Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32332d3233203d3e203631373834.roa
File:                     3230312e35352e3230302e302f32332d3233203d3e203631373834.roa (raw, json)
Hash identifier:          TdS6A6wNef8+aGnVrhnn09g5ncSTciyRFxsztf5gnyg=
Subject key identifier:   03:2E:5C:C2:CB:FA:21:BC:53:9A:72:C6:EA:59:6A:2D:0C:20:A0:A7
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       5BCE563E68244073F9AFC9F447B235F848212E66
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32332d3233203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:07 +0000
ROA not before:           Wed 20 Dec 2023 18:01:07 +0000
ROA not after:            Wed 18 Dec 2024 18:06:07 +0000
asID:                     61784
IP address blocks:        201.55.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ce:56:3e:68:24:40:73:f9:af:c9:f4:47:b2:35:f8:48:21:2e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:07 2023 GMT
            Not After : Dec 18 18:06:07 2024 GMT
        Subject: CN=032E5CC2CBFA21BC539A72C6EA596A2D0C20A0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:54:80:40:d3:7f:28:2c:fc:1c:ff:8b:a2:
                    b5:1a:dd:f7:f4:d2:ca:cf:1e:c0:41:73:05:05:c7:
                    8a:81:21:e7:8c:28:8b:76:07:23:59:39:2c:7d:24:
                    c4:db:d7:95:60:5d:06:42:e4:40:95:f8:44:bb:35:
                    32:23:ae:e2:1f:f3:f0:af:11:16:e9:4b:49:bd:d5:
                    a6:1f:02:b4:d8:9f:ef:e0:09:25:06:ce:a5:e1:55:
                    51:56:64:27:e6:13:53:fe:7f:54:aa:0c:ae:42:19:
                    d2:df:14:3c:d2:57:86:ac:2e:7a:37:a8:1d:7a:67:
                    3d:a9:10:38:32:9f:b2:96:64:9d:46:3e:68:c9:d3:
                    6d:d5:e7:2f:93:75:07:70:92:35:ed:3d:82:e2:f1:
                    00:42:5b:95:41:25:5e:8c:2f:c6:0c:b9:50:00:b6:
                    3e:d3:88:1a:36:64:7d:ab:81:55:83:11:66:37:19:
                    cf:61:24:da:03:18:f0:6b:14:5a:01:72:07:3c:17:
                    d2:e1:5b:0d:d9:3f:50:8c:0d:cc:01:39:3d:57:b1:
                    62:d3:99:5c:01:0b:e9:28:e7:98:75:56:1b:9b:43:
                    bb:fa:71:6d:71:42:ef:dd:c3:67:8e:57:94:9c:bd:
                    16:9c:04:36:27:b0:b3:ea:99:92:b4:69:83:a2:a8:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:5C:C2:CB:FA:21:BC:53:9A:72:C6:EA:59:6A:2D:0C:20:A0:A7
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32332d3233203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:6b:e9:23:8c:ad:6f:92:34:2b:c8:df:39:bf:ba:24:71:4b:
         31:b3:50:ef:9d:7d:e5:98:7e:be:9d:16:77:d2:42:52:b5:27:
         a8:2e:4f:06:b7:a9:c8:e1:95:c2:31:15:95:29:00:1e:62:c8:
         dd:ae:1e:d1:55:73:1f:97:83:11:65:c0:30:36:2d:12:72:d0:
         e1:e0:02:59:e1:4e:62:83:12:cc:9e:ea:69:84:80:03:44:96:
         e9:32:18:09:f7:0b:f4:08:52:46:25:cf:2d:40:f3:81:ef:f7:
         53:02:70:79:33:e2:38:7b:18:5d:4f:05:57:fb:fb:bb:28:c9:
         f1:e2:ca:db:e8:e4:cf:5f:60:25:3c:d7:99:98:41:a3:dc:13:
         97:bf:50:76:40:93:06:93:05:08:c8:e0:e8:3c:01:3e:58:04:
         10:62:20:cc:a6:5e:9f:f3:44:b7:02:ef:24:f1:dd:d5:ff:fa:
         fc:81:62:55:45:a1:29:f5:38:05:c9:af:f1:c1:e9:3e:c5:1b:
         e5:ee:ae:f6:7d:5b:99:1b:be:29:ca:ed:61:3d:f0:b1:3a:e3:
         f7:93:c6:ed:e6:1d:16:71:a6:8f:13:4a:64:ae:37:f3:db:79:
         cd:f9:18:f8:54:fb:7a:51:84:93:04:eb:71:56:99:26:1e:61:
         32:ca:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org