Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230312e302f32342d3234203d3e203631373834.roa
File:                     3230312e35352e3230312e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          sXIZ2zTBly0eDaFUyN/B6gO/QuD3UeTausPe3HYVDAw=
Subject key identifier:   C0:27:56:33:7B:FF:F5:FE:23:31:ED:00:92:EB:02:CA:5A:63:CC:99
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       542D260A32E19473DA3C1E6CA55974740A12A6EA
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230312e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:09 +0000
ROA not before:           Wed 20 Dec 2023 18:01:09 +0000
ROA not after:            Wed 18 Dec 2024 18:06:09 +0000
asID:                     61784
IP address blocks:        201.55.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2d:26:0a:32:e1:94:73:da:3c:1e:6c:a5:59:74:74:0a:12:a6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:09 2023 GMT
            Not After : Dec 18 18:06:09 2024 GMT
        Subject: CN=C02756337BFFF5FE2331ED0092EB02CA5A63CC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:7c:7a:fc:55:b7:1e:fc:b0:e3:f0:5c:c3:
                    7b:c4:7b:b3:c7:67:d4:be:b2:d6:9e:ad:38:43:1e:
                    04:35:15:99:3f:ac:ee:15:ba:31:98:10:85:81:84:
                    ba:a6:77:df:dc:70:56:c6:2b:8e:39:28:ba:fb:ef:
                    cb:77:24:0e:7c:3c:1f:b3:6c:64:5d:47:ab:29:d3:
                    43:f6:4b:40:e5:a3:3e:43:76:34:a5:34:fa:77:23:
                    75:a1:88:73:be:76:d2:61:40:1f:3b:de:21:26:d9:
                    2f:13:e1:b4:45:ea:db:65:20:cf:f5:72:92:5a:39:
                    eb:da:28:6a:6c:e3:9b:04:8d:e1:56:9c:d8:4e:12:
                    0d:24:4d:97:42:f1:ef:3c:37:b4:29:fe:13:f1:b4:
                    1d:0f:2d:f3:b8:60:9e:42:49:e6:dc:1a:23:2f:29:
                    2d:a9:f5:b6:c0:ad:ab:25:1e:c1:6a:3b:f9:47:cf:
                    e4:79:5b:be:47:8f:e0:75:a9:32:55:e3:9f:cd:f8:
                    fb:3c:a3:f0:7b:1b:89:d8:d8:18:bf:87:d2:19:f1:
                    0b:e2:c9:85:6a:c0:10:86:db:d9:d8:4d:4b:70:57:
                    4e:c3:02:d4:fa:a9:e9:10:10:ad:f3:dd:a0:73:57:
                    02:ed:f4:07:47:b1:e8:1f:8e:07:1b:23:b2:4d:79:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:56:33:7B:FF:F5:FE:23:31:ED:00:92:EB:02:CA:5A:63:CC:99
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230312e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:13:f1:6f:37:92:61:4e:70:d0:89:8f:35:9e:05:e9:6e:
         50:93:c2:9b:e7:31:bf:e6:96:d0:5e:5a:c1:e4:0b:e1:92:35:
         53:e1:08:a5:ef:4e:c6:19:55:21:62:1c:1a:fd:85:c1:f0:e9:
         f9:4a:82:1d:21:91:47:fa:a0:d2:a8:10:2e:3b:d4:b2:68:cb:
         1e:ef:a8:f3:ad:c8:54:f1:c5:91:c9:88:cf:5b:10:80:a5:0c:
         bb:8d:01:cb:02:58:cc:87:40:e6:a1:8a:4b:07:5e:a2:cf:eb:
         34:3b:7a:92:ad:03:be:e3:c8:b4:18:1e:84:c9:f1:1f:aa:85:
         a4:e6:15:0e:e5:9d:d3:51:14:87:1e:a7:8f:74:e3:c0:66:8c:
         50:85:ba:9b:dc:c7:31:f8:3e:1b:30:64:89:ac:ed:52:f6:ba:
         9b:0f:a8:79:86:be:32:09:3a:85:33:18:45:36:36:2a:8a:b3:
         df:11:c1:5c:a9:20:0f:20:c9:19:e8:54:2c:1c:32:f2:bb:c4:
         ed:b3:aa:aa:0a:ed:51:83:99:fc:30:65:ba:f0:62:92:44:bc:
         a2:50:91:9a:95:44:31:6a:5d:86:fc:e0:f9:a1:68:43:12:e6:
         b9:22:21:79:ed:50:4a:8f:42:6b:65:12:7e:c8:9e:d1:97:9f:
         5f:55:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org