Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132362e302f32332d3233203d3e203631383434.roa
File:                     3230312e3134382e3132362e302f32332d3233203d3e203631383434.roa (raw, json)
Hash identifier:          4sVgoebDqAOCjHNh9hAwmRr90Caa2MBJ2hqhUk0s36I=
Subject key identifier:   F8:42:9C:AC:DB:44:CE:E0:BF:5C:45:BF:A9:EF:02:F0:EF:78:6A:64
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       18EA6675E1E14CF80D656B51DD87AD5831985D1C
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132362e302f32332d3233203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:44:00 +0000
ROA not before:           Thu 28 Sep 2023 00:39:00 +0000
ROA not after:            Thu 26 Sep 2024 00:44:00 +0000
asID:                     61844
IP address blocks:        201.148.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ea:66:75:e1:e1:4c:f8:0d:65:6b:51:dd:87:ad:58:31:98:5d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:39:00 2023 GMT
            Not After : Sep 26 00:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:51:e3:88:0c:9a:45:c1:fe:f8:aa:31:d4:
                    ba:c1:32:4e:50:b5:39:02:f6:1e:c3:41:bc:fc:ae:
                    c1:f8:7a:72:ae:df:fc:00:87:82:de:48:60:a8:b9:
                    15:38:81:ca:b9:e8:0d:d5:d9:36:d4:8c:a1:f9:38:
                    08:ab:00:66:45:b0:90:5c:3d:0f:f1:3d:b1:4b:0d:
                    06:fa:8d:82:33:95:03:8c:24:6d:a2:5d:08:53:1b:
                    6d:46:26:53:91:e8:70:dc:22:7f:28:36:d2:09:81:
                    72:c0:86:0e:b0:b4:05:24:b7:2e:f0:66:48:6e:5f:
                    08:8f:bd:41:6b:5f:c8:d9:92:88:fd:b1:bb:08:c0:
                    12:27:dd:e9:a5:3e:af:54:66:8c:64:a7:78:8f:9d:
                    24:42:ee:35:ef:16:53:12:40:7d:da:18:de:45:5f:
                    a8:f6:46:a1:92:b6:39:ab:b8:6b:a1:1b:1d:f6:a4:
                    bd:99:90:b2:0c:64:83:39:70:8e:23:dd:67:0e:d5:
                    15:24:e3:1a:ee:47:92:76:26:e7:bb:97:07:96:81:
                    d9:68:2d:4d:75:c7:98:8d:9c:e4:7c:1e:f5:e6:b1:
                    65:ba:5f:54:fa:17:d8:23:d1:5e:83:97:3c:2e:53:
                    b2:a9:73:70:e7:80:c8:46:74:11:97:fb:ca:49:d6:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:42:9C:AC:DB:44:CE:E0:BF:5C:45:BF:A9:EF:02:F0:EF:78:6A:64
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3230312e3134382e3132362e302f32332d3233203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:e9:8d:80:4b:e7:43:4f:33:04:38:73:20:d1:1c:ea:a0:4b:
         56:28:c1:b3:99:27:44:bf:97:58:aa:af:63:7f:7f:72:60:75:
         e4:ab:60:f7:a2:20:5e:af:22:75:2c:79:c7:33:a7:11:d2:2f:
         08:c0:80:1b:89:d5:36:a1:3d:d9:04:7c:7e:e7:44:19:7c:5e:
         03:93:0d:4b:de:57:a2:d8:c2:01:cb:c9:37:81:3e:35:3a:5b:
         7b:e5:ac:e5:95:47:eb:c7:8e:84:de:11:5a:fb:4c:a1:4d:ae:
         4a:53:84:45:b5:96:3f:5f:d7:1b:2e:f7:2d:65:52:fe:65:1e:
         d1:1e:e1:08:ee:dc:c3:33:03:db:1b:5a:a9:9e:a6:be:6e:a4:
         3d:d1:a0:69:ee:e2:fc:59:f7:95:c0:b6:02:0d:d9:aa:85:9a:
         59:e0:e8:07:05:61:51:2f:d5:06:9a:a4:dd:bb:07:0d:fc:f0:
         3d:e0:d7:49:2f:3f:41:a2:c4:bf:e3:e9:b3:24:26:3e:ce:03:
         05:55:06:3e:0a:e8:b3:a2:93:f0:bf:d9:5e:d3:37:95:d2:8f:
         83:f5:b2:19:67:23:26:07:8f:a5:a7:68:05:25:f6:bf:ab:cc:
         4a:3d:bf:e8:2f:12:ea:af:c8:eb:f2:9a:8d:5a:ca:46:8d:ed:
         be:ee:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org