Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          9Kvfc4WFIsF7yGkZ4lkU9t005DZz32isCLPM81ZrQnc=
Subject key identifier:   41:30:C9:43:39:B4:72:10:AE:38:F7:FC:7F:4B:29:46:07:A5:A6:63
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       0E7A2C41BD18223353552F2E863A851842C55EBF
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:24:12 +0000
ROA not before:           Wed 02 Aug 2023 21:19:12 +0000
ROA not after:            Fri 02 Aug 2024 21:24:12 +0000
asID:                     262494
IP address blocks:        179.191.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:2c:41:bd:18:22:33:53:55:2f:2e:86:3a:85:18:42:c5:5e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:19:12 2023 GMT
            Not After : Aug  2 21:24:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:f2:d3:8f:6c:b4:6c:3f:a5:af:69:cf:7e:
                    d3:d0:9b:5e:9f:0e:3b:15:41:a6:1e:56:15:48:67:
                    96:a7:97:b1:fa:fe:09:74:7f:71:63:96:e7:91:9c:
                    c2:e5:0a:c9:6b:8b:24:9f:11:94:37:9d:a7:cf:97:
                    90:c4:81:af:7b:61:14:fc:79:82:e1:f0:59:ea:5b:
                    74:b3:a2:fa:b6:05:9e:9f:79:31:06:d4:47:d7:fd:
                    c6:76:9b:74:e3:64:03:b4:50:06:23:e9:c9:99:66:
                    6a:d4:26:92:eb:07:05:79:7f:18:ca:25:c4:c5:fc:
                    95:0b:e6:af:89:ec:9b:87:64:9f:ed:8b:57:cb:e2:
                    2f:55:8c:14:b1:8a:b9:34:a0:79:84:d5:a8:88:86:
                    92:0e:a0:b9:b0:2c:78:41:20:86:3c:49:7c:3e:d1:
                    70:0c:a7:b5:6d:7f:66:ee:4a:af:56:9c:20:bb:a2:
                    93:15:4f:29:68:d5:40:6f:35:fa:65:69:a4:b6:1b:
                    ec:61:19:75:39:a7:61:c6:70:ec:ee:85:53:82:57:
                    f4:66:d3:89:ce:33:00:1f:c6:6f:2d:23:93:bd:1c:
                    fd:39:80:67:6e:1f:ac:05:0d:43:02:ed:79:90:67:
                    5c:32:8e:ae:41:b7:fb:a3:9c:87:21:9b:78:6b:72:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:30:C9:43:39:B4:72:10:AE:38:F7:FC:7F:4B:29:46:07:A5:A6:63
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:40:09:85:d2:df:f0:aa:62:3e:ab:58:26:b8:16:8e:46:
         64:a6:46:d7:e5:d9:c0:49:81:ce:75:25:7d:33:d2:37:7b:5b:
         f4:21:44:ce:71:e4:3d:6e:03:f6:e1:55:73:9b:bb:c6:68:04:
         5c:0c:88:13:ae:f4:7b:5c:d6:c3:84:cd:42:7a:f1:f9:b4:52:
         aa:aa:90:a6:e1:c9:8a:af:62:c9:e8:42:94:2c:32:8c:36:af:
         d5:47:06:29:80:e8:00:41:87:2e:9f:6a:45:a2:cd:9f:83:7d:
         28:86:41:06:04:c3:9e:56:b6:63:e3:e1:63:c9:f8:c3:81:47:
         8e:73:34:3c:92:73:e6:36:e1:5d:05:20:d8:5d:c8:b4:bf:77:
         a7:f5:ff:b0:9e:34:36:45:30:fe:4c:74:7f:f8:ef:d8:09:43:
         7e:68:28:8c:c6:2c:88:0d:0c:ba:7f:32:58:2a:3a:6a:97:6c:
         64:5b:df:d6:6d:15:d3:05:94:00:ed:45:0a:09:c8:ea:86:2c:
         0e:1d:2a:92:ee:3c:92:a2:b5:ac:37:71:fc:a1:c6:79:73:4a:
         fe:78:de:90:d1:9e:c1:fc:54:bd:84:80:16:1e:f5:1f:b3:25:
         0b:c7:cb:09:3d:20:e9:14:2b:b2:ad:33:37:98:9b:36:e0:b3:
         c9:d0:4f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org