Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa (raw, json)
Hash identifier:          ACMoQgKOajkzuqwxjCwA/l3NqO/8GUMFbkV6Lfm0x6k=
Subject key identifier:   1E:CF:DD:70:8C:2C:25:0C:96:55:61:9F:D8:95:81:8A:0F:9A:FC:DF
Certificate issuer:       /CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
Certificate serial:       08142CB0716DA7D3AB841E8D7DD70EE5454B84FB
Authority key identifier: FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa
Signing time:             Thu 09 Nov 2023 21:20:18 +0000
ROA not before:           Thu 09 Nov 2023 21:15:18 +0000
ROA not after:            Thu 07 Nov 2024 21:20:18 +0000
asID:                     52758
IP address blocks:        201.131.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:14:2c:b0:71:6d:a7:d3:ab:84:1e:8d:7d:d7:0e:e5:45:4b:84:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
        Validity
            Not Before: Nov  9 21:15:18 2023 GMT
            Not After : Nov  7 21:20:18 2024 GMT
        Subject: CN=1ECFDD708C2C250C9655619FD895818A0F9AFCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:ac:27:a3:6b:ef:f6:37:ee:13:6d:a9:c9:
                    ee:4b:b8:eb:91:fe:5a:91:b5:7a:a6:24:d5:db:c9:
                    05:9a:cd:cd:a7:0e:b2:d9:af:02:4f:eb:c9:05:db:
                    53:93:eb:4d:f8:0e:b5:ad:65:56:18:f2:97:95:61:
                    24:d1:00:c7:9c:5c:3c:37:5c:31:e4:21:f1:ae:62:
                    9b:8d:c6:98:72:e4:4b:3d:84:38:e0:77:8b:d7:c6:
                    7c:2e:5f:b2:61:ae:41:1c:78:9d:74:62:54:be:9e:
                    46:e1:7f:91:e6:63:3f:78:86:de:a9:73:a4:83:68:
                    4a:6c:f4:b1:1c:5f:61:89:2a:3c:3d:53:49:21:5b:
                    c7:48:fc:41:86:0a:e5:e9:37:24:02:ea:23:c2:08:
                    bf:4e:a3:ef:c6:74:ea:7e:d8:d5:bc:76:29:a3:f6:
                    cc:a0:3a:17:d2:9b:bd:7f:ff:e9:55:df:d8:ad:be:
                    d4:77:c4:46:a8:8f:fd:1a:cf:87:ab:49:3c:e3:6c:
                    69:43:b3:11:ba:53:be:6c:79:ce:b0:55:e2:d9:b8:
                    ed:82:92:eb:1e:06:8e:cf:ac:1a:71:f1:12:e9:a8:
                    c3:a6:15:08:3b:06:25:53:a4:2e:a5:81:b5:9c:10:
                    5c:7f:80:29:41:9e:d4:7a:63:c6:5f:4e:4a:3c:82:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CF:DD:70:8C:2C:25:0C:96:55:61:9F:D8:95:81:8A:0F:9A:FC:DF
            X509v3 Authority Key Identifier:
                keyid:FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:d4:4c:aa:59:03:73:93:72:55:c8:a5:db:69:a7:bb:6b:
         f6:6c:62:4a:52:5e:88:33:cc:1f:d9:51:b0:74:79:94:6a:35:
         85:ad:76:f0:01:63:03:ff:c2:87:e5:95:84:76:aa:78:c3:93:
         a7:a6:58:ff:1e:3d:0c:c1:bf:69:17:1a:58:29:96:14:83:9b:
         63:b8:8c:be:87:a1:31:e5:8e:c0:19:38:6d:81:3f:e7:5c:fe:
         26:35:8c:3d:7c:5b:88:3a:35:bc:1c:2a:e8:a5:3a:5a:32:a6:
         27:b2:4b:8b:07:5e:d1:16:45:3f:29:eb:eb:22:ee:7b:ac:19:
         01:53:ff:21:51:cc:da:47:54:63:35:8c:b2:1d:18:ec:dd:ed:
         cf:70:1b:e7:ab:9b:74:02:6f:9e:d3:f1:46:4e:c7:ca:8d:03:
         be:84:c6:e1:de:ae:c1:ef:fd:21:e9:19:37:9f:5b:94:77:45:
         a9:e9:5d:06:ac:e0:0f:00:fd:b5:c2:88:42:3f:c5:73:ae:b3:
         f2:16:1d:66:c9:7d:44:6b:58:28:fa:6e:3b:64:58:56:6e:e8:
         06:68:07:1e:ab:19:7b:1f:88:f8:7e:9e:86:c9:ee:12:5d:31:
         88:3a:53:12:45:1e:2d:97:35:28:9a:f5:30:86:28:5f:71:a8:
         72:2e:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org