Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138332e302f32342d3234203d3e20323731323336.roa
File:                     3230312e35342e3138332e302f32342d3234203d3e20323731323336.roa (raw, json)
Hash identifier:          luDL1IVMi61m5VH3barGPZds8pEvLYLhOOlAMdBesIk=
Subject key identifier:   C2:7F:DB:6C:E9:EE:17:F6:AA:BA:8B:1B:E6:6E:79:F0:5E:0D:A5:8B
Certificate issuer:       /CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
Certificate serial:       3E6383DA7DE7FD009F364B541A5750DD74F2E207
Authority key identifier: FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138332e302f32342d3234203d3e20323731323336.roa
Signing time:             Thu 07 Mar 2024 23:56:53 +0000
ROA not before:           Thu 07 Mar 2024 23:51:53 +0000
ROA not after:            Thu 06 Mar 2025 23:56:53 +0000
asID:                     271236
IP address blocks:        201.54.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:63:83:da:7d:e7:fd:00:9f:36:4b:54:1a:57:50:dd:74:f2:e2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
        Validity
            Not Before: Mar  7 23:51:53 2024 GMT
            Not After : Mar  6 23:56:53 2025 GMT
        Subject: CN=C27FDB6CE9EE17F6AABA8B1BE66E79F05E0DA58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:81:2e:00:66:48:ec:85:ba:96:d3:d8:70:
                    0b:69:6a:ca:25:ff:e9:96:38:e2:95:5f:52:ef:55:
                    29:c2:9d:c0:13:e3:bb:4b:50:6c:ec:21:43:f1:c5:
                    23:0c:9f:fc:ec:be:9c:7b:6c:70:65:cd:82:af:7f:
                    da:38:22:5d:43:47:79:9d:80:3e:88:71:f7:a6:e3:
                    03:50:7d:99:2f:18:82:e3:e7:9d:5e:78:52:6a:d2:
                    d5:82:3d:e6:7b:d3:43:4b:b7:a9:59:45:00:18:d9:
                    b2:62:30:67:99:70:3c:5f:cc:e7:59:0b:fe:bd:39:
                    ea:4c:8f:64:1f:78:12:22:e1:16:2f:35:ef:43:03:
                    df:9c:20:8e:af:dd:4f:81:3e:3c:4d:a8:a9:d4:e1:
                    3e:de:2a:f3:18:16:ad:23:57:21:73:b7:a0:c0:e4:
                    5c:d7:f1:42:2c:e4:64:45:93:43:f8:6e:c2:fb:c7:
                    02:5d:6d:29:ed:ec:7a:8c:a3:70:cd:d1:36:6b:f8:
                    94:a6:8d:0c:b1:6a:e1:b3:50:44:77:28:03:42:43:
                    24:9f:e2:ef:39:5b:53:2c:86:04:91:3b:d3:f0:a7:
                    bc:29:d5:fb:1e:42:7d:1b:6e:c4:12:69:28:9d:ec:
                    6f:9a:cb:d0:ff:05:81:c4:7e:17:a9:fe:23:0c:1b:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:DB:6C:E9:EE:17:F6:AA:BA:8B:1B:E6:6E:79:F0:5E:0D:A5:8B
            X509v3 Authority Key Identifier:
                keyid:FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/3230312e35342e3138332e302f32342d3234203d3e20323731323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:41:05:d9:f7:3b:8a:5c:d5:82:cb:c0:f7:30:7f:e5:fb:
         a6:77:7f:82:78:55:f8:ca:67:96:43:98:13:e8:51:bb:79:97:
         41:13:93:fb:92:c3:1b:94:00:7c:c3:30:6a:28:65:33:a7:e8:
         d9:51:0e:a0:d9:ba:d6:18:82:45:78:13:86:bd:f1:05:f9:d2:
         08:c4:05:d3:fd:79:d3:70:13:4e:48:b0:61:82:41:5c:59:2a:
         41:05:88:0b:68:75:fd:7a:7b:e0:6f:57:65:2d:2c:c4:d0:5f:
         6d:80:b8:06:d3:49:ba:8b:ab:08:b4:29:b6:07:06:5e:98:fa:
         35:e8:41:0a:7a:c8:91:12:7f:96:02:8d:6f:13:cc:b2:b3:07:
         9a:70:74:91:38:d3:f2:2d:fe:bb:c1:7c:57:ed:4c:5b:69:09:
         95:a5:18:a5:53:25:58:bc:c0:f1:51:8a:e2:dc:eb:ea:eb:80:
         fb:84:3b:10:67:a1:c8:b0:aa:39:e9:c6:1c:f5:87:80:bc:3f:
         18:1e:d4:d2:c6:85:8f:2f:1c:07:dc:50:b0:45:d2:bd:7f:86:
         4d:0f:be:ba:5b:0e:13:5b:48:c0:ba:33:a7:3a:c9:3e:5d:e7:
         16:3f:62:33:bc:42:46:d5:bf:48:57:0b:9d:55:fe:8e:e6:79:
         5a:a8:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:27 2025 by rpki-client