Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32322d3232203d3e20323731323336.roa
File:                     3230312e35342e3138302e302f32322d3232203d3e20323731323336.roa (raw, json)
Hash identifier:          q/fvEZgfcVfCAvo4PYKL3zWMZTCvyvxQUnl/IJgVNME=
Subject key identifier:   39:8D:22:98:0B:CF:74:FA:CD:10:67:E6:53:58:E4:49:46:53:F4:12
Certificate issuer:       /CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
Certificate serial:       49717ED70B14225255094B76B4F783EC9A5B9961
Authority key identifier: FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32322d3232203d3e20323731323336.roa
Signing time:             Mon 23 Oct 2023 21:10:54 +0000
ROA not before:           Mon 23 Oct 2023 21:05:54 +0000
ROA not after:            Mon 21 Oct 2024 21:10:54 +0000
asID:                     271236
IP address blocks:        201.54.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:71:7e:d7:0b:14:22:52:55:09:4b:76:b4:f7:83:ec:9a:5b:99:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
        Validity
            Not Before: Oct 23 21:05:54 2023 GMT
            Not After : Oct 21 21:10:54 2024 GMT
        Subject: CN=398D22980BCF74FACD1067E65358E4494653F412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:d6:1c:b8:96:af:8a:66:d3:39:9e:1a:3f:
                    8b:6c:07:00:e1:50:6e:7d:b4:29:e2:53:51:01:12:
                    e9:0e:5f:b8:92:0b:b4:f0:23:10:50:e2:4b:71:f5:
                    69:72:46:88:9d:94:d0:49:ba:1a:f7:58:9d:45:18:
                    eb:9a:73:ca:28:f7:b8:ec:c1:1d:50:25:f5:17:3f:
                    20:73:2f:ed:34:f7:96:b5:b1:ca:9a:b9:78:90:40:
                    61:ca:ae:d4:ac:ce:ab:69:aa:9a:ed:9f:9c:fb:68:
                    04:fd:07:6a:79:33:be:79:8e:ec:f3:01:48:2a:a9:
                    08:29:fd:2e:ed:92:8f:e6:a1:28:a1:15:6f:65:26:
                    2b:10:f1:d3:34:b4:e7:8d:1c:4e:c8:5a:f5:8f:0e:
                    0d:45:78:30:2d:b1:ca:99:45:b5:ca:7e:51:de:93:
                    d9:04:6a:23:8d:11:0f:83:30:84:a9:62:4e:fb:47:
                    13:0a:13:30:2c:16:0f:cd:8f:77:85:e1:f0:f7:c7:
                    59:84:c4:38:c6:3d:86:98:0d:2b:44:e9:c6:4c:d8:
                    b2:f1:5d:d8:a7:9b:42:00:d4:ba:83:2c:e8:e1:25:
                    7a:72:71:01:21:09:b6:7e:2d:b7:d6:50:a3:9a:8c:
                    24:1d:d9:b6:cc:59:f5:a4:f9:61:2b:19:e8:8c:7b:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:22:98:0B:CF:74:FA:CD:10:67:E6:53:58:E4:49:46:53:F4:12
            X509v3 Authority Key Identifier:
                keyid:FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32322d3232203d3e20323731323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:37:53:8f:38:63:15:71:16:8e:53:59:de:7a:24:0c:46:
         5b:73:96:0f:f2:83:0e:97:bc:3c:ba:0a:69:8f:45:2e:e2:40:
         5a:16:76:db:16:cc:d6:25:e4:56:53:bd:7e:8e:00:2a:bc:23:
         c4:39:13:78:a7:1a:e5:76:51:65:f5:a3:62:41:2a:a6:01:08:
         94:9c:b6:37:6b:99:db:d5:ad:34:d6:f5:70:2f:66:17:d3:0e:
         d6:8c:73:76:e5:22:08:5c:5d:ca:c9:7a:65:e9:58:91:4b:50:
         cf:8e:a3:df:84:98:ac:fc:cd:9e:3d:f9:66:23:02:7d:43:8d:
         74:dd:ba:97:cf:7f:f3:41:cf:a0:a5:6f:f1:b0:7f:47:c1:c3:
         f1:00:21:58:60:21:da:33:fe:ca:51:23:9c:ab:75:15:54:3d:
         ff:f0:b1:b2:5d:26:68:1d:dc:41:7b:03:56:65:5c:27:0d:be:
         b4:20:ca:1a:a7:1c:b3:87:dd:49:a6:a1:4e:80:eb:70:e3:c5:
         b8:5d:1d:27:d6:77:6c:39:4b:e2:06:30:9f:50:8b:9d:0b:30:
         a2:ea:a0:e0:eb:a6:2f:b0:30:f0:f4:c8:85:7f:c3:16:85:65:
         9c:ec:e2:1e:0f:16:84:65:8e:40:fe:b5:0a:f6:fd:83:fa:30:
         29:01:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:52:53 2025 by rpki-client