Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa (raw, json)
Hash identifier:          vwY4yquIomjQl036c/RS+jtpkCL2KiS2jSnoe6K8y3A=
Subject key identifier:   07:C3:56:C8:3D:1F:87:15:8E:24:EA:7D:9C:E1:3F:1D:40:B9:64:05
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       611D212184634A8766DB5D1455FD4E0C94C16F6C
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
Signing time:             Fri 08 Mar 2024 13:44:48 +0000
ROA not before:           Fri 08 Mar 2024 13:39:48 +0000
ROA not after:            Fri 07 Mar 2025 13:44:48 +0000
asID:                     52758
IP address blocks:        201.131.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1d:21:21:84:63:4a:87:66:db:5d:14:55:fd:4e:0c:94:c1:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar  8 13:39:48 2024 GMT
            Not After : Mar  7 13:44:48 2025 GMT
        Subject: CN=07C356C83D1F87158E24EA7D9CE13F1D40B96405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:3c:81:b5:6b:eb:44:34:d3:de:f5:39:6b:
                    4c:0a:9e:51:16:17:7b:3f:f1:a4:ef:4c:7e:95:8b:
                    79:3d:6a:c0:47:0c:dc:f9:c1:55:54:c1:26:c2:fe:
                    5f:02:52:e8:18:dd:07:62:20:10:0f:3d:18:6d:04:
                    15:a6:d9:80:62:e6:88:a8:97:d4:21:62:91:d5:52:
                    9c:04:15:79:b1:fd:97:e2:3d:ca:fc:cc:a9:27:b6:
                    46:3f:14:85:67:be:a4:b8:bb:e3:3f:f8:b6:f0:0c:
                    dd:b4:2b:b8:e0:43:25:a5:bc:1c:7b:e8:57:63:5b:
                    b3:24:a2:6f:e4:a8:21:0c:6d:b6:b7:ba:01:74:24:
                    ad:e8:8c:31:49:c8:5b:76:e7:7b:a9:c7:38:a9:5d:
                    ce:7d:17:3c:98:3f:4f:5c:cc:1d:9b:4e:3f:86:90:
                    74:5d:ab:aa:1f:85:c7:8e:25:44:f4:ef:29:ad:b3:
                    80:20:0e:a5:01:d2:52:83:5b:b4:84:4f:c4:66:9a:
                    fd:29:c9:56:6f:34:ce:7c:f7:c8:ce:2c:29:31:af:
                    9f:80:7d:a6:a1:8b:9d:61:4c:82:e5:02:19:93:ae:
                    f0:41:fc:a8:fb:82:33:e8:1b:bf:e8:ee:b9:c3:32:
                    f4:6d:f3:3d:fa:87:8e:2c:7f:f4:d7:ac:49:9b:d6:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:56:C8:3D:1F:87:15:8E:24:EA:7D:9C:E1:3F:1D:40:B9:64:05
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:84:71:64:c1:12:86:14:2a:44:7e:7c:15:15:38:8c:87:
         1d:05:b2:45:26:f4:b6:4e:e5:bf:83:ec:95:c7:b2:7b:7e:d6:
         de:ea:a2:f6:90:e3:f0:b7:c2:87:a8:1a:6f:c7:ab:57:2d:a5:
         03:af:43:82:14:d6:dd:8c:20:ce:61:8d:98:6b:08:d7:f6:77:
         04:5f:0e:9f:64:80:fb:70:16:5d:27:d3:bd:51:cd:f9:61:98:
         e2:3b:4c:fe:18:db:69:26:69:8e:19:7d:8b:2a:9b:23:b3:e1:
         24:1c:f6:a4:8d:81:07:29:20:3e:b9:f4:63:42:28:83:7b:a4:
         93:02:db:cb:3a:af:fe:c1:a4:cc:fa:88:5d:0d:e2:25:17:1b:
         00:ef:6a:4c:69:05:dc:1a:a3:a4:20:37:32:05:78:0c:34:5a:
         47:cf:2e:c6:f4:31:b7:4b:ac:54:92:d3:34:be:09:44:5f:88:
         67:4d:62:18:9e:0f:d5:57:24:77:90:0d:a1:32:51:88:16:3a:
         26:75:22:b5:bc:69:0b:86:35:1b:e3:57:33:1c:54:86:fb:3b:
         12:30:41:15:bc:56:d6:a3:ba:76:91:e3:12:88:5a:79:e3:73:
         4b:a7:75:c3:8c:42:da:99:fe:87:7c:81:f6:04:58:26:33:7a:
         20:59:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org