Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          VZequddfTQvrulVZzPNKy8dnkYj4LbW42k4Jd08ONK8=
Subject key identifier:   A4:85:E2:F8:01:E0:01:AA:1B:4B:4B:FD:88:55:89:64:20:6A:CB:CE
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       5530C6EF0EAB5EDD956C2DDAA34A1D23838BD7E6
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:01 +0000
ROA not before:           Mon 09 Oct 2023 15:55:01 +0000
ROA not after:            Wed 09 Oct 2024 16:00:01 +0000
asID:                     262494
IP address blocks:        168.205.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:30:c6:ef:0e:ab:5e:dd:95:6c:2d:da:a3:4a:1d:23:83:8b:d7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:01 2023 GMT
            Not After : Oct  9 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:e3:20:01:67:3d:62:79:04:7e:57:fb:69:
                    8c:ac:d3:4f:19:47:5d:f9:4c:f9:d8:79:88:0c:75:
                    76:a8:b9:01:9f:0e:a4:f7:64:47:b9:20:4f:ba:3f:
                    01:a4:16:70:f0:e3:41:da:98:eb:0c:af:72:f0:04:
                    ab:96:bd:8d:5b:27:ad:e4:d5:56:96:46:62:70:8e:
                    be:bc:27:20:35:dc:1f:49:6c:21:b2:0c:c9:07:d4:
                    96:f0:68:5c:9e:51:9e:74:72:3a:0f:d3:81:62:1f:
                    0d:0a:0d:34:12:e6:41:e8:52:67:ed:bb:c7:81:27:
                    73:a3:90:7f:e8:05:4a:54:0a:61:6b:18:99:9e:8f:
                    a8:ad:24:f0:e2:35:11:f7:71:68:0d:82:81:66:5c:
                    aa:e4:ce:04:b3:af:09:b4:9a:c1:44:82:d6:24:c3:
                    c7:04:7a:da:d9:95:ae:b3:2c:77:47:cd:b6:5f:ca:
                    c9:87:b6:f3:a3:83:25:04:35:4c:dc:08:51:bf:57:
                    b7:17:93:8d:7f:12:f3:11:dd:86:dc:4e:55:06:83:
                    3e:b0:55:d6:d9:c7:ec:e0:ac:8c:d5:85:4d:ef:86:
                    46:bf:8f:58:ba:32:01:79:63:95:15:18:e0:6f:29:
                    b0:a1:1a:77:d8:32:6d:ee:e3:93:fe:ca:07:94:55:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:85:E2:F8:01:E0:01:AA:1B:4B:4B:FD:88:55:89:64:20:6A:CB:CE
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:f5:44:f0:57:b3:3d:18:93:af:06:65:46:5f:24:66:51:
         5a:c6:75:ab:8a:87:49:f1:b0:f6:72:62:a7:cd:76:1a:c7:2b:
         eb:b8:59:18:a2:02:f9:09:09:13:de:22:1b:91:af:b5:74:4a:
         eb:5e:3e:43:d9:21:81:37:06:49:f4:00:d4:f0:ed:64:2d:0d:
         22:15:e8:71:e1:95:fa:91:fc:d5:f1:f7:0a:5f:50:54:f4:16:
         4c:4f:72:1a:c5:dc:d3:36:ba:35:88:5d:1e:0e:e8:2a:9e:c5:
         38:b6:10:31:23:c9:f8:1f:71:a7:41:5b:da:16:f5:dd:3f:c7:
         67:3f:ab:80:71:ee:2c:46:46:6e:17:af:46:99:51:23:b2:a2:
         93:5c:1c:cd:7e:82:fb:b9:a9:8f:ef:41:29:0e:bb:36:63:cc:
         19:11:cd:d8:71:57:26:6d:d3:e0:93:17:d4:64:ce:96:dc:8c:
         37:ee:31:43:cd:58:ca:df:dd:78:3e:5b:6d:c8:0e:22:4a:fa:
         7f:62:f3:8c:aa:5f:44:df:a6:02:22:95:0b:44:70:1a:9b:69:
         3e:d9:d5:a6:7d:e3:df:e1:c2:73:85:bc:37:d5:82:d2:34:22:
         e2:ef:3a:f5:5c:9c:9d:13:2c:56:af:cc:8d:3f:47:70:cb:c7:
         cb:5f:ca:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org