Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          8fUs5p22m3oZS4gGq1a6SXjI3Zx9M4hStIaU1hAXfWU=
Subject key identifier:   DF:60:56:2C:23:7D:2B:7A:CB:AC:58:E9:0F:B5:BE:D4:22:B1:0B:4B
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       52575B82A384486D871AA5CE06AB41E76A8B4F0F
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:00 +0000
ROA not before:           Mon 09 Oct 2023 15:55:00 +0000
ROA not after:            Wed 09 Oct 2024 16:00:00 +0000
asID:                     262494
IP address blocks:        177.66.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:5b:82:a3:84:48:6d:87:1a:a5:ce:06:ab:41:e7:6a:8b:4f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:00 2023 GMT
            Not After : Oct  9 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:fe:00:69:ec:fa:a2:1a:e7:09:20:a9:e5:
                    32:4d:36:fd:e4:18:82:14:48:f6:a2:47:be:89:f5:
                    78:b7:24:2a:ba:b5:ab:c8:54:67:d4:d6:0b:7d:62:
                    77:91:70:b2:ba:cd:3b:00:4e:a4:08:20:4f:4e:af:
                    e9:79:6f:e5:d3:2a:27:19:37:b1:09:8d:ce:0b:7f:
                    d0:00:21:58:2f:52:f9:c7:61:8d:55:03:01:c4:84:
                    cb:2b:d9:3f:37:a6:b1:81:38:48:8f:29:b6:b4:4f:
                    08:44:09:39:37:78:9b:81:56:8b:c1:a4:a8:1a:a6:
                    25:1a:1c:88:64:27:48:46:a9:6b:a8:c1:90:63:53:
                    05:83:39:7e:ff:f5:45:89:e0:55:c8:fa:b6:3e:25:
                    5e:09:af:54:f6:36:0b:c7:77:69:fa:08:1c:1a:2b:
                    c7:57:1f:0b:30:c6:ae:f9:9d:d0:29:78:85:3f:13:
                    02:5b:07:d2:19:84:17:c0:40:2f:ac:49:c1:ac:ce:
                    06:24:bb:7b:58:fa:2d:76:84:9e:16:41:10:68:01:
                    45:f6:41:86:7e:a1:d3:bf:85:8f:29:33:22:ee:03:
                    45:2d:dc:a9:5b:0a:e2:91:44:92:1b:15:29:91:64:
                    77:cc:0f:4c:c3:95:d9:d7:31:e3:53:a0:13:67:70:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:60:56:2C:23:7D:2B:7A:CB:AC:58:E9:0F:B5:BE:D4:22:B1:0B:4B
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:86:c5:fc:5e:b4:09:46:e0:f5:58:a4:11:d2:cc:b7:36:b5:
         65:25:e2:6e:ce:1f:70:b0:f6:db:83:60:83:db:d8:47:f2:60:
         f6:b0:23:fc:dc:8b:6f:9d:44:e8:c9:0e:b9:32:5f:83:7c:29:
         21:03:db:12:6b:b7:13:d7:e1:83:2e:a0:94:66:2e:e1:e6:56:
         77:d8:7d:10:cf:79:76:01:2a:5c:f6:2e:4c:b7:92:97:73:6a:
         c8:0e:29:d6:4d:c1:b0:2f:9c:e9:d9:59:a1:54:a5:bd:16:6c:
         4d:b9:f2:a7:66:af:cc:09:44:8f:c2:09:60:f4:ba:82:77:5b:
         38:35:78:e6:35:5d:d5:86:17:5f:6c:15:ec:b2:58:fb:d6:27:
         df:32:bc:78:a4:1b:a4:09:40:86:45:42:93:fd:b9:09:cf:e5:
         c1:d8:c8:2a:d7:97:b1:b5:b7:e6:83:cd:14:ea:ac:cc:cc:b5:
         3d:f8:35:8e:9c:f1:2d:11:7c:43:95:76:21:1f:9e:de:28:c8:
         63:c8:55:e1:ab:c7:c2:9b:c7:07:99:42:a7:4e:ed:70:97:3e:
         fe:60:86:af:26:3c:fd:7a:39:5c:4a:09:81:99:66:0a:32:21:
         9b:f0:92:2e:80:83:9e:10:96:27:0d:89:41:90:ad:ae:cb:7e:
         20:cd:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org