Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa
File:                     3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa (raw, json)
Hash identifier:          xO9RvDjnVx9s2kX+yof9j5+4ZHn9SGlTAWmgO957qUw=
Subject key identifier:   47:B4:39:63:33:62:E0:96:55:E7:FA:87:14:58:F7:38:05:0D:B8:6E
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       0D956251F05F53B1D32E6208D3AC623D756B6CDD
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa
Signing time:             Wed 02 Aug 2023 21:21:47 +0000
ROA not before:           Wed 02 Aug 2023 21:16:47 +0000
ROA not after:            Fri 02 Aug 2024 21:21:47 +0000
asID:                     242494
IP address blocks:        177.129.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:62:51:f0:5f:53:b1:d3:2e:62:08:d3:ac:62:3d:75:6b:6c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:16:47 2023 GMT
            Not After : Aug  2 21:21:47 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:6d:ed:e0:e1:78:50:d6:a1:ec:bf:97:f1:
                    32:59:f6:29:d0:0b:14:1d:fb:93:ce:cb:24:0e:f2:
                    1c:ef:0e:fd:80:84:e8:bb:0e:d4:06:ee:ec:cf:fa:
                    64:b6:72:c7:61:7a:fd:8e:26:34:81:ab:ec:03:b3:
                    2d:be:72:8a:d1:a5:ac:06:00:1b:cc:af:26:67:6c:
                    92:71:dc:28:b5:c0:e3:3a:a7:a0:e4:df:eb:51:e4:
                    c9:fc:d1:ca:c7:83:22:cf:be:f4:4a:37:15:29:d1:
                    af:c7:5c:32:12:a2:52:a3:f6:ff:ae:8a:b4:c4:28:
                    de:bb:31:6a:fe:f9:ca:c1:d2:e5:a3:24:ec:69:27:
                    a6:5f:86:cc:1d:f8:21:da:6f:c6:20:db:96:89:45:
                    ca:e5:a5:d1:3b:c8:96:60:c0:18:58:bf:e2:83:a4:
                    ce:8a:ad:23:9f:b3:f8:b2:c7:27:a1:d5:97:f3:5c:
                    cb:ee:10:56:af:61:97:e0:10:ab:49:56:5d:c8:4c:
                    c2:23:59:86:6c:e6:e8:c3:a1:27:55:50:4c:07:63:
                    2d:b4:cb:96:a6:ef:ed:ba:8a:2c:f3:86:53:a6:a5:
                    e9:7e:61:cd:81:8a:a9:50:a4:fa:95:80:1a:7c:51:
                    92:0e:f4:aa:98:4c:d6:0c:71:a4:25:e4:2e:37:3a:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B4:39:63:33:62:E0:96:55:E7:FA:87:14:58:F7:38:05:0D:B8:6E
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32332d3233203d3e20323432343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:55:fd:03:eb:a1:56:28:93:55:eb:a9:6d:ba:e8:a2:a1:
         32:99:f5:1a:b6:cd:3a:37:d7:7b:fc:bc:7a:58:5c:ac:8f:dd:
         54:cc:cb:6a:ec:a0:c0:7c:cb:97:3b:03:09:59:52:54:da:ad:
         47:63:2f:1b:c7:7b:7a:23:db:87:12:02:51:ac:77:b9:4a:9d:
         a6:c7:fa:e1:24:89:7c:10:35:70:66:4e:5c:d8:56:44:90:2e:
         c2:36:aa:ef:c2:1f:d2:77:96:b2:87:6e:f8:ae:1a:32:ca:fd:
         7c:ef:60:1d:cd:61:f1:c4:72:25:f5:00:0b:7e:9c:b4:5b:46:
         bc:66:fb:7c:3a:38:f5:a4:df:93:07:77:8e:82:4b:f1:14:6e:
         e7:96:4c:d3:59:e6:b7:28:8e:65:1a:c8:2e:34:37:4d:14:e4:
         eb:f6:8e:2a:79:0e:3d:b2:95:19:1a:e9:85:1a:71:47:25:fd:
         2e:37:17:cd:0d:60:5c:12:f3:f7:b8:c8:0d:7b:1d:9d:10:20:
         ef:c3:01:12:57:01:e9:df:5e:12:23:7d:38:7e:89:98:01:d4:
         e7:68:22:e5:1a:73:13:ba:26:39:bc:95:2a:7d:02:7d:49:b7:
         e8:f9:72:77:4c:77:ff:45:b6:a6:cc:a8:9f:d5:5d:2c:df:a0:
         5b:da:30:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org