Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230302e302f32322d3232203d3e203631373834.roa
File:                     3230312e35352e3230302e302f32322d3232203d3e203631373834.roa (raw, json)
Hash identifier:          Wp2zfRKL22C/RsxVyBig2J2tVn1PQvTALoB3QFisiC0=
Subject key identifier:   59:D2:51:8C:F2:54:FE:35:1E:B3:41:2A:F0:54:D6:18:23:86:00:A2
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       23DFBD9346E7BCBA4AB77D0C6188FEA25F9077E4
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230302e302f32322d3232203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:48 +0000
ROA not before:           Wed 03 Apr 2024 23:48:48 +0000
ROA not after:            Wed 02 Apr 2025 23:53:48 +0000
asID:                     61784
IP address blocks:        201.55.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:df:bd:93:46:e7:bc:ba:4a:b7:7d:0c:61:88:fe:a2:5f:90:77:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:48 2024 GMT
            Not After : Apr  2 23:53:48 2025 GMT
        Subject: CN=59D2518CF254FE351EB3412AF054D618238600A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:eb:31:bd:3e:7b:7e:4a:6e:08:1b:c7:52:
                    cb:c6:2d:d5:ce:7a:91:79:a3:e8:81:b6:17:58:45:
                    80:08:b7:fc:7f:bf:09:a0:13:7a:2c:37:bb:fb:3b:
                    73:00:94:7d:bc:ad:bb:b9:4e:0b:75:30:06:c2:47:
                    ad:2a:50:4b:9d:0d:07:52:31:ef:f1:f3:37:4a:fa:
                    6a:43:72:30:da:ee:4f:c8:59:19:d9:b0:95:05:48:
                    c8:f1:20:60:7f:82:32:04:c8:0b:5d:5f:e9:07:1b:
                    fd:80:00:6d:c4:51:01:ec:b7:fc:12:4e:5d:b0:94:
                    27:d3:79:ee:07:b2:03:09:49:dc:a4:90:f0:e6:aa:
                    10:21:57:e9:b7:4c:56:56:0d:24:30:8a:87:d3:32:
                    44:07:ac:50:c8:e1:a7:dd:56:8c:ba:11:2d:b2:14:
                    1b:6c:30:78:c8:4b:31:5f:72:92:62:8e:9f:98:cb:
                    ea:5a:3f:07:81:49:e1:12:be:94:24:ac:55:1d:c8:
                    a8:4e:32:98:b0:40:ac:74:42:02:61:60:11:38:75:
                    e1:c0:13:b9:ad:fb:99:02:72:56:74:49:3c:3a:54:
                    63:f9:fc:6c:b4:a2:bd:89:32:cb:fe:dc:f5:c5:a5:
                    08:7d:b9:4a:1b:45:23:51:8c:5b:70:e8:ca:10:e0:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D2:51:8C:F2:54:FE:35:1E:B3:41:2A:F0:54:D6:18:23:86:00:A2
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230302e302f32322d3232203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:28:bf:fc:89:ce:94:a7:41:88:81:f3:7d:08:d5:ce:10:
         81:06:eb:53:2d:f2:0f:bc:7d:47:85:73:cf:e4:83:50:e0:ab:
         29:2e:26:20:90:bc:33:ae:66:36:84:12:7e:2b:0c:6a:df:87:
         25:e0:62:b2:29:32:af:3b:13:83:08:c6:09:9e:b6:56:5d:c4:
         72:92:0e:05:23:a9:ad:16:17:6e:e0:76:a4:cb:77:08:fe:2c:
         52:01:3e:f3:8a:67:06:a1:01:9f:59:4c:3f:43:87:1e:17:6d:
         b4:f2:3a:a5:ba:11:ac:5d:3d:36:64:28:39:6a:0a:c5:a2:87:
         f2:cf:9b:ee:44:37:25:97:35:a7:dc:d7:7b:2e:d1:21:4b:90:
         06:1e:d4:99:4f:10:ae:3b:8f:6e:7f:18:a6:8f:9e:ff:f0:73:
         f8:b4:7e:29:3a:1e:46:0f:5b:8a:97:ab:67:ca:cd:f3:29:f2:
         02:b8:b5:e2:85:70:f1:bb:34:80:6a:91:81:63:0d:df:93:d2:
         48:cc:de:a6:8f:5b:9b:aa:30:75:11:49:ca:a7:8f:44:f2:41:
         29:6c:f5:ae:85:58:37:e7:06:66:a2:67:8a:49:c6:79:cb:72:
         76:0a:a4:5f:55:c2:41:bc:19:ce:b3:ee:92:4b:f7:19:a2:61:
         30:36:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org