Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
File:                     3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          ASiDGkM9NjtNGUnJ2ZLN7AkYhRXFh1uZLnu0oqLsuDo=
Subject key identifier:   B1:BE:C7:22:DE:B0:0A:86:69:C9:2F:42:C1:3D:7E:BB:26:E5:A6:5D
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       02ACEF089BB91625C24A96763D26CCDE8A57EAF1
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:16:25 +0000
ROA not before:           Tue 12 Mar 2024 18:11:25 +0000
ROA not after:            Tue 11 Mar 2025 18:16:25 +0000
asID:                     52758
IP address blocks:        201.131.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ac:ef:08:9b:b9:16:25:c2:4a:96:76:3d:26:cc:de:8a:57:ea:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:11:25 2024 GMT
            Not After : Mar 11 18:16:25 2025 GMT
        Subject: CN=B1BEC722DEB00A8669C92F42C13D7EBB26E5A65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:29:3d:77:71:b8:5e:d3:dc:82:27:27:63:
                    73:62:d8:bf:83:4e:a2:c9:f5:ca:2b:7e:37:31:d2:
                    bd:30:f4:f2:32:54:5c:32:8c:0b:88:f5:d3:01:39:
                    d2:aa:95:b7:bd:b0:5f:8c:9b:31:d6:ef:9a:74:b3:
                    be:95:c6:be:43:cf:e0:99:ab:c7:db:31:f0:af:b5:
                    35:ef:c9:2f:d4:ad:14:cc:10:07:e3:42:35:1f:67:
                    bb:0b:7b:a3:b0:b8:2d:54:49:bd:8d:1a:f9:2d:af:
                    0b:62:02:3f:23:39:ab:17:6c:d8:be:95:6e:d8:30:
                    f7:b0:82:91:9f:49:31:3b:1b:a3:a2:a1:ba:87:51:
                    46:8e:e0:37:88:c4:f5:51:b6:0b:34:f2:d9:08:f2:
                    2c:7c:6e:ff:dc:34:e9:b9:d6:77:f6:03:2a:1e:c5:
                    c6:03:73:a1:f3:20:fa:55:a4:6f:3a:0c:22:f1:95:
                    42:2d:48:d6:7b:79:1b:ea:6f:db:47:26:c6:84:02:
                    3a:f4:45:66:0f:50:e5:54:85:ac:45:f1:c8:31:d6:
                    24:30:77:5a:f0:8f:9e:b0:d4:42:5e:1b:b2:99:24:
                    b1:ec:69:1b:85:bb:55:73:34:a2:92:74:0d:d0:fe:
                    ab:2f:aa:b8:7d:bf:06:28:4a:b9:1f:56:03:a1:ff:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BE:C7:22:DE:B0:0A:86:69:C9:2F:42:C1:3D:7E:BB:26:E5:A6:5D
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:bd:1c:15:3f:d1:63:39:f4:09:bc:8f:25:9e:bf:79:b0:
         a3:5e:d0:83:de:de:19:aa:d1:eb:1f:77:84:e3:e6:5a:02:43:
         0e:25:58:70:74:1c:84:5d:39:fa:08:82:e8:b4:1b:60:e3:0f:
         2f:b7:58:60:42:5d:3c:5e:b9:33:07:3c:a3:67:85:bd:ad:d8:
         b6:37:56:81:df:0e:3b:f0:5a:fc:3c:28:de:77:68:63:13:6d:
         d8:82:0b:d7:d7:9c:e1:73:04:49:0a:0b:d3:f4:8c:53:cc:fe:
         75:1a:df:94:8a:c8:2b:38:64:1f:ee:2f:b7:f5:35:6d:c0:12:
         49:58:cc:cc:bc:4d:98:64:b3:af:2f:90:56:c5:6e:e1:82:33:
         3c:4c:0a:79:61:08:c0:23:6c:bc:76:75:cd:d1:ee:2b:41:cd:
         08:eb:d3:a2:7f:ef:70:22:42:94:18:0a:d0:bf:79:02:f5:8d:
         99:25:c9:e7:ff:82:80:e6:db:97:e0:f4:f9:dd:cc:ef:af:9d:
         ed:aa:95:32:1d:e3:a4:29:69:93:13:2a:b2:27:57:40:b3:6f:
         6c:c4:f6:00:f7:ee:e0:dc:78:58:a9:7d:4e:07:b1:fd:9f:60:
         8f:49:56:ff:55:ae:b4:5e:4d:6f:5e:8c:bb:12:f2:f5:6f:94:
         61:b5:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org