Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          3J2W1crIT9obewbD+20qsrrfzynn3CC8S9s9dzSPybw=
Subject key identifier:   27:CE:00:76:7A:56:E9:71:E9:21:16:49:08:B2:56:5F:0E:59:8B:E2
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       3F88F2293520B2C781833AF4FE7ECCAEC334CBD7
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:02 +0000
ROA not before:           Mon 09 Oct 2023 15:55:02 +0000
ROA not after:            Wed 09 Oct 2024 16:00:02 +0000
asID:                     262494
IP address blocks:        168.205.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:88:f2:29:35:20:b2:c7:81:83:3a:f4:fe:7e:cc:ae:c3:34:cb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:02 2023 GMT
            Not After : Oct  9 16:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:db:ea:cf:c4:58:c5:70:27:f7:04:0b:aa:
                    c5:98:7f:0d:2c:fa:bb:b0:f1:76:d0:39:a9:fe:a5:
                    a2:8d:1e:40:c1:fc:96:f2:30:7e:da:dc:3a:a6:16:
                    53:8a:85:2d:bf:d0:92:50:a6:b3:4f:4b:e1:25:66:
                    49:b2:e8:4b:e8:ab:9b:d3:e2:c7:79:15:75:2d:21:
                    e7:60:ac:e5:a6:35:f1:76:51:ab:69:be:79:58:a8:
                    b6:64:8b:80:0e:59:27:be:48:f6:21:49:11:0e:6f:
                    b7:0e:64:26:38:ce:a3:41:96:ed:ab:ac:6d:f4:ed:
                    cb:fe:74:98:ba:9a:8d:6a:68:da:1d:a6:37:c3:b4:
                    26:02:6c:bd:41:82:3a:38:89:33:06:c7:ee:5d:36:
                    e4:82:52:95:7c:b0:ea:f4:b8:d2:d3:00:b4:fd:e6:
                    6f:31:7e:b4:b8:64:eb:23:cd:ab:3a:5b:05:f8:32:
                    40:93:9a:3b:c4:a9:3d:64:8f:1e:80:72:9b:a7:e3:
                    e3:6e:78:26:3b:b8:4d:a7:e7:f0:16:bd:a3:f7:af:
                    f8:46:d3:ec:8e:f8:16:13:09:b7:ae:8a:ed:1e:86:
                    c0:01:f5:6a:12:07:fb:82:ce:01:3d:a7:69:13:0c:
                    f8:0a:d3:c3:26:83:95:30:0c:95:12:f2:13:06:cd:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CE:00:76:7A:56:E9:71:E9:21:16:49:08:B2:56:5F:0E:59:8B:E2
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:50:2d:2f:25:05:2f:81:a6:7f:54:32:3c:f1:96:70:8a:
         19:b1:6b:56:63:a3:70:b0:a7:6c:4b:a3:f2:5b:64:12:e8:fb:
         e4:6d:13:df:30:c1:88:fd:e7:e4:28:78:d2:53:80:ed:66:e4:
         c2:07:da:5b:5f:b9:1c:16:34:bb:43:fd:4d:78:55:f9:89:1b:
         d3:44:ef:94:8e:39:02:7d:f3:f7:b0:47:04:e3:d0:e0:3a:a3:
         84:e7:d3:bd:0e:b2:78:c0:66:a8:3e:9c:4c:4b:b6:4a:75:54:
         a6:03:f1:f1:4f:ec:06:81:6e:b9:1d:60:c1:17:99:95:59:e0:
         21:2a:a1:15:ac:53:15:db:f0:10:45:e1:74:d5:54:0c:43:34:
         b3:72:d0:1d:c6:0a:5f:5e:8f:f0:30:f0:14:42:a8:15:d8:cb:
         fc:63:79:9f:60:8d:91:11:14:32:9f:e8:c4:3f:9e:03:53:5f:
         cf:6a:5c:67:21:b8:81:ce:c1:73:39:35:8f:ef:89:83:17:0f:
         14:3c:43:ce:88:31:05:86:eb:81:7f:3f:89:9a:62:e4:6e:d5:
         88:04:13:c8:13:73:5e:48:ca:73:8a:83:a8:d1:fd:9a:a9:b6:
         ae:e0:0d:d4:04:6a:81:31:48:08:56:9e:22:39:3c:82:91:d6:
         0b:91:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org