Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32342d3234203d3e203631373932.roa
File:                     3230312e35352e3139382e302f32342d3234203d3e203631373932.roa (raw, json)
Hash identifier:          C0UuvWqCWzA9RNIP69y1zNDSdwwWNaw6liD6qJvuRKs=
Subject key identifier:   A4:4C:62:8A:8D:E0:82:4A:5A:B0:BF:6A:BE:D0:27:21:8A:0C:5F:B2
Certificate issuer:       /CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
Certificate serial:       0C6DACDA8479374A67751261F25D4E16D86CA32D
Authority key identifier: 71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32342d3234203d3e203631373932.roa
Signing time:             Fri 16 Feb 2024 13:19:47 +0000
ROA not before:           Fri 16 Feb 2024 13:14:47 +0000
ROA not after:            Fri 14 Feb 2025 13:19:47 +0000
asID:                     61792
IP address blocks:        201.55.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:ac:da:84:79:37:4a:67:75:12:61:f2:5d:4e:16:d8:6c:a3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
        Validity
            Not Before: Feb 16 13:14:47 2024 GMT
            Not After : Feb 14 13:19:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:90:a7:0a:3e:ea:5f:5b:7a:df:30:65:e5:
                    ef:96:b1:c6:09:77:f9:48:f7:56:3c:41:da:3b:e5:
                    b4:7c:91:5e:87:b2:29:2c:f2:ac:df:27:34:6b:6c:
                    8f:de:20:58:94:42:9d:42:40:7c:53:37:5b:39:d7:
                    8d:57:9d:92:f4:71:49:6f:5f:e1:d6:ba:5b:19:d8:
                    13:1e:2b:be:dc:78:2b:12:c2:5e:56:41:16:a7:98:
                    68:ff:a2:9f:7f:64:52:b9:69:b8:11:bc:4f:b4:35:
                    64:8d:e8:b5:d4:1c:bb:7b:a8:3b:86:cb:d7:0f:10:
                    51:ec:56:f7:b9:63:6a:01:22:76:ef:1c:e3:1f:b6:
                    5a:90:02:8a:30:1c:ae:c0:75:6a:2c:4d:1c:fc:65:
                    0e:4a:f2:8c:74:a9:7a:4c:42:5a:4b:c5:5d:11:a5:
                    94:8c:24:62:7e:38:63:7a:b5:45:84:fd:b4:d4:22:
                    e7:06:5d:08:85:64:08:c1:d1:23:12:8a:82:55:63:
                    75:19:b3:91:41:e4:16:a9:04:73:6b:47:a7:b5:e1:
                    f5:7f:a6:da:81:91:2b:6f:3f:4a:ad:3e:bd:9d:4e:
                    56:f7:7f:e7:45:06:e0:61:ad:03:bd:72:50:e1:ac:
                    7b:9b:dd:59:48:63:42:f4:81:46:2b:49:c2:92:e2:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4C:62:8A:8D:E0:82:4A:5A:B0:BF:6A:BE:D0:27:21:8A:0C:5F:B2
            X509v3 Authority Key Identifier:
                keyid:71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32342d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c5:1d:8f:91:2e:dc:8f:05:3c:5a:0d:b2:6b:76:e1:a2:f5:
         a9:b7:34:59:a6:24:32:ee:d9:7a:99:95:30:da:56:00:35:30:
         c8:9c:ca:a4:6c:78:85:be:46:11:95:80:1c:2a:9e:47:45:30:
         db:56:fb:50:f7:54:4a:8f:e2:11:dc:77:8e:24:c6:a0:b5:26:
         ae:a2:f2:c3:bb:94:df:5d:fc:f0:64:9f:96:ca:a1:9b:dd:b5:
         97:8c:f1:36:4f:31:4d:c0:f1:87:8d:d9:9f:b9:1c:53:d5:df:
         e9:b5:3a:d1:90:ed:20:7d:24:35:71:41:2e:90:96:e4:2a:b6:
         bb:a9:6c:b2:50:53:ff:4e:07:54:b6:20:7b:48:3f:2c:62:6c:
         a4:7e:a7:ba:ed:fa:8a:ea:60:32:e7:1e:ea:b6:96:36:37:7e:
         35:57:b8:2b:8e:07:35:ea:b7:ef:57:72:49:52:ce:b7:ea:94:
         d2:78:b7:b4:e0:58:37:1f:7f:3a:5c:8e:9d:49:2c:0a:be:ca:
         fe:70:1a:32:1c:44:19:a7:4b:a2:16:c6:07:3a:f1:7b:ae:12:
         a8:04:ad:04:60:9b:46:86:57:64:c1:4f:de:87:f2:1c:de:8c:
         6a:bb:f0:fb:ec:3b:89:ae:6e:a9:76:96:69:07:2a:3b:a3:6a:
         59:df:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org