Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          v1mbakg8pKhdw2Z+Apy7HPr8tJ9etAS0zm4SzV1Gb70=
Subject key identifier:   56:C3:2C:2D:D7:AF:C0:C7:25:04:AD:ED:0D:4B:B1:C6:54:3B:3A:40
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       53E128DC89B51A4123A4753C22C0DF14EA280102
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:00 +0000
ROA not before:           Mon 09 Oct 2023 15:55:00 +0000
ROA not after:            Wed 09 Oct 2024 16:00:00 +0000
asID:                     262494
IP address blocks:        168.205.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e1:28:dc:89:b5:1a:41:23:a4:75:3c:22:c0:df:14:ea:28:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:00 2023 GMT
            Not After : Oct  9 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:17:a8:a6:9c:9f:a9:5f:46:00:e3:c2:63:
                    40:da:a8:79:f4:0b:c1:b1:05:57:07:d4:6d:a5:7b:
                    d1:e1:07:cf:dd:d8:e0:7c:c9:e4:73:53:70:16:a5:
                    09:af:11:0d:7f:b3:41:a4:90:33:f9:1b:4a:4a:2a:
                    f0:3b:13:29:25:ab:52:7d:a5:ea:25:d7:6a:17:03:
                    8a:b2:53:b3:ac:da:cc:5a:07:6b:2a:24:8c:5e:a0:
                    f2:cd:0b:b9:de:ee:c1:e5:f5:d2:d5:36:f9:3c:0d:
                    2e:23:c5:35:61:c7:8f:1a:c7:39:3d:c0:c8:4e:dc:
                    14:a9:cd:ec:32:d7:34:0c:14:35:ef:fb:84:f6:81:
                    b4:84:13:2d:84:f8:b6:17:ca:06:b2:7b:de:da:07:
                    40:2d:17:f1:69:76:09:eb:5b:14:d2:23:27:ea:58:
                    bd:a1:b4:a4:95:2f:9a:2f:39:5f:15:e3:22:72:73:
                    9f:1a:4d:3c:b6:1f:d3:a8:8a:83:04:52:86:d7:ab:
                    88:38:75:f8:98:4f:1e:a9:87:45:de:ff:81:1f:0a:
                    ea:15:07:5e:a5:65:1f:e3:2f:33:ad:b1:6b:dd:32:
                    06:f2:dc:a1:dd:7a:07:58:d9:6f:e0:2d:d0:f0:75:
                    89:32:ce:62:73:73:d8:e0:04:20:4f:48:7f:97:ff:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:2C:2D:D7:AF:C0:C7:25:04:AD:ED:0D:4B:B1:C6:54:3B:3A:40
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:96:3d:c0:71:5f:ae:e9:de:04:8c:ac:17:c6:00:12:e7:b9:
         82:6a:d3:4f:fd:8c:c1:39:97:73:64:47:e7:50:61:65:8f:ae:
         eb:26:c3:26:1c:9d:cf:03:bb:d2:02:12:f8:05:71:18:71:5b:
         d0:2c:39:b1:36:86:e4:41:0b:a2:9d:ad:94:85:72:ad:14:61:
         13:2d:9a:ba:04:85:9f:24:40:c4:21:07:0b:78:00:2f:ef:f9:
         70:c2:20:23:1a:b6:f2:54:2b:90:08:8a:42:c9:4c:97:9e:dc:
         76:19:03:3d:f1:f4:d4:02:5c:68:d7:2a:bb:04:b3:58:80:3a:
         ce:52:09:60:4c:75:ab:b5:9c:19:e4:5d:43:c8:81:1d:50:5c:
         a9:ee:76:19:f7:23:da:09:e7:b6:71:4f:ec:9e:14:86:df:1b:
         bf:3d:05:71:88:e9:18:28:4c:68:2d:5f:80:43:9a:59:37:2c:
         b1:84:40:3b:ab:da:ae:9d:d5:b9:7b:51:8c:cf:e1:e9:c4:95:
         39:e6:0b:10:15:c1:8c:92:29:c3:9c:6c:24:c3:3e:93:71:d8:
         ba:fa:f0:78:ab:2c:41:7a:8f:73:86:db:c2:72:41:0c:a7:a2:
         49:f2:34:4d:42:89:79:f2:05:bc:a8:53:a3:0e:d0:98:cc:22:
         71:7e:fa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org