Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
File:                     3230312e35352e3230302e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          WTWS52thpUAUMvcLaXyE3nb9dM5g3wl1VRe+Ny3YVLU=
Subject key identifier:   74:F5:76:7B:1F:24:55:51:1C:A0:FA:1C:F2:50:EE:36:3B:EE:85:A6
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       37D6E689C639BDDB1C25A44440C969690496A718
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:48 +0000
ROA not before:           Wed 03 Apr 2024 23:48:48 +0000
ROA not after:            Wed 02 Apr 2025 23:53:48 +0000
asID:                     61784
IP address blocks:        201.55.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:e6:89:c6:39:bd:db:1c:25:a4:44:40:c9:69:69:04:96:a7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:48 2024 GMT
            Not After : Apr  2 23:53:48 2025 GMT
        Subject: CN=74F5767B1F2455511CA0FA1CF250EE363BEE85A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:0d:8b:a5:39:48:f5:83:c0:3b:07:c4:78:
                    ad:61:c0:2b:6a:91:3c:2c:28:fe:c7:67:91:36:4f:
                    92:be:2a:51:ad:5b:3d:53:ab:30:89:60:0f:65:ad:
                    02:17:a2:64:30:63:a3:72:68:05:bd:11:10:34:e8:
                    29:9e:ee:15:3a:25:2c:44:72:71:bd:18:37:72:83:
                    95:e8:f5:06:58:93:b5:b5:1e:51:15:2e:b3:83:55:
                    4f:c3:2a:bf:8d:ce:ae:aa:69:39:5d:02:99:02:2b:
                    da:f4:29:6a:03:1b:05:45:4d:dd:b7:85:14:05:0c:
                    d1:4e:70:bb:a6:5c:ff:ec:77:98:5d:49:50:51:78:
                    a9:bb:2c:90:4d:ef:bb:d3:17:e5:35:e4:c4:c7:e8:
                    f5:49:37:62:3c:6b:70:5a:27:18:8a:60:c4:9f:0b:
                    6e:f4:82:b1:b8:2c:25:ca:df:a2:d5:c9:5e:07:a1:
                    89:27:0d:37:32:c2:7f:aa:37:a4:42:2f:91:93:3e:
                    cb:54:fe:a3:76:58:25:e2:82:e3:a9:b7:f6:07:cc:
                    c8:51:cb:5a:13:83:a7:eb:e5:ee:44:e2:d6:33:0f:
                    60:0d:9d:ba:f6:aa:7c:e2:bd:03:a2:e3:89:bd:64:
                    d3:f1:6d:94:e7:c0:8d:40:e3:01:32:f7:08:fb:8d:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:76:7B:1F:24:55:51:1C:A0:FA:1C:F2:50:EE:36:3B:EE:85:A6
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:db:a4:66:67:ce:18:4a:96:d4:4d:6b:2c:ac:dc:f5:14:19:
         5e:94:84:b9:32:be:80:d5:42:2b:ad:9d:d9:2e:42:7e:9a:70:
         28:4b:23:8c:34:be:bc:59:1b:2e:11:e3:b1:7a:a2:3c:37:8a:
         5b:a0:9f:9c:03:b9:85:a3:ef:44:3b:2f:83:14:b9:c3:30:91:
         6e:15:43:ea:ec:5a:91:59:ee:5e:cb:5d:e0:12:8f:5f:5a:f5:
         8c:47:5d:9e:56:e1:52:0a:17:75:8e:72:4b:90:43:de:c1:b7:
         fa:5f:80:4a:7e:4b:6d:70:4d:0f:e6:c6:bf:3f:5a:15:f1:5c:
         6a:66:b3:47:87:9c:9e:08:34:6c:67:86:ad:b9:84:a9:b3:06:
         52:5f:eb:87:4f:59:c3:48:c7:1c:d8:81:ea:f5:d5:a8:d8:3c:
         da:f5:d7:21:30:90:be:44:79:f1:98:f4:66:b5:b2:86:03:f0:
         43:9c:b4:cb:50:4e:fa:de:b2:82:41:36:32:22:96:19:6d:c7:
         4e:55:7c:c7:60:9e:4d:6b:7d:d0:44:1a:cb:13:bd:85:c6:f8:
         b7:b1:ac:cf:e7:41:03:3e:6f:65:17:1f:5a:5b:37:03:bc:57:
         71:2d:cd:a9:2f:20:d6:8c:9f:3a:26:e5:9a:ff:fd:a7:3c:4f:
         ca:69:39:a3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN9bmicY5vdscJaREQMlpaQSWpxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4OENGNTNEMUFCM0FBRjYwRUU0MEVDM0RCOTJFRUE4
RDU4RTM1NDAeFw0yNDA0MDMyMzQ4NDhaFw0yNTA0MDIyMzUzNDhaMDMxMTAvBgNV
BAMTKDc0RjU3NjdCMUYyNDU1NTExQ0EwRkExQ0YyNTBFRTM2M0JFRTg1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLQ2LpTlI9YPAOwfEeK1hwCtq
kTwsKP7HZ5E2T5K+KlGtWz1TqzCJYA9lrQIXomQwY6NyaAW9ERA06Cme7hU6JSxE
cnG9GDdyg5Xo9QZYk7W1HlEVLrODVU/DKr+Nzq6qaTldApkCK9r0KWoDGwVFTd23
hRQFDNFOcLumXP/sd5hdSVBReKm7LJBN77vTF+U15MTH6PVJN2I8a3BaJxiKYMSf
C270grG4LCXK36LVyV4HoYknDTcywn+qN6RCL5GTPstU/qN2WCXiguOpt/YHzMhR
y1oTg6fr5e5E4tYzD2ANnbr2qnzivQOi44m9ZNPxbZTnwI1A4wEy9wj7jUe/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdPV2ex8kVVEcoPoc8lDuNjvuhaYwHwYDVR0j
BBgwFoAUMojPU9GrOq9g7kDsPbku6o1Y41QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU
VVIvMS8zMjg4Q0Y1M0QxQUIzQUFGNjBFRTQwRUMzREI5MkVFQThENThFMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyODhDRjUzRDFBQjNBQUY2
MEVFNDBFQzNEQjkyRUVBOEQ1OEUzNTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzEv
MzIzMDMxMmUzNTM1MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyTfIMA0GCSqGSIb3DQEBCwUAA4IBAQBn26RmZ84Y
SpbUTWssrNz1FBlelIS5Mr6A1UIrrZ3ZLkJ+mnAoSyOMNL68WRsuEeOxeqI8N4pb
oJ+cA7mFo+9EOy+DFLnDMJFuFUPq7FqRWe5ey13gEo9fWvWMR12eVuFSChd1jnJL
kEPewbf6X4BKfkttcE0P5sa/P1oV8VxqZrNHh5yeCDRsZ4atuYSpswZSX+uHT1nD
SMcc2IHq9dWo2Dza9dchMJC+RHnxmPRmtbKGA/BDnLTLUE763rKCQTYyIpYZbcdO
VXzHYJ5Na33QRBrLE72Fxvi3sazP50EDPm9lFx9aWzcDvFdxLc2pLyDWjJ86JuWa
//2nPE/KaTmj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org