Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          w+1kkrMb8ckvwpU+54xVv7Z07xuMfg8OFJh8Y+8G1p4=
Subject key identifier:   AB:B2:9E:9F:4A:46:1B:51:D7:68:CF:6A:88:7A:07:08:F1:8E:BC:9B
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       5A69F109F39F02C0411BC96848C5361D50D0C8AE
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:00 +0000
ROA not before:           Mon 09 Oct 2023 15:55:00 +0000
ROA not after:            Wed 09 Oct 2024 16:00:00 +0000
asID:                     262494
IP address blocks:        168.205.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:69:f1:09:f3:9f:02:c0:41:1b:c9:68:48:c5:36:1d:50:d0:c8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:00 2023 GMT
            Not After : Oct  9 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100D71CEF7CB5F4FA987ED33386C019D0096077D351FE721042AC3D6C44080A368B5121DFD9451593A010AF9D3D11D5DCE3A89C03A4722362EEE2F0D5FB0AF92325EA594C5A6E273574CA986F8F2E852127CA89C2B32E41D217EAB23F8E836B48304126581077F8659DA5BE4835B254F90CBA74CB68AA622D07E35E99D042A67660834667CF9E88C97D714E0D9606D7650015FAD1528CDC60914163A3DA1025B1269A455420D5FB8D45A464C55472BCF7F434CC65118B48FCAC06833773A480E65AE6C85D42B05176A4DEF8A039B25D31788A1B9E9EFF61875C0CF2DDD61022E42601D29F2F2087D4E007F9296C94F881C0815F13C0A9292243794C75021D6357630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:ef:7c:b5:f4:fa:98:7e:d3:33:86:c0:19:
                    d0:09:60:77:d3:51:fe:72:10:42:ac:3d:6c:44:08:
                    0a:36:8b:51:21:df:d9:45:15:93:a0:10:af:9d:3d:
                    11:d5:dc:e3:a8:9c:03:a4:72:23:62:ee:e2:f0:d5:
                    fb:0a:f9:23:25:ea:59:4c:5a:6e:27:35:74:ca:98:
                    6f:8f:2e:85:21:27:ca:89:c2:b3:2e:41:d2:17:ea:
                    b2:3f:8e:83:6b:48:30:41:26:58:10:77:f8:65:9d:
                    a5:be:48:35:b2:54:f9:0c:ba:74:cb:68:aa:62:2d:
                    07:e3:5e:99:d0:42:a6:76:60:83:46:67:cf:9e:88:
                    c9:7d:71:4e:0d:96:06:d7:65:00:15:fa:d1:52:8c:
                    dc:60:91:41:63:a3:da:10:25:b1:26:9a:45:54:20:
                    d5:fb:8d:45:a4:64:c5:54:72:bc:f7:f4:34:cc:65:
                    11:8b:48:fc:ac:06:83:37:73:a4:80:e6:5a:e6:c8:
                    5d:42:b0:51:76:a4:de:f8:a0:39:b2:5d:31:78:8a:
                    1b:9e:9e:ff:61:87:5c:0c:f2:dd:d6:10:22:e4:26:
                    01:d2:9f:2f:20:87:d4:e0:07:f9:29:6c:94:f8:81:
                    c0:81:5f:13:c0:a9:29:22:43:79:4c:75:02:1d:63:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B2:9E:9F:4A:46:1B:51:D7:68:CF:6A:88:7A:07:08:F1:8E:BC:9B
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:8f:c8:38:0b:6c:47:4d:58:6c:c6:6f:b3:28:f3:2c:0d:
         d3:79:8a:65:d0:a9:1d:cd:8e:43:dd:8d:82:3c:46:fe:31:6d:
         ae:b2:8a:1b:4c:10:06:4c:5e:fd:06:8c:47:af:e2:92:42:ca:
         ec:0b:1b:aa:3a:21:86:69:08:6f:45:67:12:f1:6d:2e:03:55:
         d0:aa:34:61:0a:cd:d0:05:6d:b1:ce:b2:b1:f5:c7:38:5c:8b:
         38:2b:b9:c7:c7:aa:8b:c1:0e:21:c9:84:d1:a5:e7:c7:6c:9d:
         aa:95:ea:ab:39:67:00:cf:80:6a:7d:8e:50:f5:17:7d:25:97:
         8f:f7:f2:b6:43:d1:fb:dc:43:8c:62:1b:48:7a:c3:ff:50:02:
         4d:7c:1b:d8:78:bc:fc:9a:7a:7c:31:75:b7:cd:aa:f8:11:40:
         5b:b8:0f:e5:66:be:32:79:19:d8:0a:3b:5e:61:06:a7:8e:f9:
         94:73:4a:a1:fc:a2:02:09:f3:59:13:fc:2a:13:43:ff:83:48:
         69:55:0a:cc:f8:82:f6:e0:67:9a:ac:91:f5:d8:2e:22:bc:54:
         3a:d4:36:6d:1a:d4:96:52:28:aa:42:3c:29:eb:80:43:e7:70:
         72:5d:2f:50:6c:00:6a:5d:61:d1:3c:e3:47:18:3e:f9:a6:20:
         d0:7e:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org