Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38302e302f32322d3234203d3e203238363436.roa
File:                     3230312e37372e38302e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier:          65mJX1GFhVaz6ZipPUUxEwp4ibOfoHbltmqwmke7OQ8=
Subject key identifier:   A2:58:F6:3B:04:20:1C:BB:DA:F0:09:DA:A0:56:DF:88:7A:1F:F0:32
Certificate issuer:       /CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Certificate serial:       56B11168C9F626D7DDE5F774AE9D12A21951A2E9
Authority key identifier: D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38302e302f32322d3234203d3e203238363436.roa
Signing time:             Fri 23 Feb 2024 18:27:49 +0000
ROA not before:           Fri 23 Feb 2024 18:22:49 +0000
ROA not after:            Fri 21 Feb 2025 18:27:49 +0000
asID:                     28646
IP address blocks:        201.77.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b1:11:68:c9:f6:26:d7:dd:e5:f7:74:ae:9d:12:a2:19:51:a2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
        Validity
            Not Before: Feb 23 18:22:49 2024 GMT
            Not After : Feb 21 18:27:49 2025 GMT
        Subject: CN=A258F63B04201CBBDAF009DAA056DF887A1FF032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:14:a4:3b:5f:a0:c9:f0:ec:ea:ca:6b:99:
                    08:eb:b3:bc:3c:83:78:1c:88:94:7e:6b:51:89:11:
                    d0:85:ab:3e:3f:5b:19:ba:dd:1a:e8:9a:6e:c2:b1:
                    b5:5b:0c:ac:66:fc:6f:6a:3a:31:e2:0d:24:a0:ae:
                    50:b6:07:b8:37:9f:2f:50:8c:f2:4b:05:40:c8:86:
                    b2:e3:87:dc:0b:7a:10:70:69:d9:8b:15:bb:d6:90:
                    78:7a:5b:47:fe:df:4c:4e:ed:cb:fa:5f:38:8f:39:
                    e5:50:9e:9b:4c:83:39:17:0d:b0:20:f1:37:41:c4:
                    aa:a4:eb:76:3d:8f:4f:48:89:49:d1:3b:2b:60:c8:
                    24:70:bd:0a:d6:28:3f:08:f6:35:43:4e:12:be:29:
                    46:b5:72:67:f0:c0:74:68:72:20:ec:bf:a9:4b:3a:
                    6b:d9:5a:f3:e6:af:09:16:a6:2c:a7:56:62:09:75:
                    cf:11:95:8d:89:81:6c:b7:4d:cc:89:d4:d4:d2:95:
                    81:d3:40:25:59:f4:7c:41:60:39:d3:2d:45:8a:e4:
                    20:af:9f:54:45:43:cd:ca:0f:54:bb:84:9b:de:5d:
                    05:d6:97:84:2f:ef:73:4f:a9:42:bc:40:88:8e:8b:
                    53:21:f0:6e:3a:b8:87:c1:8f:e1:a6:0a:2a:00:d5:
                    ea:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:F6:3B:04:20:1C:BB:DA:F0:09:DA:A0:56:DF:88:7A:1F:F0:32
            X509v3 Authority Key Identifier:
                keyid:D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38302e302f32322d3234203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:8b:84:38:fa:5f:b2:04:fa:7b:b1:cc:0e:5a:70:7c:b5:
         b6:9b:1d:6f:9f:93:d7:ab:8e:8b:d8:8e:d1:df:2d:41:46:e1:
         0d:d0:1c:87:c9:7e:ee:cb:f6:0a:6e:d9:c0:3f:d2:ea:38:cd:
         1e:1c:55:43:30:4f:59:e5:63:21:7d:c7:71:9b:b7:45:ed:46:
         0d:45:58:40:32:db:c0:1e:c6:aa:26:ca:2f:ba:21:5c:53:0b:
         56:aa:d5:89:04:a3:d2:d5:15:6c:02:7e:d2:73:60:a4:f4:0a:
         f9:0e:f5:1a:6d:9a:25:71:3f:aa:c7:83:54:93:b5:5e:f0:26:
         55:af:2a:45:df:e9:8f:65:99:d7:33:fd:50:11:26:d1:b9:07:
         74:71:67:f6:fa:0b:16:c3:cd:dc:da:e2:e3:aa:19:bc:8b:0e:
         66:88:5c:22:aa:86:f8:9d:bd:3a:d6:5d:1b:00:ca:c3:61:d7:
         9f:76:68:1f:64:d3:8a:21:c3:27:70:ce:62:a9:ff:2f:e3:37:
         8d:86:ff:b1:dc:79:d9:9a:ed:ee:21:2e:d9:bf:53:bd:58:c9:
         50:66:6d:41:5d:5f:c2:d3:1b:23:f8:c2:47:e5:c4:72:dc:57:
         2f:27:bf:61:01:f2:9e:c1:5c:0d:a1:05:ae:a2:15:b2:70:28:
         2f:d8:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org