Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230322e302f32332d3233203d3e203631373834.roa
File:                     3230312e35352e3230322e302f32332d3233203d3e203631373834.roa (raw, json)
Hash identifier:          uRHjnrkACVZ8Dn61+L0RRAZ8y+JV5YVOP48I+24rzOo=
Subject key identifier:   78:5D:2B:59:32:CF:D9:01:33:71:5C:4C:46:84:64:CF:22:30:9D:2C
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       3E0975983E01365F30EBA92D3F67A7A6D5527FCA
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230322e302f32332d3233203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:05 +0000
ROA not before:           Wed 20 Dec 2023 18:01:05 +0000
ROA not after:            Wed 18 Dec 2024 18:06:05 +0000
asID:                     61784
IP address blocks:        201.55.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:09:75:98:3e:01:36:5f:30:eb:a9:2d:3f:67:a7:a6:d5:52:7f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:05 2023 GMT
            Not After : Dec 18 18:06:05 2024 GMT
        Subject: CN=785D2B5932CFD90133715C4C468464CF22309D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:80:c2:22:44:9d:97:21:c2:8b:82:f6:5e:
                    09:72:13:b3:00:71:72:f1:1d:68:2d:47:ff:3f:b7:
                    76:b1:b5:af:8d:4b:37:5f:b1:fe:a8:25:04:42:64:
                    6c:bd:10:66:a5:83:1b:1e:81:8b:71:70:06:26:08:
                    e5:40:41:04:06:ff:69:c4:f1:3c:b2:7c:24:a9:02:
                    28:6d:f1:55:01:4f:18:cc:9c:d8:b0:78:40:c2:1a:
                    9d:80:3d:d8:a6:43:a3:3f:37:a7:21:fa:c2:6f:a6:
                    47:ac:1f:fe:f9:30:89:3d:2d:69:46:2c:67:61:3e:
                    bb:51:b8:a1:5e:3b:a3:c8:0e:e9:a3:d3:e9:f9:9f:
                    f0:8c:51:92:7f:54:5f:a0:17:b7:f8:af:03:33:a7:
                    22:59:f1:61:e2:81:74:47:bb:e7:b4:20:b7:d0:99:
                    04:aa:14:d1:3a:be:8b:1d:05:11:8d:16:64:52:aa:
                    71:97:cb:22:4e:08:47:96:29:ab:6a:43:83:8b:0e:
                    27:2d:42:2a:6d:15:d5:08:0b:7b:e3:f5:69:6b:30:
                    e3:06:49:1b:83:53:61:02:79:9d:37:c1:b6:dd:84:
                    b0:d0:dc:ae:1d:60:e0:48:6d:4d:ed:6f:9a:a4:9b:
                    53:42:e0:06:28:22:09:54:e1:41:c8:88:6e:3c:6f:
                    72:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:2B:59:32:CF:D9:01:33:71:5C:4C:46:84:64:CF:22:30:9D:2C
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230322e302f32332d3233203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:c1:1d:22:4c:65:ca:2e:3e:ab:c1:4f:9f:b5:5d:92:42:
         74:bf:ee:b2:5a:c7:77:e6:60:2b:7f:a4:1c:b0:a1:7d:14:18:
         04:8d:2d:41:87:41:34:29:e5:87:fb:d8:04:52:f9:8e:e0:7d:
         40:e0:75:13:4a:6b:90:52:2d:fe:7b:53:07:e7:a2:7e:a4:fe:
         5e:d8:4b:5b:ec:48:58:38:0e:1f:3c:ca:fc:b9:0c:93:6b:69:
         c1:58:c1:d4:07:44:e6:d1:aa:b1:ea:9f:6f:8e:64:0e:4f:63:
         6c:af:ea:c8:b2:06:2d:7f:70:5d:90:83:cb:83:c4:9f:40:b9:
         b8:23:03:ef:4a:4f:d6:6d:50:70:2f:68:50:7c:fa:fe:d7:2b:
         2f:0a:d9:06:a2:4f:a3:fc:5a:f2:9d:f3:7e:18:cd:6f:47:34:
         8c:4a:91:93:60:a0:2d:7c:22:3a:d7:5c:86:11:46:4c:4a:88:
         a9:b5:fc:99:60:76:db:a7:d0:bb:18:89:08:ea:3d:b4:84:25:
         f6:ec:83:05:1d:4c:f1:da:6e:8f:00:2e:e7:3e:86:fb:9a:58:
         72:ba:da:41:3a:2e:f1:40:98:9c:72:bc:51:fc:44:76:d9:6b:
         2c:0f:98:4a:75:2a:f5:c4:9f:84:f7:ba:fd:78:a8:6e:9a:e2:
         9c:87:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:19 2025 by rpki-client