Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230322e302f32332d3233203d3e203631373834.roa
File:                     3230312e35352e3230322e302f32332d3233203d3e203631373834.roa (raw, json)
Hash identifier:          nEu2oMwz7Ddj3Pn5ujn0uHsio/izggWeIMxuTAz+tas=
Subject key identifier:   96:9A:91:0D:B5:4D:1C:CD:C9:15:2F:A8:D8:B0:F3:32:CF:E0:98:B5
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       48D32C50688E790E69E8547FE19C2C2252DD4E3A
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230322e302f32332d3233203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:51 +0000
ROA not before:           Wed 03 Apr 2024 23:48:51 +0000
ROA not after:            Wed 02 Apr 2025 23:53:51 +0000
asID:                     61784
IP address blocks:        201.55.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d3:2c:50:68:8e:79:0e:69:e8:54:7f:e1:9c:2c:22:52:dd:4e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:51 2024 GMT
            Not After : Apr  2 23:53:51 2025 GMT
        Subject: CN=969A910DB54D1CCDC9152FA8D8B0F332CFE098B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:a9:bb:17:8b:c6:5a:c1:dd:45:9b:a1:97:
                    3f:5a:32:60:d8:2a:e3:4f:97:33:e9:d6:9f:b6:a2:
                    00:ff:0b:09:44:a4:3c:2d:ca:23:c2:50:1f:33:a0:
                    89:bd:1d:69:e6:d8:c3:03:4d:c3:0d:05:50:19:34:
                    c6:22:ff:21:cb:67:1c:fc:8f:ae:b8:06:4c:32:90:
                    b6:2f:d8:94:5f:76:34:1d:12:92:2a:69:72:8f:64:
                    f0:ef:5c:fc:f1:0f:1d:2b:ec:3c:ca:bc:4c:a3:82:
                    7a:89:7d:61:f7:af:80:80:89:75:3b:9c:0c:53:73:
                    b6:89:d7:85:cd:64:ce:d5:87:87:1d:be:62:6a:ed:
                    ac:fc:5b:e6:8a:48:93:55:13:c9:d9:92:65:85:57:
                    a1:bc:88:03:4f:4b:dc:13:6f:fa:3b:8b:1d:a5:7e:
                    26:14:d5:16:11:49:a2:95:d6:de:70:08:6f:03:b8:
                    44:85:5a:a1:a1:83:da:dc:2d:0a:51:02:4c:f8:25:
                    e8:75:d4:9c:bf:e0:0e:6d:50:77:0d:73:bf:af:1e:
                    17:2e:e5:c6:7b:2f:7f:2d:a9:d8:ec:2e:b3:c9:ed:
                    a3:b3:35:32:df:2d:ad:ac:2f:8a:fa:33:c0:6e:58:
                    ca:b1:77:23:3b:31:50:bb:58:d0:d5:17:fc:e1:e0:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9A:91:0D:B5:4D:1C:CD:C9:15:2F:A8:D8:B0:F3:32:CF:E0:98:B5
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230322e302f32332d3233203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:66:87:a0:c7:38:9a:78:b0:0a:13:e8:15:b4:ae:36:31:fe:
         6c:d3:85:05:a0:d0:62:8c:49:d2:e9:ba:fc:eb:fb:4d:32:f9:
         2c:29:74:bf:ea:3f:ed:f6:38:dc:e5:7a:0b:13:f5:88:e8:57:
         ea:4c:15:d6:be:78:65:69:21:41:fa:ec:86:b8:91:08:35:89:
         3f:eb:c6:d1:7b:c9:0d:be:bb:cc:4d:96:e8:1e:a9:39:d9:67:
         25:fd:90:63:85:a7:0e:b2:f3:ef:b4:52:75:7b:6e:71:e6:09:
         e8:69:40:34:11:83:99:c4:85:af:62:99:10:e7:43:e2:2c:02:
         c6:d9:5b:58:14:2b:f6:38:a2:e6:fd:00:73:b2:2f:65:a6:00:
         31:10:9a:76:74:d2:69:73:1e:2e:80:4b:ae:1e:d3:6c:3a:94:
         12:f0:02:fd:5d:67:94:e3:63:c0:72:bd:54:77:aa:62:82:19:
         b7:0c:84:21:55:38:b3:5c:17:ad:1b:85:7c:b9:09:92:7f:6a:
         a4:b4:5f:a3:45:82:d6:c3:9b:ae:b2:2c:a9:55:27:d1:e6:6f:
         8c:ff:fc:fb:f7:66:4d:ed:f0:2a:14:45:9a:9f:13:a7:dd:c9:
         f2:56:b9:9b:d6:61:56:2d:3c:71:a8:e9:dd:05:cd:43:81:f8:
         92:79:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org