Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230332e302f32342d3234203d3e203631373834.roa
File:                     3230312e35352e3230332e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          zBj888Cexkest94hQY7WKUiB48GZ1zY9mUQ+zLarRqI=
Subject key identifier:   4A:28:81:A2:0C:F4:DC:1B:3B:D6:2E:6D:35:16:8E:11:EA:CB:BB:00
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       708730E7EE5A65472C6F2BEDAABF607966683A87
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230332e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:09 +0000
ROA not before:           Wed 20 Dec 2023 18:01:09 +0000
ROA not after:            Wed 18 Dec 2024 18:06:09 +0000
asID:                     61784
IP address blocks:        201.55.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:87:30:e7:ee:5a:65:47:2c:6f:2b:ed:aa:bf:60:79:66:68:3a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:09 2023 GMT
            Not After : Dec 18 18:06:09 2024 GMT
        Subject: CN=4A2881A20CF4DC1B3BD62E6D35168E11EACBBB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:93:3d:2c:de:21:27:c0:6c:cc:ad:e5:5f:
                    d6:e8:1d:e3:31:d6:f6:50:3e:33:b4:b8:18:35:05:
                    40:71:42:bd:20:0a:dc:8e:b9:14:1c:14:31:66:fa:
                    09:5c:66:09:3d:ab:b4:34:ce:fa:75:5c:da:24:8e:
                    7c:50:12:75:76:13:0f:35:ca:ff:05:9e:32:29:2d:
                    98:d0:1f:5d:32:6b:c0:80:1d:52:21:d1:7b:6b:6f:
                    60:8b:c4:05:da:34:97:b6:7c:67:fd:09:ab:cf:85:
                    2b:09:90:fe:aa:fa:4c:c3:26:fd:cb:ce:b5:b8:66:
                    b5:40:4b:11:73:b3:07:8a:1e:fb:a2:b4:4c:41:2c:
                    99:a3:cb:65:7c:5b:4c:05:d6:a8:b8:f7:cb:ec:2a:
                    08:ab:ab:97:b6:41:3c:2c:77:51:69:ef:5d:fa:0f:
                    66:26:2f:d6:dc:d7:b4:91:11:a2:f3:07:2e:f4:51:
                    69:1a:75:b1:52:c5:e0:eb:60:66:d8:6a:d1:32:e2:
                    30:11:67:b3:e6:c3:bc:ec:42:27:f5:c7:4f:2e:2e:
                    8a:6d:fb:b1:24:72:da:a2:79:9d:54:ec:30:ab:b0:
                    da:78:e7:8e:49:4a:b1:7d:74:ba:2e:17:62:c9:fd:
                    fb:2f:ef:ba:e0:15:88:ce:7f:ba:8b:75:fc:f0:e8:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:28:81:A2:0C:F4:DC:1B:3B:D6:2E:6D:35:16:8E:11:EA:CB:BB:00
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230332e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f4:9f:8a:3a:d4:85:4d:fe:f9:0c:ab:58:89:e9:39:e4:b4:
         cf:8b:30:f7:41:f8:d2:46:6a:da:ea:ba:4a:b3:7b:d9:b5:45:
         80:8c:1e:cb:98:85:87:0a:75:87:19:ec:cb:6b:60:50:f5:4f:
         ce:8d:be:53:f4:94:e5:a5:3e:c5:3d:9b:e1:20:05:12:31:c0:
         fa:57:af:af:c4:4c:5c:61:02:0a:03:57:d2:7e:f0:68:54:9c:
         e4:c9:13:c3:60:26:d0:66:db:ee:4d:8b:4c:04:ba:1b:6c:37:
         fd:e4:7e:71:69:4e:cc:65:90:27:c8:1c:c5:51:0f:ba:4d:af:
         ba:94:26:9b:5f:18:83:f7:2e:95:7f:e6:d3:e6:55:9f:d3:42:
         4e:56:79:3c:63:cc:c9:0a:61:13:1d:b1:18:15:c6:54:b8:11:
         66:54:1b:f1:08:4f:65:1e:64:b6:22:17:52:95:51:e6:99:35:
         51:6c:80:54:c2:6c:9e:56:ff:65:1c:15:67:4f:43:87:7a:b0:
         55:f0:7d:44:06:14:56:3e:d5:58:c5:d7:95:6b:2e:be:1f:28:
         d3:6f:db:06:c6:64:f0:ad:df:61:63:33:8d:b1:a4:e6:00:f8:
         c7:9b:54:8c:f4:a4:94:66:c0:d0:14:0d:63:bd:0e:af:95:0f:
         ef:18:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org