2023 00:39:01 +0000
ROA not after:            Thu 26 Sep 2024 00:44:01 +0000
asID:                     61844
IP address blocks:        201.148.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:43:46:9a:04:17:b6:86:93:75:f5:b4:a9:33:a7:2f:85:f3:98:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:39:01 2023 GMT
            Not After : Sep 26 00:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:b9:3e:83:54:97:d6:3f:4d:cd:e8:10:66:
                    aa:12:b9:b8:37:01:04:2c:9a:4a:96:4a:fa:d9:05:
                    04:cc:0d:b5:e0:dc:a5:8e:e6:67:33:f9:7a:78:04:
                    07:d7:65:fb:55:e8:5f:2c:01:2f:5f:57:0e:60:77:
                    57:fe:ee:80:94:75:3b:9e:5e:44:df:d2:34:6a:d7:
                    d0:be:89:53:1f:0d:30:40:fa:0f:dc:0e:8a:46:87:
                    89:dc:e5:d3:4c:cd:39:a9:69:a6:18:07:aa:01:2c:
                    06:44:65:8b:33:21:01:4c:34:9a:01:93:a0:c0:4e:
                    79:84:10:32:35:c8:29:89:9e:d1:5b:5b:2b:b0:05:
                    b9:ee:12:78:11:56:43:97:0c:00:ba:38:b7:35:2b:
                    af:0d:6d:ff:4c:d0:9b:a4:57:5c:7d:bb:04:23:90:
                    85:f2:74:de:8f:3d:14:ec:78:41:d6:d0:e7:fc:bc:
                    df:8c:f6:8d:04:13:c8:59:ec:3e:a4:e1:d3:04:b1:
                    e8:cf:57:a9:9d:9e:a1:28:e3:25:ab:1d:a3:ba:dc:
                    68:0a:da:a1:b6:54:b8:25:15:df:a5:80:59:27:b0:
                    00:95:7e:78:ef:e1:06:f7:c0:7b:80:dd:24:f6:fb:
                    76:db:bf:cc:54:ce:e1:41:00:e6:0f:c2:37:1e:b8:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7D:26:FF:6E:24:34:3B:8D:93:89:9E:D7:16:BC:B3:22:6E:1B:0A
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132342e302f32322d3232203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:96:e9:67:05:b4:2b:45:18:01:f7:c7:a9:37:71:c9:fe:52:
         cb:a2:cf:14:83:4e:23:40:52:1a:b6:1c:81:36:ec:a1:ba:78:
         fc:5a:99:ee:a2:f4:d1:86:c9:07:ae:84:26:24:73:fd:4d:b7:
         4c:1f:c3:99:cc:e2:26:e0:7a:6e:be:15:84:7b:be:1f:9e:2b:
         e9:8c:f2:4a:f1:2c:68:65:9c:78:2d:56:5f:11:00:1f:43:f1:
         a6:47:03:e8:1b:62:5e:3a:52:78:23:91:5f:fa:02:58:76:d4:
         8d:74:0f:42:95:d5:a4:ab:f8:a2:eb:62:dd:a6:f5:0d:4d:19:
         8b:3b:8c:84:3d:9b:9d:d0:9c:7d:62:5f:99:eb:81:d5:36:85:
         98:f7:71:eb:e0:41:79:06:ab:24:2c:92:cb:67:da:34:66:8e:
         d9:07:72:4d:41:72:06:50:d7:58:70:e9:b5:a9:7e:38:29:28:
         0e:9e:bd:cf:4e:23:c6:a1:28:3c:ac:84:3f:86:58:20:b4:05:
         be:e2:47:ef:2c:25:bb:9b:39:d7:bf:0e:39:5a:24:95:6b:a9:
         a1:28:b1:12:8d:19:46:51:ba:81:74:6b:2d:06:93:0a:4a:b1:
         c4:91:74:cb:c1:24:86:9b:68:b7:b6:6a:cb:68:f8:15:ea:d7:
         18:d5:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org