Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e39322e302f32322d3234203d3e203238363436.roa
File:                     3230312e37372e39322e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier:          MaJ4Om43HOB5OZ8+Jc8r9OOAUKjy2pX6ttF0iPHiAaw=
Subject key identifier:   2F:09:3E:6E:B1:E8:B1:DF:B3:8D:75:4D:C4:C1:3B:74:51:06:08:B3
Certificate issuer:       /CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Certificate serial:       1F39EEA6882A65E03DF328AED550925BA62ABAF5
Authority key identifier: D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e39322e302f32322d3234203d3e203238363436.roa
Signing time:             Fri 23 Feb 2024 18:28:13 +0000
ROA not before:           Fri 23 Feb 2024 18:23:13 +0000
ROA not after:            Fri 21 Feb 2025 18:28:13 +0000
asID:                     28646
IP address blocks:        201.77.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:39:ee:a6:88:2a:65:e0:3d:f3:28:ae:d5:50:92:5b:a6:2a:ba:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
        Validity
            Not Before: Feb 23 18:23:13 2024 GMT
            Not After : Feb 21 18:28:13 2025 GMT
        Subject: CN=2F093E6EB1E8B1DFB38D754DC4C13B74510608B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:f6:f2:41:8d:b5:be:24:c7:46:1d:cd:7d:
                    d4:a2:24:ef:44:21:62:6d:01:1a:00:33:46:24:54:
                    ce:77:e4:24:16:a7:0b:07:e3:d9:46:57:32:42:c0:
                    60:19:81:a6:b3:ae:89:4e:53:18:4b:63:06:4f:cd:
                    a4:df:16:93:e2:72:9c:47:6a:0a:94:4c:8b:46:ac:
                    18:c2:24:98:d7:de:81:08:be:13:4a:86:47:fd:da:
                    56:ab:1d:f7:23:8e:c6:d4:3a:c9:51:75:e4:28:2a:
                    7b:f7:4f:ce:8e:a3:a6:34:f9:fd:f6:ae:ec:bc:fa:
                    a6:c6:09:31:a0:30:77:7d:ad:86:a0:7d:70:2a:fb:
                    41:17:93:13:bf:91:cf:62:4a:d5:74:ca:64:22:d6:
                    2c:b0:18:47:a9:c3:2d:c2:75:9a:02:af:ea:4b:75:
                    0e:c2:24:28:ff:96:61:50:c6:ad:ca:bc:3e:cb:94:
                    9f:e3:f2:be:ba:61:aa:7c:cc:64:20:46:cf:b8:9d:
                    10:09:39:ff:fc:c6:d0:df:8e:c3:a1:78:49:f5:c0:
                    26:82:94:50:6e:41:d8:0d:45:ae:7b:8e:a7:45:be:
                    12:31:56:f7:57:50:f4:02:e1:04:f3:b0:60:05:07:
                    4e:34:68:ac:36:77:58:88:a7:5b:42:41:26:8c:ae:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:3E:6E:B1:E8:B1:DF:B3:8D:75:4D:C4:C1:3B:74:51:06:08:B3
            X509v3 Authority Key Identifier:
                keyid:D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e39322e302f32322d3234203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:38:9b:c5:90:4f:39:fc:e1:c3:b0:5e:6d:5d:88:26:8b:
         d5:0d:36:15:0e:63:e1:e9:71:29:0b:76:09:18:26:f1:c9:9c:
         70:ad:bd:cf:71:fb:7f:b0:82:18:ad:f3:03:fc:c1:b1:ca:68:
         d7:f1:18:ad:bd:a0:1a:57:1c:6f:f5:40:91:1c:c3:85:64:43:
         ab:98:e5:ec:db:51:34:a3:eb:a1:a8:1b:66:bb:67:63:06:25:
         c6:65:66:ef:30:b9:3b:ea:c7:60:93:8f:16:b5:b2:2a:95:c6:
         1a:9b:60:6f:6c:d1:9e:0f:13:1b:48:0d:a7:6b:7e:1a:ce:8d:
         d9:52:33:43:af:c1:5b:69:43:97:e6:4e:04:a1:c1:cd:b6:35:
         64:48:ee:d9:21:9e:6a:a3:8c:43:c4:24:59:44:ea:c6:de:f8:
         8e:4a:79:a5:e7:e2:e7:4d:28:e1:d8:cd:8a:71:f6:66:42:ac:
         e9:07:4c:25:62:06:a2:81:a0:31:85:2e:62:f8:e3:7b:92:44:
         a5:30:a5:89:83:f7:0e:a2:cd:3a:ba:e8:5c:4f:c1:03:42:96:
         54:51:90:b5:e2:21:80:91:b8:d4:ef:2c:0c:8e:2e:7d:b4:4c:
         00:23:cf:13:c3:ec:fa:26:b6:3e:14:ad:f6:55:70:59:a2:ec:
         1b:03:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org