Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          hdSTmtM6hIg2L62K+oyjCMBAVbAO9IEC6Vxd50vX0es=
Subject key identifier:   0E:0D:B5:5D:E4:AF:78:49:71:45:84:82:E9:88:06:EE:DF:EF:F6:EE
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       7CDEDA2888C749DEE9BF705E1BC7CBD2C78615CD
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa
Signing time:             Fri 04 Aug 2023 07:31:58 +0000
ROA not before:           Fri 04 Aug 2023 07:26:58 +0000
ROA not after:            Sun 04 Aug 2024 07:31:58 +0000
asID:                     262494
IP address blocks:        177.129.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:de:da:28:88:c7:49:de:e9:bf:70:5e:1b:c7:cb:d2:c7:86:15:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  4 07:26:58 2023 GMT
            Not After : Aug  4 07:31:58 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:b7:12:72:dd:48:f0:aa:3c:7f:86:61:fa:
                    d4:5d:7c:46:e9:15:4c:10:2f:cd:1e:68:4a:b2:5f:
                    25:83:f0:56:c4:cc:86:6c:3c:8a:64:cd:61:7c:80:
                    dd:01:e3:a9:e1:aa:d4:ca:78:4f:25:cc:da:b3:32:
                    0a:59:90:a4:fc:77:f9:4f:11:2b:0a:b7:b9:a4:7c:
                    fb:ae:c9:c1:fb:e9:fb:fe:4b:74:52:6a:b3:79:79:
                    4b:3a:42:74:03:e5:a4:bc:dd:b7:df:e2:28:93:33:
                    7c:db:08:f4:2c:e1:2d:25:cc:6b:d7:ed:77:c9:7d:
                    d1:8a:c1:4b:e0:7e:36:e9:50:92:90:f3:8c:63:ec:
                    26:6a:50:93:89:50:80:99:44:4c:65:88:b7:d7:87:
                    eb:50:38:ec:c2:e0:5c:c2:8c:3e:e1:d0:89:80:50:
                    0a:7c:96:b6:de:9b:b0:5a:97:0c:87:c0:71:54:7f:
                    81:5c:49:90:50:a6:9c:69:ef:48:99:5b:51:e1:b0:
                    a0:12:75:46:a7:ad:a0:eb:45:50:dc:cc:8a:88:a6:
                    af:f8:72:a4:96:bd:5f:23:09:b6:df:3d:06:a5:31:
                    3c:ac:d6:5c:0c:aa:58:57:a0:6d:1f:8a:f3:a6:d6:
                    3b:91:dd:c7:52:7e:fb:2b:73:33:b9:01:40:ec:b0:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:B5:5D:E4:AF:78:49:71:45:84:82:E9:88:06:EE:DF:EF:F6:EE
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:4f:58:e2:6f:55:59:8e:8f:9a:61:1c:5b:51:b4:45:c3:
         97:b2:3b:5a:66:7a:ed:f3:0a:c2:40:a9:c1:17:03:3b:37:8c:
         4e:ac:fa:a7:02:cd:95:38:d0:bf:cf:ab:8f:b4:1d:23:14:ff:
         00:c2:f4:08:69:15:42:d3:4c:e0:21:c9:70:82:56:c9:b3:20:
         0d:f0:20:1c:c1:76:3b:74:ce:97:8a:5c:8e:0f:54:df:fd:46:
         af:00:5b:0e:97:17:a4:fd:df:04:95:41:5d:b9:48:87:65:8f:
         65:05:b0:38:83:f4:a2:16:df:0c:a2:de:90:f0:fe:32:30:09:
         ac:98:c8:23:15:64:8b:f5:4c:83:30:42:61:01:e4:b0:a4:29:
         92:78:c9:f6:21:b7:de:b5:bb:4e:61:bf:bf:22:c8:fd:78:56:
         fa:7e:48:77:84:4b:4f:02:6f:74:1b:a5:01:c3:6b:ff:c5:29:
         f2:c0:70:06:87:af:e2:b6:f8:91:65:fd:b4:9a:ab:b7:5b:10:
         7d:91:56:8f:a0:e1:0f:bb:a7:f0:b7:9d:e6:5f:ae:3f:ca:ab:
         76:7c:32:95:01:8e:76:56:bc:9d:02:76:c7:84:41:38:79:3f:
         71:40:8a:78:44:d5:08:a3:4f:9e:62:83:de:4a:47:d5:e0:e2:
         8b:f6:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org