Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa
File:                     3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          gYVx0Wcqq79bZbzrSJIQAgtxF4YFyT6E8dX7G3ZDH8M=
Subject key identifier:   36:CD:9F:39:32:17:CA:98:B6:99:49:AD:90:B1:A0:A8:2D:DB:1B:67
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       551B52AE2A3BA2A40D05B60BDCF114C5C254F0F7
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:02 +0000
ROA not before:           Mon 09 Oct 2023 15:55:02 +0000
ROA not after:            Wed 09 Oct 2024 16:00:02 +0000
asID:                     262494
IP address blocks:        170.82.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:52:ae:2a:3b:a2:a4:0d:05:b6:0b:dc:f1:14:c5:c2:54:f0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:02 2023 GMT
            Not After : Oct  9 16:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:89:e3:2f:35:07:b3:4d:8a:0f:68:d3:e7:
                    8c:d8:74:28:ad:71:c5:0a:c7:cc:ff:99:f4:3c:9d:
                    92:01:59:04:28:9d:70:4c:e0:fc:a2:ea:18:73:8f:
                    f5:45:c5:7d:e6:d8:94:b4:e9:e0:6c:ea:cc:e0:f3:
                    e8:57:5d:09:46:cb:a3:3f:4b:a7:c1:be:ad:04:a3:
                    0f:bc:25:14:1e:0d:7e:dd:4b:2e:9a:82:d6:a6:21:
                    06:51:c6:80:4c:04:fb:f4:52:de:ac:84:fb:da:4b:
                    1e:58:0f:46:7f:de:65:24:95:63:61:19:05:01:28:
                    b4:ff:88:74:4c:76:60:07:48:b0:06:e5:0e:3b:55:
                    92:e2:75:a6:3f:6d:36:52:fb:c6:bd:86:ad:3a:e8:
                    4c:1e:40:88:73:03:39:a8:7e:a5:6a:63:ae:8d:26:
                    6f:a0:be:55:80:90:ab:a7:d9:7e:7c:06:94:70:fe:
                    fb:f8:37:78:7f:d2:08:a5:6a:2f:92:e7:21:ab:9f:
                    92:15:44:c7:bf:d8:39:98:92:34:88:29:3a:34:90:
                    c1:38:15:25:60:f8:88:8a:1e:24:33:75:e9:0e:fb:
                    eb:75:80:e2:70:59:16:60:43:96:13:07:41:5f:b3:
                    22:55:31:db:8e:b8:d1:02:01:50:21:7a:ca:d0:eb:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CD:9F:39:32:17:CA:98:B6:99:49:AD:90:B1:A0:A8:2D:DB:1B:67
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:9a:2c:60:53:27:0d:22:3c:6f:a5:35:44:c3:d6:06:34:
         e3:6d:3d:5c:f1:1c:a4:b8:38:91:5a:2a:56:e5:bc:fd:9b:66:
         45:b5:0d:9b:8f:14:4c:74:4c:61:54:20:3a:71:48:73:d9:ee:
         08:90:c1:fd:fa:47:9d:4f:a6:72:e2:40:f9:d6:5d:1c:70:4a:
         01:0a:28:e3:11:c6:61:c9:7e:8a:df:71:d8:af:c1:ba:e4:55:
         c8:50:1b:cb:a5:cb:e7:18:9f:5f:c2:96:70:20:c9:b6:bf:18:
         3d:8b:68:6a:63:35:cc:bd:58:3f:a8:36:d4:6a:57:61:1b:8f:
         72:74:f6:87:d4:a0:94:f0:18:cf:93:d0:1f:b5:7d:d3:73:08:
         87:69:65:d9:66:42:d0:b0:4c:41:a2:33:99:ee:89:72:a5:58:
         90:a8:d2:a8:fd:7d:be:c1:8f:87:4b:db:a5:6f:5d:a3:4a:4f:
         8a:46:b4:8d:cc:4d:1d:81:d1:24:f7:88:c4:bd:a0:6f:a2:22:
         cd:d3:ea:3c:b6:98:38:50:b9:77:80:a5:6c:a4:4e:3f:67:4a:
         4e:74:4f:64:05:59:52:d9:ef:5e:37:6e:f5:75:30:ae:78:9a:
         53:b3:a3:5a:87:ef:0d:13:94:9e:64:f5:51:92:06:8e:44:d3:
         37:04:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org