Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230332e302f32342d3234203d3e203631373834.roa
File:                     3230312e35352e3230332e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          OTp5HbDzNMljT1D/J3a02uKqXiFh/NKhfjo09XPjS0Q=
Subject key identifier:   8F:39:FB:A1:DB:E8:C2:B6:9E:52:01:35:D1:0B:15:7A:72:0D:16:AD
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       52F1A5A6817AD7AEDD267C5ECF34C987622BCE49
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230332e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:47 +0000
ROA not before:           Wed 03 Apr 2024 23:48:47 +0000
ROA not after:            Wed 02 Apr 2025 23:53:47 +0000
asID:                     61784
IP address blocks:        201.55.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f1:a5:a6:81:7a:d7:ae:dd:26:7c:5e:cf:34:c9:87:62:2b:ce:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:47 2024 GMT
            Not After : Apr  2 23:53:47 2025 GMT
        Subject: CN=8F39FBA1DBE8C2B69E520135D10B157A720D16AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4c:4e:17:6c:2e:ad:6c:db:eb:1a:5f:10:2f:
                    0f:9e:b9:90:03:c5:81:bd:0c:73:3e:5d:ad:31:27:
                    8e:e7:1f:c7:03:60:b8:71:9c:1e:91:18:12:9f:cb:
                    2c:0b:ae:ac:55:2e:e8:93:b6:b4:10:19:16:d5:ac:
                    96:72:5f:27:e0:dd:64:f0:c2:1c:f6:2b:b1:8f:6d:
                    60:96:b3:09:30:11:58:e1:9c:d3:3c:f8:fd:7d:6c:
                    69:08:12:53:63:e0:7d:b2:ce:a9:6f:ac:5a:c0:90:
                    ce:68:7b:d4:ec:bb:c0:17:a7:0f:38:6b:a9:c1:68:
                    c5:4c:19:6a:d8:ab:1c:7a:78:6c:20:75:75:bb:15:
                    c4:c4:3c:aa:34:fb:39:d6:49:38:c1:0f:f9:76:dc:
                    19:d9:29:b0:8d:7e:1d:9d:5b:5b:13:9a:eb:11:04:
                    52:3e:1a:c1:c2:eb:86:7d:fd:31:7d:c7:f0:48:6e:
                    55:4c:a5:7f:55:18:58:aa:fb:27:d8:82:09:8e:4d:
                    cd:61:56:83:68:4c:ce:25:1c:09:00:a0:f3:ef:89:
                    a8:28:aa:87:ff:df:9b:5c:f9:54:8d:ca:1c:54:fe:
                    37:84:35:eb:c7:81:f0:2b:29:3e:b6:a5:6b:64:ac:
                    33:76:b2:e0:81:87:39:43:bb:74:81:07:67:2a:4e:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:FB:A1:DB:E8:C2:B6:9E:52:01:35:D1:0B:15:7A:72:0D:16:AD
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3230312e35352e3230332e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:52:dd:2b:22:ce:fc:b1:9c:a7:62:6f:59:67:52:6d:78:
         d8:69:27:d3:ca:68:ff:e7:9d:f8:a2:ab:d6:74:f6:18:f3:6c:
         6f:65:7b:7c:70:ce:73:ec:21:04:27:7b:b1:24:13:aa:dc:64:
         09:db:e5:61:83:6a:23:ee:c5:82:18:27:ab:ae:3f:a3:fd:6e:
         d3:a0:7f:0a:70:ab:c9:ab:5e:4f:e0:c8:ce:e4:e6:c7:85:a1:
         ec:cc:d7:94:28:56:a4:c2:da:21:c5:a2:e0:e2:a2:98:88:f6:
         5c:17:e5:4f:34:72:59:d8:a4:22:dc:c3:39:5e:82:09:49:c9:
         41:b6:46:8c:ca:8c:e2:95:74:a7:43:f7:aa:91:90:95:38:c7:
         b0:4d:69:6c:05:4a:f1:0b:5a:ec:40:9b:9e:e0:1a:26:40:39:
         2e:83:58:fb:ae:bb:ee:b3:c3:4c:14:be:73:17:18:42:39:a1:
         b9:8c:3a:de:75:c9:9d:0f:b4:20:69:e0:c5:8b:5d:e0:0a:6b:
         03:01:8b:29:70:b8:fe:6d:98:ef:96:3e:8e:ac:52:5f:ca:41:
         39:7d:de:68:58:a8:7c:ee:6a:fe:3a:bf:68:c6:fe:86:39:78:
         a6:e3:45:40:2c:57:41:16:f0:c7:59:56:8c:8b:d8:95:4a:84:
         74:24:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org