Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32342d3234203d3e20323731323336.roa
File:                     3230312e35342e3138302e302f32342d3234203d3e20323731323336.roa (raw, json)
Hash identifier:          NC/ErKBIXusS7JRmIafAxPnMCxxUJ5MZxxPA/GYjSk4=
Subject key identifier:   57:0C:83:0C:6C:95:B9:E9:69:87:E3:AC:83:4C:E1:09:CA:AC:A5:69
Certificate issuer:       /CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
Certificate serial:       038995FCC60C5921FA9172459A6F9CF5585A8724
Authority key identifier: FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32342d3234203d3e20323731323336.roa
Signing time:             Thu 07 Mar 2024 23:55:42 +0000
ROA not before:           Thu 07 Mar 2024 23:50:42 +0000
ROA not after:            Thu 06 Mar 2025 23:55:42 +0000
asID:                     271236
IP address blocks:        201.54.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:89:95:fc:c6:0c:59:21:fa:91:72:45:9a:6f:9c:f5:58:5a:87:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
        Validity
            Not Before: Mar  7 23:50:42 2024 GMT
            Not After : Mar  6 23:55:42 2025 GMT
        Subject: CN=570C830C6C95B9E96987E3AC834CE109CAACA569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:0b:e6:f0:c5:a4:07:fa:a8:ed:74:31:3a:
                    4b:f6:ab:12:6a:b1:e5:2d:15:97:cf:43:24:e4:ac:
                    0c:91:d8:de:6d:16:20:1b:79:2b:dd:83:bc:c4:80:
                    ad:76:f0:50:0c:56:cb:22:5c:eb:51:c6:87:a7:ac:
                    0a:33:8f:d7:6f:ef:ec:28:1e:11:2f:35:20:b1:87:
                    10:43:72:de:4c:20:f3:30:c4:2b:08:7c:b3:e4:f7:
                    7a:46:94:48:0c:f2:14:3d:2e:2b:4d:ed:5e:c4:10:
                    4d:b7:37:70:eb:a1:ab:e6:7f:82:5c:90:dc:18:c8:
                    25:b3:e7:64:fb:23:bf:c6:4d:6b:b3:1d:fe:8a:12:
                    c5:12:14:9f:49:8c:29:73:d1:25:41:f9:38:d5:e3:
                    a2:2f:b4:65:12:45:fa:2a:ef:e3:9f:5d:96:b1:5b:
                    00:f0:52:09:c4:4f:b8:3f:17:b4:e6:da:62:a4:33:
                    fc:b5:3e:fb:ed:9b:0b:b2:39:9d:32:07:39:21:1c:
                    56:30:c6:06:85:f2:ac:b7:c6:63:05:64:e2:85:b8:
                    f2:de:ee:21:8e:35:6b:6f:cc:d7:8c:26:aa:89:e3:
                    b4:ce:2c:22:64:84:83:4f:c4:ea:d1:7a:9e:5f:c5:
                    0e:7b:c8:45:6d:2d:da:dc:11:1d:52:3c:84:c3:d3:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:83:0C:6C:95:B9:E9:69:87:E3:AC:83:4C:E1:09:CA:AC:A5:69
            X509v3 Authority Key Identifier:
                keyid:FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138302e302f32342d3234203d3e20323731323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:07:fa:e3:21:c2:b0:b0:a8:4e:6c:b7:a4:c0:12:96:7a:82:
         c3:a3:e0:69:05:eb:c5:ab:7c:28:28:ab:00:4d:ad:7c:92:5d:
         8b:ec:ff:0a:68:22:6c:47:14:5c:5f:4f:7f:b0:8b:00:46:94:
         01:64:1c:f1:b1:9d:a2:cb:b6:62:49:ff:7e:98:ce:4f:a1:16:
         8f:a3:9b:b0:85:36:77:1b:6b:78:fd:b9:9e:e8:c1:38:1b:6e:
         a3:68:63:48:64:92:3f:01:bb:4d:f0:f6:a6:0b:74:0a:b7:c4:
         77:b5:48:13:14:23:8c:12:1e:25:79:bf:b0:a2:48:a9:93:1d:
         1b:e1:8d:3f:f3:2c:d9:eb:b6:1e:7f:1c:82:ea:c1:ca:c0:75:
         29:57:2d:a6:71:98:86:47:87:5e:57:2b:8b:5e:cb:d9:b2:02:
         6d:e2:c3:a5:fc:a7:ba:30:04:77:1f:1c:2f:e7:6c:bb:41:a6:
         f7:74:f3:dc:7e:5a:f0:4b:6b:4f:15:c9:3f:88:8c:e8:6c:c7:
         14:40:2f:d9:a0:34:f4:a7:0d:25:ce:d8:e4:46:27:05:2f:5a:
         65:2d:8e:b3:96:75:50:15:b9:5a:4a:81:65:74:fd:0e:6a:a7:
         0b:3b:d1:3e:52:13:4b:aa:e7:71:68:86:44:82:81:e0:55:71:
         50:9f:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:27 2025 by rpki-client