Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa
File:                     3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa (raw, json)
Hash identifier:          YqCuxvvJ3VRtpqEaoBTV1q+lHIl3kPaw5M5Ol9S/Pd8=
Subject key identifier:   40:5D:DC:98:C8:FB:C4:3A:1B:35:D2:70:F4:78:47:76:09:2A:F9:98
Certificate issuer:       /CN=B53C2F7E0FA97A0294139083D40BC8F909329807
Certificate serial:       100AF2FB5937FAD34188488C214A330F821EF708
Authority key identifier: B5:3C:2F:7E:0F:A9:7A:02:94:13:90:83:D4:0B:C8:F9:09:32:98:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B53C2F7E0FA97A0294139083D40BC8F909329807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa
Signing time:             Fri 04 Aug 2023 21:45:40 +0000
ROA not before:           Fri 04 Aug 2023 21:40:40 +0000
ROA not after:            Fri 02 Aug 2024 21:45:40 +0000
asID:                     271137
IP address blocks:        201.54.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0a:f2:fb:59:37:fa:d3:41:88:48:8c:21:4a:33:0f:82:1e:f7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53C2F7E0FA97A0294139083D40BC8F909329807
        Validity
            Not Before: Aug  4 21:40:40 2023 GMT
            Not After : Aug  2 21:45:40 2024 GMT
        Subject: CN=405DDC98C8FBC43A1B35D270F4784776092AF998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:0c:72:9c:a2:93:77:fe:98:e1:ce:45:34:
                    da:88:de:88:12:61:a6:e5:08:13:23:83:d9:95:dc:
                    dc:2b:f4:1b:d6:32:c6:93:34:7f:fe:23:23:fe:e1:
                    72:6b:92:1f:5a:bf:ba:41:0a:17:7a:ba:53:b5:1e:
                    df:b0:d6:13:15:cd:9d:4d:f7:a8:22:4e:13:09:ef:
                    bd:e5:c5:81:b7:f1:79:49:77:87:86:61:42:1c:52:
                    de:20:20:33:c5:ad:4a:5e:f4:f9:42:5f:de:46:ec:
                    7d:e0:a6:77:d4:f8:29:29:1c:d5:eb:a9:c4:4e:12:
                    13:59:e6:d4:d6:e5:78:4d:b1:54:73:c9:ba:f4:97:
                    e0:20:f6:5f:32:41:1c:86:f1:02:d5:1d:ef:5c:0a:
                    2d:88:88:10:60:ed:1b:08:d6:59:f6:fc:5b:57:ba:
                    b6:39:77:9f:27:eb:aa:1b:45:e3:c3:be:8b:c1:71:
                    b4:79:06:71:6a:67:dc:3e:9f:b2:57:1b:db:c1:06:
                    6e:f4:4e:51:25:f3:91:7d:1f:c8:81:f8:24:e8:ac:
                    fb:1f:94:ce:80:88:85:cb:bd:32:c7:6b:06:76:94:
                    0a:76:f0:c0:3b:72:17:0f:01:80:6f:0c:2a:ba:14:
                    ce:a0:e4:9a:4c:0b:db:ca:be:7b:83:1b:27:d2:21:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5D:DC:98:C8:FB:C4:3A:1B:35:D2:70:F4:78:47:76:09:2A:F9:98
            X509v3 Authority Key Identifier:
                keyid:B5:3C:2F:7E:0F:A9:7A:02:94:13:90:83:D4:0B:C8:F9:09:32:98:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/B53C2F7E0FA97A0294139083D40BC8F909329807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B53C2F7E0FA97A0294139083D40BC8F909329807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:02:36:9c:f1:15:25:b3:55:fc:6a:9b:02:18:b4:02:1f:
         54:7d:b6:6b:bc:10:06:59:3f:64:92:a1:ed:08:09:3c:e4:86:
         8f:aa:f8:44:5c:da:fe:25:ed:20:35:fa:09:bb:97:ef:70:76:
         4c:55:31:eb:0d:0a:71:40:b1:be:b3:3c:ad:0e:b4:03:3d:fe:
         87:dd:fc:1b:64:1d:99:c8:aa:2a:c1:28:6e:02:b3:81:b9:7c:
         98:b3:f4:55:5c:3a:76:aa:11:85:5d:32:c9:d7:9a:7d:42:ca:
         89:11:d5:f5:19:14:83:22:a1:5a:67:03:37:53:38:56:69:23:
         b5:e0:5a:f3:2f:20:75:66:f1:e6:9d:34:47:dd:5c:af:6e:9a:
         d3:69:99:fe:3f:f3:1f:5b:bc:b4:d6:23:a6:8d:c9:98:73:1b:
         70:c9:d4:e0:b0:f2:cd:da:cc:a8:18:18:cd:35:9c:d0:bb:ff:
         39:d1:31:89:28:12:94:07:54:02:f5:81:0d:7a:4e:1c:b7:41:
         aa:54:38:09:e2:22:3e:89:d0:d0:6c:f3:4d:01:62:1c:1e:16:
         4b:87:61:32:5d:53:74:4d:09:d4:14:9f:7e:f4:56:2b:84:e1:
         12:b0:90:6e:25:49:da:bd:f4:db:64:1d:c1:8b:42:81:e9:c2:
         82:68:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org