Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          SK4NOYTMzTqlK6ylD2P25SxvEmZqJ+aUeFDzBqvUyAw=
Subject key identifier:   AD:A5:F0:E6:BA:55:43:5C:2E:9B:30:66:30:CE:88:90:DC:36:64:15
Certificate issuer:       /CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
Certificate serial:       5155832D1B4A7CF41C5B8EF0F2868313528E62B1
Authority key identifier: A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
Signing time:             Wed 24 Jul 2024 14:31:41 +0000
ROA not before:           Wed 24 Jul 2024 14:26:41 +0000
ROA not after:            Wed 23 Jul 2025 14:31:41 +0000
asID:                     262659
IP address blocks:        201.33.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:55:83:2d:1b:4a:7c:f4:1c:5b:8e:f0:f2:86:83:13:52:8e:62:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
        Validity
            Not Before: Jul 24 14:26:41 2024 GMT
            Not After : Jul 23 14:31:41 2025 GMT
        Subject: CN=ADA5F0E6BA55435C2E9B306630CE8890DC366415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fc:33:b6:56:7a:30:cd:aa:f5:ba:96:7b:5c:
                    0d:5e:f6:0f:00:c4:8e:7b:1a:fe:27:93:7d:8a:f4:
                    91:ad:e0:49:a1:db:2c:ce:5f:7a:91:4f:12:c5:e5:
                    a9:81:57:b0:34:15:61:5c:57:c7:76:d2:21:c1:cb:
                    8a:b2:01:ee:eb:f4:38:6f:95:cf:25:11:49:40:c1:
                    45:34:4d:71:71:b3:d9:11:43:8a:d1:81:96:2f:08:
                    e4:fd:93:d8:11:37:df:b8:42:11:bd:60:36:da:f7:
                    d6:93:32:f1:10:43:79:82:19:23:89:0b:51:a8:82:
                    07:74:c5:cc:6c:cb:cf:0b:fd:1d:dd:e3:8f:cc:74:
                    c5:bf:ad:8e:af:ae:b0:28:a3:2c:c7:f8:c6:cb:0f:
                    f2:60:a7:ab:1e:75:36:cd:f6:26:f4:84:83:44:b5:
                    1e:54:5e:71:17:d9:96:65:bc:aa:00:2b:ef:a8:a0:
                    ab:7a:3f:f9:b4:ce:36:76:9a:e8:88:98:86:47:1d:
                    7b:33:b0:39:50:61:12:db:d3:48:16:d7:56:f5:90:
                    fa:81:ef:3c:fa:38:56:0a:e2:94:0a:54:71:6c:e4:
                    43:4a:9d:9e:8d:10:05:c8:6d:82:18:fc:cf:65:dd:
                    0d:8f:3e:5f:78:f0:23:36:2f:a5:04:22:b0:bb:39:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:F0:E6:BA:55:43:5C:2E:9B:30:66:30:CE:88:90:DC:36:64:15
            X509v3 Authority Key Identifier:
                keyid:A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/A4AC7525A2D94581DF22D6B154FB0E8F05452901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:d2:cf:c2:98:51:15:6c:ba:6f:0c:1a:58:b9:2a:6c:59:
         e2:ee:4e:bb:31:95:12:44:48:6c:65:dc:78:4f:e5:16:2f:df:
         57:b2:88:ca:f9:ea:07:e9:ee:15:ed:83:e1:3b:c8:7b:c7:a2:
         6c:60:57:bb:d7:d4:3f:31:4e:4b:2b:e3:6c:c9:e8:2c:6f:61:
         6f:92:b1:f0:59:6a:ec:93:77:a6:41:8b:77:08:80:40:69:e6:
         a4:3c:74:eb:4d:05:83:ed:a7:80:6b:98:13:53:ec:d3:73:fb:
         c1:3a:75:3b:8d:13:d5:d8:18:b0:3a:fa:4e:59:fd:9d:4c:b4:
         63:35:3a:05:35:ff:7f:65:55:1a:c7:bb:c7:a5:cb:f0:82:40:
         cf:5c:73:30:b0:c7:0e:5a:3e:24:39:58:8a:16:99:61:83:8e:
         e3:11:7b:c8:47:4c:da:32:3d:99:63:e1:06:95:04:5b:9b:27:
         18:28:8e:18:e3:7f:05:56:12:ac:ea:b0:d6:06:a5:e6:58:b5:
         67:0c:ca:0e:a2:46:25:bf:e2:18:69:00:20:fe:3a:1b:e9:e8:
         61:bb:c0:7e:6d:98:ef:21:7d:eb:07:5b:4b:65:e0:7d:a0:b6:
         37:01:38:13:82:34:e9:c9:36:26:1a:15:27:53:b9:7b:53:d2:
         cc:80:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org