Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32322d3234203d3e20323731323336.roa
File:                     3230312e35342e3138302e302f32322d3234203d3e20323731323336.roa (raw, json)
Hash identifier:          nfeRkLLqoNq9uxQdPVwsSLgR34bBllPOP+z2u0LS2tE=
Subject key identifier:   9D:20:DF:CC:C5:12:B0:D9:41:8B:FF:4C:0F:C0:05:EC:ED:28:5C:09
Certificate issuer:       /CN=99E22FDE9968EA6E814D18C26D75AFE82C90F5F4
Certificate serial:       73440D0EC7BFD0BC611944B5B121BBF6E1312B57
Authority key identifier: 99:E2:2F:DE:99:68:EA:6E:81:4D:18:C2:6D:75:AF:E8:2C:90:F5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32322d3234203d3e20323731323336.roa
Signing time:             Thu 28 Mar 2024 12:12:25 +0000
ROA not before:           Thu 28 Mar 2024 12:07:25 +0000
ROA not after:            Thu 27 Mar 2025 12:12:25 +0000
asID:                     271236
IP address blocks:        201.54.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:0d:0e:c7:bf:d0:bc:61:19:44:b5:b1:21:bb:f6:e1:31:2b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E22FDE9968EA6E814D18C26D75AFE82C90F5F4
        Validity
            Not Before: Mar 28 12:07:25 2024 GMT
            Not After : Mar 27 12:12:25 2025 GMT
        Subject: CN=9D20DFCCC512B0D9418BFF4C0FC005ECED285C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:19:1f:c8:45:fd:a5:dd:9e:1c:6f:21:f0:
                    6a:26:4a:33:b0:03:53:f3:b4:17:fe:3a:40:46:3f:
                    bd:15:5c:e1:78:d4:1b:5e:cf:49:f7:88:43:3e:3f:
                    49:4e:0f:43:cc:47:aa:47:f7:03:67:a3:71:c8:26:
                    c6:ca:1f:74:5c:80:a6:1f:74:16:7c:67:05:45:f6:
                    b4:5f:a5:c0:63:0d:c0:58:34:6f:62:af:f5:9d:cb:
                    e2:e2:84:1a:7a:e4:e7:59:e7:92:eb:65:b2:79:68:
                    51:be:1f:66:74:7b:d6:43:a6:31:fd:2b:d1:f2:d4:
                    e7:07:fc:02:30:e5:84:75:3d:f4:fa:7c:ca:05:90:
                    2f:24:3e:e9:00:46:af:1b:fc:05:b5:9f:5c:74:d7:
                    a9:d2:7e:3a:33:e7:ef:9c:4b:3e:cd:82:51:39:d2:
                    06:30:d8:93:26:f7:1d:4b:24:84:e1:ef:16:a7:66:
                    10:ee:45:c3:e7:4f:86:98:79:e2:46:6b:dd:c3:d0:
                    fa:eb:2f:01:ae:09:9d:70:da:33:69:29:6f:83:f0:
                    4c:40:f5:8d:5f:a8:cd:85:63:b0:e4:b4:8d:5f:83:
                    06:af:74:1a:74:3c:19:4a:c1:8d:59:78:ae:11:e2:
                    11:dd:c2:a9:85:80:f5:04:c0:20:2c:39:97:f5:7d:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:DF:CC:C5:12:B0:D9:41:8B:FF:4C:0F:C0:05:EC:ED:28:5C:09
            X509v3 Authority Key Identifier:
                keyid:99:E2:2F:DE:99:68:EA:6E:81:4D:18:C2:6D:75:AF:E8:2C:90:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32322d3234203d3e20323731323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:35:f9:94:42:e9:a1:c5:ca:be:3c:38:b8:ed:77:c0:88:fe:
         db:01:01:c7:e1:bd:24:18:44:e7:c9:d9:11:72:80:d4:4f:a5:
         25:50:39:8f:34:39:95:ac:84:bb:4c:dc:2b:5a:cd:c6:6b:1c:
         b6:31:9e:9a:62:7d:f1:e1:2d:c0:3b:45:13:63:e1:1f:81:e9:
         b3:a8:00:b6:72:fa:c3:79:fb:08:dd:8f:da:a9:a1:79:63:63:
         1c:ba:bd:5d:2e:11:e2:42:6e:e8:65:ab:53:77:63:1e:b6:72:
         ea:5a:5b:f2:b9:91:1f:74:60:fe:8c:61:8d:55:14:58:50:88:
         2c:4c:aa:d5:71:d2:46:f0:f8:3c:29:cb:bd:a2:ca:58:eb:d0:
         73:89:60:f7:1e:7d:af:cd:73:f8:04:5a:55:69:5a:b4:bb:a8:
         00:01:21:eb:9c:90:9c:d6:11:7f:8b:c8:79:4a:44:ee:f4:01:
         ce:0e:d8:8f:2a:98:c1:13:ac:17:95:58:ac:62:36:cb:28:ed:
         2f:3e:86:b2:43:b6:92:eb:46:4e:d7:04:fa:36:d3:fd:5d:ea:
         61:07:d4:18:47:78:b1:85:a2:47:bb:ed:f9:f6:0f:13:6b:cf:
         9e:90:c4:60:bb:18:99:77:a3:cf:d6:bc:5c:9f:22:5f:24:57:
         cb:f8:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org