Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230312e302f32342d3234203d3e203631373834.roa
File:                     3230312e35352e3230312e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          c5V460EYtx0jgMr065jBrsibRKFSjsdlWargq3wnEFs=
Subject key identifier:   3E:A3:30:1B:3B:10:87:62:D0:8E:7F:8A:C5:5E:2A:7A:10:0C:2E:97
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       2230B53573EAA671105B0B4F9F0DDA28AA91A18C
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230312e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:51 +0000
ROA not before:           Wed 03 Apr 2024 23:48:51 +0000
ROA not after:            Wed 02 Apr 2025 23:53:51 +0000
asID:                     61784
IP address blocks:        201.55.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:b5:35:73:ea:a6:71:10:5b:0b:4f:9f:0d:da:28:aa:91:a1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:51 2024 GMT
            Not After : Apr  2 23:53:51 2025 GMT
        Subject: CN=3EA3301B3B108762D08E7F8AC55E2A7A100C2E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:73:5c:16:e9:a8:08:02:e9:44:c2:8a:b4:4c:
                    35:d1:85:ae:04:37:33:f3:06:e3:e9:fc:ce:46:bf:
                    ea:b8:38:89:ed:af:5f:da:5f:78:58:f7:bd:50:d1:
                    d1:36:e4:ae:7f:20:f5:32:d6:94:89:c4:95:fe:e6:
                    a0:3a:16:a3:72:0d:30:4b:85:aa:8c:8a:fb:89:8f:
                    68:a6:1a:95:26:f0:3b:a7:07:b8:66:af:89:30:33:
                    5a:bd:d8:79:6a:83:f5:63:08:1a:f7:f9:16:a1:6a:
                    de:62:fd:f8:5a:9b:dc:3b:03:c4:fd:b7:26:88:f3:
                    6c:5c:4f:5c:6b:29:3a:37:9f:04:fc:5b:19:3c:38:
                    18:ac:1f:da:27:a3:5b:5e:17:2b:6b:83:9f:2a:7c:
                    f6:52:6f:d4:3b:ea:87:2a:2f:fe:ec:d0:b1:d2:3a:
                    99:3a:6e:6a:ac:bd:b7:aa:ac:45:29:df:3a:8f:f1:
                    9c:51:03:11:4c:1c:b0:83:eb:d1:32:dd:a0:7f:7f:
                    ba:09:1e:dd:39:9a:82:e2:1c:80:04:8f:d2:c1:be:
                    87:cd:1c:f6:65:62:25:62:aa:47:92:0e:3c:04:48:
                    f7:ea:aa:e4:75:38:c4:62:4e:4d:07:51:20:70:4b:
                    9e:5c:32:d3:74:0e:9c:d8:46:3f:ad:cf:06:60:84:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:30:1B:3B:10:87:62:D0:8E:7F:8A:C5:5E:2A:7A:10:0C:2E:97
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230312e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:38:e7:b8:17:ba:e7:f2:64:1d:71:c7:6f:39:78:b0:e7:15:
         26:e8:4d:25:82:9b:d2:83:d0:6e:d4:8f:9f:fd:a7:6c:49:bd:
         85:1a:69:b4:61:82:52:2e:d2:8e:62:82:a0:4f:21:49:cd:bd:
         40:9d:23:2c:f5:25:fb:c3:17:80:bf:c1:1f:73:2a:01:f6:10:
         a1:ed:9f:88:0e:e8:c3:98:8b:da:f2:d2:9c:be:04:84:9a:a3:
         9d:b8:80:18:da:17:f5:72:c7:a1:77:dc:ee:47:d7:e9:f1:24:
         e7:36:a9:16:de:90:a6:fd:b7:da:7a:b0:fd:09:a0:6c:d8:6c:
         a0:f0:0b:0b:41:5e:27:49:37:8b:7a:0b:a3:06:94:82:d4:d4:
         9d:5d:66:1a:eb:43:88:dd:8c:0e:3f:af:7c:87:93:c9:f0:b9:
         69:9b:0c:81:b5:b6:83:3b:95:ad:6a:2b:9a:22:2f:8f:53:a5:
         c0:88:ca:27:bd:8e:81:74:2b:d7:ef:cb:f8:1d:f2:5e:2c:9b:
         d8:f8:12:c2:ca:36:9c:98:f6:bc:91:09:d7:5a:29:ce:46:a6:
         99:00:94:f2:86:36:b7:52:3b:93:71:3f:b1:82:5f:ef:48:a8:
         b2:67:c7:b0:0c:1d:60:93:b8:3c:f8:35:63:1b:cc:54:42:4a:
         d9:06:08:97
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIjC1NXPqpnEQWwtPnw3aKKqRoYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4OENGNTNEMUFCM0FBRjYwRUU0MEVDM0RCOTJFRUE4
RDU4RTM1NDAeFw0yNDA0MDMyMzQ4NTFaFw0yNTA0MDIyMzUzNTFaMDMxMTAvBgNV
BAMTKDNFQTMzMDFCM0IxMDg3NjJEMDhFN0Y4QUM1NUUyQTdBMTAwQzJFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVc1wW6agIAulEwoq0TDXRha4E
NzPzBuPp/M5Gv+q4OIntr1/aX3hY971Q0dE25K5/IPUy1pSJxJX+5qA6FqNyDTBL
haqMivuJj2imGpUm8DunB7hmr4kwM1q92Hlqg/VjCBr3+Rahat5i/fham9w7A8T9
tyaI82xcT1xrKTo3nwT8Wxk8OBisH9ono1teFytrg58qfPZSb9Q76ocqL/7s0LHS
Opk6bmqsvbeqrEUp3zqP8ZxRAxFMHLCD69Ey3aB/f7oJHt05moLiHIAEj9LBvofN
HPZlYiViqkeSDjwESPfqquR1OMRiTk0HUSBwS55cMtN0DpzYRj+tzwZghDi1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPqMwGzsQh2LQjn+KxV4qehAMLpcwHwYDVR0j
BBgwFoAUMojPU9GrOq9g7kDsPbku6o1Y41QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU
VVIvMS8zMjg4Q0Y1M0QxQUIzQUFGNjBFRTQwRUMzREI5MkVFQThENThFMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyODhDRjUzRDFBQjNBQUY2
MEVFNDBFQzNEQjkyRUVBOEQ1OEUzNTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzEv
MzIzMDMxMmUzNTM1MmUzMjMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyTfJMA0GCSqGSIb3DQEBCwUAA4IBAQApOOe4F7rn
8mQdccdvOXiw5xUm6E0lgpvSg9Bu1I+f/adsSb2FGmm0YYJSLtKOYoKgTyFJzb1A
nSMs9SX7wxeAv8EfcyoB9hCh7Z+IDujDmIva8tKcvgSEmqOduIAY2hf1csehd9zu
R9fp8STnNqkW3pCm/bfaerD9CaBs2Gyg8AsLQV4nSTeLegujBpSC1NSdXWYa60OI
3YwOP698h5PJ8LlpmwyBtbaDO5WtaiuaIi+PU6XAiMonvY6BdCvX78v4HfJeLJvY
+BLCyjacmPa8kQnXWinORqaZAJTyhja3UjuTcT+xgl/vSKiyZ8ewDB1gk7g8+DVj
G8xUQkrZBgiX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org