Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
File:                     3230312e35352e3230302e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          +ycB2JKUENC8qKUKFi8eX9hbtRzhAyfzCcAK217Avs8=
Subject key identifier:   AF:5F:23:3D:05:9A:1C:2F:15:D9:D6:84:D9:17:81:6E:ED:5A:D4:7B
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       401C5D8A213BE9C89B7BC71359A28671076A2E37
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:09 +0000
ROA not before:           Wed 20 Dec 2023 18:01:09 +0000
ROA not after:            Wed 18 Dec 2024 18:06:09 +0000
asID:                     61784
IP address blocks:        201.55.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1c:5d:8a:21:3b:e9:c8:9b:7b:c7:13:59:a2:86:71:07:6a:2e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:09 2023 GMT
            Not After : Dec 18 18:06:09 2024 GMT
        Subject: CN=AF5F233D059A1C2F15D9D684D917816EED5AD47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:cc:97:06:03:bc:6c:2d:43:4c:27:7b:b8:
                    00:c0:f0:0d:0e:3d:cf:f0:13:e5:bc:14:69:7f:db:
                    07:49:43:c6:19:80:22:84:57:f8:9b:3d:a1:b5:a7:
                    3d:78:f9:53:fe:7c:9b:d1:c8:95:ac:c0:56:f2:90:
                    59:a0:e2:15:6a:39:9d:b7:d1:0d:e4:c6:a7:8b:aa:
                    ac:ab:14:1c:1e:11:17:8a:11:a6:4b:08:25:45:8c:
                    84:16:f6:23:83:1d:55:8f:63:12:92:19:23:b3:44:
                    93:83:e9:03:3b:8e:dd:29:e3:ce:b7:a6:58:c1:92:
                    30:0b:38:29:f7:9a:ea:08:10:fa:1b:8e:24:d2:78:
                    f6:c0:74:07:71:dc:77:55:75:4d:6b:b4:39:14:d2:
                    b8:a7:4d:c3:52:12:1e:bb:fb:84:85:a4:ec:1d:c5:
                    26:da:64:3d:ce:08:4c:cb:66:5a:04:28:69:6b:f4:
                    a3:ed:cf:79:9e:9f:46:2c:33:15:d1:c0:f9:23:e6:
                    fd:e1:0b:66:16:bf:c2:d1:e7:b4:9f:a2:de:54:46:
                    23:73:60:88:a8:54:b8:4f:d6:e8:f1:31:66:9a:01:
                    ce:1b:2d:ea:6b:e6:cb:c5:68:55:97:66:0a:18:0d:
                    60:fc:b6:96:c2:3e:cf:e9:55:d4:27:37:69:a6:36:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5F:23:3D:05:9A:1C:2F:15:D9:D6:84:D9:17:81:6E:ED:5A:D4:7B
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:61:ae:96:0e:f3:0d:9f:7a:25:64:bd:2f:f7:59:42:e4:
         fe:b8:25:a1:c0:38:fc:ab:76:66:a2:26:e7:8d:98:12:13:62:
         0e:98:70:d7:fa:db:0c:1a:ab:75:44:ed:a4:2e:3c:15:ab:9c:
         b8:57:58:15:5e:a5:e0:26:0a:d9:69:60:18:1e:48:83:df:4a:
         44:c1:dd:37:86:7a:2b:cc:a1:d0:87:25:b1:ea:a9:d6:bc:12:
         0c:75:d4:33:dd:8b:d2:a0:bf:f3:29:65:f0:ec:59:a3:3c:a4:
         ca:e4:ef:d0:99:d3:1a:48:2d:eb:ed:2a:d8:58:5c:da:53:a4:
         45:7d:ae:7a:19:1e:11:df:69:47:87:17:d1:40:b4:a8:ce:54:
         ca:ca:99:76:69:07:0d:2a:f9:28:cb:ac:29:a9:ee:fe:f1:79:
         04:2f:91:90:84:d2:0c:40:0d:1c:0f:07:0a:55:37:5e:98:8d:
         f2:63:5b:ce:65:6a:80:9d:76:a3:49:fb:58:d8:75:01:44:ea:
         76:21:3d:58:66:69:18:3d:29:07:4d:49:b7:1b:d7:21:3a:92:
         14:24:da:eb:25:3f:18:96:5e:2c:ad:76:ce:83:8a:c5:f1:d4:
         52:f3:48:b4:c0:f3:e8:a1:2f:78:54:c4:1b:3b:e0:13:cc:7d:
         1a:fe:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org