Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          uE7f45DGjHH19sLFA5om2iEFhEBTs81j+jKVESU/5gU=
Subject key identifier:   46:35:18:F3:CB:29:5D:66:84:BD:D8:44:7A:89:05:CE:83:3E:16:CA
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       6836EB41B69466CC7D9463495F6347693A308CCF
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa
Signing time:             Sat 05 Aug 2023 12:59:54 +0000
ROA not before:           Sat 05 Aug 2023 12:54:54 +0000
ROA not after:            Mon 05 Aug 2024 12:59:54 +0000
asID:                     262494
IP address blocks:        179.191.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:36:eb:41:b6:94:66:cc:7d:94:63:49:5f:63:47:69:3a:30:8c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  5 12:54:54 2023 GMT
            Not After : Aug  5 12:59:54 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:2d:ca:d1:68:62:a9:f9:37:d7:e8:58:d0:
                    16:83:3b:ea:53:af:cb:40:20:e4:d2:e5:8a:9e:65:
                    3f:7f:3b:12:44:f2:77:8c:1f:61:8a:fd:d0:d1:08:
                    a9:c2:7c:a3:cf:27:90:10:d3:22:66:f7:98:9a:47:
                    dc:d8:56:40:2f:10:e3:b2:9d:31:cf:59:9d:2e:42:
                    f5:b5:c3:f0:bc:c0:ef:91:98:32:39:e9:01:36:45:
                    af:bd:88:33:45:3a:d8:3a:aa:32:0d:34:07:d8:cb:
                    5c:03:36:70:5a:63:9d:d2:6a:1c:30:a7:d9:07:ff:
                    b4:99:99:2b:01:17:25:c2:71:7c:e4:9e:af:06:8f:
                    a3:cb:f3:39:57:6f:c9:f5:78:81:0c:07:97:ae:73:
                    c2:72:dd:11:62:9b:32:fa:7a:91:b0:92:bd:c6:bd:
                    cd:92:30:9f:59:49:5b:86:f6:64:bb:65:11:98:01:
                    41:06:a1:e0:e1:b9:ff:ae:ff:dc:78:98:fd:aa:c6:
                    59:69:51:bf:dd:d1:45:09:4e:34:1f:c0:63:9b:a2:
                    19:19:f5:30:1d:18:44:41:45:64:74:d6:ae:9e:46:
                    7c:5c:9e:1c:d4:13:5e:9e:8d:12:62:16:d4:ee:e9:
                    05:42:93:ad:af:db:11:98:ea:62:38:e5:52:a2:54:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:18:F3:CB:29:5D:66:84:BD:D8:44:7A:89:05:CE:83:3E:16:CA
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b3:08:1d:a3:d9:5a:34:3e:f5:09:45:4f:69:88:11:69:54:
         8b:59:66:33:c1:be:74:0a:83:ae:30:ce:68:d3:c3:0a:62:b6:
         92:79:18:b2:23:eb:46:2a:80:5f:33:ef:73:b6:cf:f3:ad:c5:
         d1:d0:08:16:68:61:8c:0b:70:8f:3b:68:4f:83:56:f2:dc:24:
         ae:2c:8a:49:7c:12:d8:e3:4e:48:a0:09:91:30:21:75:c2:a1:
         67:85:65:9e:b3:25:b3:05:46:30:b9:42:cc:cd:c5:50:63:90:
         12:b6:a8:5e:f4:82:d8:1f:3f:6c:36:e5:cf:cf:d3:98:92:ab:
         b0:eb:4e:13:50:38:af:b6:fb:a5:c0:ce:e7:ed:f5:b4:d2:e4:
         36:0f:4b:7e:a0:70:94:d7:22:e0:b1:77:48:4c:61:f6:d4:2b:
         21:2b:1b:7f:d9:fd:e9:d4:1a:d4:ac:b9:21:1b:5a:73:c6:00:
         09:f4:bd:4d:68:89:69:a8:24:5e:87:0c:a1:79:ac:cc:f3:13:
         f6:79:0f:ea:81:a6:ae:6c:6b:e2:8b:ef:6c:54:23:fe:33:91:
         c7:60:16:9d:54:32:53:5b:fd:80:7e:b0:80:cd:5a:5e:1a:28:
         93:e9:8f:cb:76:7a:88:0a:aa:7c:d2:75:a4:c5:41:7e:35:7c:
         af:bb:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org