Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132352e302f32342d3234203d3e203631383434.roa
File:                     3230312e3134382e3132352e302f32342d3234203d3e203631383434.roa (raw, json)
Hash identifier:          62IhmoXx+/RHMDeNugnUNV4wyeGJEjtlhtmn6+bkFik=
Subject key identifier:   4C:68:D7:95:8A:F7:7C:26:D5:AE:22:13:37:34:56:D1:75:62:4E:C2
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       60B532F4A90A9640158F89EA926C84739A50E4C2
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132352e302f32342d3234203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:44:00 +0000
ROA not before:           Thu 28 Sep 2023 00:39:00 +0000
ROA not after:            Thu 26 Sep 2024 00:44:00 +0000
asID:                     61844
IP address blocks:        201.148.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b5:32:f4:a9:0a:96:40:15:8f:89:ea:92:6c:84:73:9a:50:e4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:39:00 2023 GMT
            Not After : Sep 26 00:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:62:78:c7:5a:a3:bb:e6:20:51:32:4d:8e:
                    aa:65:a1:c1:c0:22:ad:a0:d4:2b:90:1f:1e:42:51:
                    37:53:e0:b1:6c:33:90:8c:62:86:e8:1e:16:ea:e8:
                    33:47:78:5d:7c:0b:24:b9:58:29:62:eb:54:3c:95:
                    fc:09:87:4d:8a:b3:3a:4a:a2:bc:5d:05:b0:a6:9b:
                    5d:54:53:30:c6:1b:b5:04:85:be:e1:22:e5:bb:11:
                    ca:6b:12:53:47:e8:64:52:1b:f8:1e:ca:f9:3b:29:
                    bf:0e:a8:86:2a:58:68:a7:d5:29:db:3e:07:1f:ce:
                    7c:c4:7e:76:c6:55:4b:3a:63:6d:b9:c1:88:46:78:
                    63:98:04:41:9b:10:41:f3:ea:00:8f:33:2a:79:96:
                    be:ac:99:6e:a1:72:fd:44:c6:74:8e:1a:f6:11:d2:
                    3b:1c:74:f4:ba:1f:ff:47:4d:7f:82:73:3a:39:8f:
                    de:88:7e:c8:4f:eb:6c:c3:dc:85:67:cd:af:ec:3b:
                    1a:5d:ea:e5:e2:83:eb:85:a4:05:a8:21:bc:b3:f3:
                    48:56:43:be:9b:c7:2e:c5:cc:2f:63:f8:8f:30:e5:
                    21:f3:2d:a1:79:a9:ca:c3:87:d7:74:dd:88:50:08:
                    4b:0c:f0:96:8b:c9:46:21:5d:07:bf:89:3e:07:39:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:68:D7:95:8A:F7:7C:26:D5:AE:22:13:37:34:56:D1:75:62:4E:C2
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132352e302f32342d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:f1:cc:c1:1c:75:a3:20:9e:4f:64:fa:60:c0:67:d2:66:
         5b:27:47:67:29:21:4d:d4:cd:76:b5:08:82:93:af:21:47:7a:
         fd:87:3b:28:11:10:e0:72:7b:c1:89:0b:11:81:86:52:b9:bf:
         80:31:5b:97:a0:62:9a:db:41:3c:0c:43:1c:2d:fe:a9:6f:79:
         9e:22:e5:a3:e2:80:3a:8c:22:de:fa:6c:56:6a:b5:9c:71:92:
         40:d6:b9:ec:4b:d1:43:ba:52:7d:e8:51:43:64:8a:8c:8e:bb:
         a9:03:c9:84:2c:d8:2d:bb:ac:dc:f6:d8:b5:1c:bd:a2:c3:9d:
         8c:3a:d1:30:4e:8b:17:49:fe:8f:b9:41:51:35:d1:04:6c:0a:
         18:f4:ff:f4:b2:ee:7d:3b:a0:45:e6:30:da:67:d4:6c:3a:2c:
         4e:a3:ac:dc:1d:49:90:b8:52:56:bc:ab:82:8a:a9:38:af:2c:
         61:95:85:90:58:07:5e:12:f9:9e:30:66:8f:c8:6b:59:0f:9e:
         cb:60:06:a9:d1:18:10:e6:2c:b5:81:65:4a:5d:5d:69:07:c8:
         b8:3e:b2:9e:ea:7a:8b:90:5b:aa:7a:30:8b:c0:a2:a1:9d:44:
         56:96:bc:24:c7:3e:db:63:c8:bb:43:40:d8:d2:73:13:f2:67:
         c2:d8:11:53
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUYLUy9KkKlkAVj4nqkmyEc5pQ5MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNEODgzMDNDRTJFODk3RDM0RkMyMDc3MzM3NTkwODA1
MEZCMjk5RTAeFw0yMzA5MjgwMDM5MDBaFw0yNDA5MjYwMDQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZGNDYyNzhDNzVBQTNCQkU2
MjA1MTMyNEQ4RUFBNjVBMUMxQzAyMkFEQTBENDJCOTAxRjFFNDI1MTM3NTNFMEIx
NkMzMzkwOEM2Mjg2RTgxRTE2RUFFODMzNDc3ODVEN0MwQjI0Qjk1ODI5NjJFQjU0
M0M5NUZDMDk4NzREOEFCMzNBNEFBMkJDNUQwNUIwQTY5QjVENTQ1MzMwQzYxQkI1
MDQ4NUJFRTEyMkU1QkIxMUNBNkIxMjUzNDdFODY0NTIxQkY4MUVDQUY5M0IyOUJG
MEVBODg2MkE1ODY4QTdENTI5REIzRTA3MUZDRTdDQzQ3RTc2QzY1NTRCM0E2MzZE
QjlDMTg4NDY3ODYzOTgwNDQxOUIxMDQxRjNFQTAwOEYzMzJBNzk5NkJFQUM5OTZF
QTE3MkZENDRDNjc0OEUxQUY2MTFEMjNCMUM3NEY0QkExRkZGNDc0RDdGODI3MzNB
Mzk4RkRFODg3RUM4NEZFQjZDQzNEQzg1NjdDREFGRUMzQjFBNURFQUU1RTI4M0VC
ODVBNDA1QTgyMUJDQjNGMzQ4NTY0M0JFOUJDNzJFQzVDQzJGNjNGODhGMzBFNTIx
RjMyREExNzlBOUNBQzM4N0Q3NzRERDg4NTAwODRCMENGMDk2OEJDOTQ2MjE1RDA3
QkY4OTNFMDczOTcyMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr/RieMdao7vmIFEyTY6qZaHBwCKtoNQrkB8eQlE3U+CxbDOQjGKG
6B4W6ugzR3hdfAskuVgpYutUPJX8CYdNirM6SqK8XQWwpptdVFMwxhu1BIW+4SLl
uxHKaxJTR+hkUhv4Hsr5Oym/DqiGKlhop9Up2z4HH858xH52xlVLOmNtucGIRnhj
mARBmxBB8+oAjzMqeZa+rJluoXL9RMZ0jhr2EdI7HHT0uh//R01/gnM6OY/eiH7I
T+tsw9yFZ82v7DsaXerl4oPrhaQFqCG8s/NIVkO+m8cuxcwvY/iPMOUh8y2heanK
w4fXdN2IUAhLDPCWi8lGIV0Hv4k+BzlyJwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FExo15WK93wm1a4iEzc0VtF1Yk7CMB8GA1UdIwQYMBaAFLzYgwPOLol9NPwgdzN1
kIBQ+ymeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y0YWZDTHhrcUh3NHNq
TmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzAvQkNEODgzMDNDRTJFODk3
RDM0RkMyMDc3MzM3NTkwODA1MEZCMjk5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQ0Q4ODMwM0NFMkU4OTdEMzRGQzIwNzczMzc1OTA4MDUwRkIy
OTlFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GNGFmQ0x4a3FIdzRzak5pc21U
TUw1TTV1N1Q5dUxHQlluRG1TTDVhN3FYZi8wLzMyMzAzMTJlMzEzNDM4MmUzMTMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzgzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
yZR9MA0GCSqGSIb3DQEBCwUAA4IBAQBkG/HMwRx1oyCeT2T6YMBn0mZbJ0dnKSFN
1M12tQiCk68hR3r9hzsoERDgcnvBiQsRgYZSub+AMVuXoGKa20E8DEMcLf6pb3me
IuWj4oA6jCLe+mxWarWccZJA1rnsS9FDulJ96FFDZIqMjrupA8mELNgtu6zc9ti1
HL2iw52MOtEwTosXSf6PuUFRNdEEbAoY9P/0su59O6BF5jDaZ9RsOixOo6zcHUmQ
uFJWvKuCiqk4ryxhlYWQWAdeEvmeMGaPyGtZD57LYAap0RgQ5iy1gWVKXV1pB8i4
PrKe6nqLkFuqejCLwKKhnURWlrwkxz7bY8i7Q0DY0nMT8mfC2BFT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org