Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132342e302f32342d3234203d3e203631383434.roa
File:                     3230312e3134382e3132342e302f32342d3234203d3e203631383434.roa (raw, json)
Hash identifier:          PpY45vnp5Ioto9eSM+5W6lUdY7PGDXqef+J3FZkAONw=
Subject key identifier:   67:19:2A:71:91:68:6F:21:74:15:3B:7E:EA:C5:4D:4A:24:AE:BB:F6
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       4451E38763207B7872D81F0EC3604D9C0A419D4F
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132342e302f32342d3234203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:44:00 +0000
ROA not before:           Thu 28 Sep 2023 00:39:00 +0000
ROA not after:            Thu 26 Sep 2024 00:44:00 +0000
asID:                     61844
IP address blocks:        201.148.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:51:e3:87:63:20:7b:78:72:d8:1f:0e:c3:60:4d:9c:0a:41:9d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:39:00 2023 GMT
            Not After : Sep 26 00:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:c0:47:d3:8a:28:46:13:fb:03:21:1d:92:
                    00:ac:6b:00:3d:a1:e0:66:5f:87:87:a4:cd:b8:d5:
                    d2:77:56:e3:70:15:bc:ca:76:bc:db:0a:ac:78:d7:
                    01:a4:cc:f8:32:77:55:de:87:08:14:e6:27:4e:6e:
                    a2:54:10:cd:17:cd:64:ec:f1:b7:6a:5c:17:dd:16:
                    cc:15:d1:3b:be:93:b1:23:0a:08:0a:71:18:31:94:
                    2a:d7:bd:50:da:21:ed:53:3d:81:60:f7:88:23:32:
                    c0:30:ad:51:41:66:38:10:b6:bc:c4:f0:bb:1f:f7:
                    36:26:e0:75:21:93:a7:c3:f9:e0:17:3e:a7:01:0f:
                    de:fa:16:38:8b:89:c2:31:bf:59:8d:b1:68:36:f2:
                    a3:e4:4e:27:0f:5d:f2:92:f9:2a:78:b3:26:85:2a:
                    2c:ac:04:2e:6e:05:6e:7f:fa:1b:47:b5:4f:63:7a:
                    b5:40:ee:25:c4:f2:51:8f:47:a7:e7:5d:96:06:96:
                    e7:16:83:ac:16:54:a5:82:54:b5:68:9d:d0:87:6c:
                    d5:f0:57:be:70:15:46:ab:ac:1d:e0:a9:da:18:39:
                    6a:d5:dd:8c:7a:5b:02:c6:42:2e:78:78:a1:ae:e6:
                    a8:7e:61:4c:e0:6b:2d:3d:cc:5a:ba:03:f7:8e:e7:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:2A:71:91:68:6F:21:74:15:3B:7E:EA:C5:4D:4A:24:AE:BB:F6
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132342e302f32342d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:42:2e:35:71:df:ac:b2:74:53:9d:82:a8:60:25:64:7a:6f:
         0b:c6:04:63:39:20:71:03:34:63:61:e3:22:2f:c7:4d:43:e0:
         88:e0:80:a6:ee:de:da:29:bc:02:05:54:50:d9:d9:4d:b9:c0:
         ba:aa:79:ec:c9:7d:e6:9f:2e:d1:34:85:5e:69:c5:d3:64:01:
         90:fe:0b:1e:0b:d7:4f:58:5d:36:99:8d:89:c9:18:82:a6:7f:
         b3:2e:39:87:06:40:a0:3a:57:fa:00:d1:43:ce:22:68:05:36:
         ba:1d:af:5b:f4:0f:f1:58:3b:7c:70:f9:88:9d:fb:5a:81:87:
         88:f0:d6:34:f9:c8:02:85:8c:3f:91:80:0e:be:f3:0f:ff:3d:
         30:0a:e3:49:5d:2b:0d:bc:2c:8d:c4:6a:34:5e:6d:85:67:64:
         96:ec:e4:74:82:dc:21:c8:db:bf:cd:68:7f:77:49:16:ad:08:
         8a:ff:5f:f3:ee:56:50:3b:d6:74:80:fd:1b:3e:c1:a0:b7:bd:
         e5:a7:75:da:3a:87:2a:2e:82:6c:ce:8a:6a:2b:1c:3e:76:2e:
         a1:bb:c5:7e:05:b4:f7:16:b1:e7:c8:01:48:43:83:11:e0:5b:
         11:c9:2d:fb:97:fc:32:26:32:67:aa:86:e9:67:ac:e6:9d:18:
         13:4b:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org