Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa
File:                     3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          +HMqGkXKmdQMnZs8J6HkdY5plXvvSVldpHDBHWSknR4=
Subject key identifier:   F8:B3:39:EF:43:B9:A5:2F:26:4C:DA:55:A8:D9:02:8B:3C:91:0B:ED
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       155CCB11810B60634839DD0F2D6C2E6EFB1DE15B
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:01 +0000
ROA not before:           Mon 09 Oct 2023 15:55:01 +0000
ROA not after:            Wed 09 Oct 2024 16:00:01 +0000
asID:                     262494
IP address blocks:        168.205.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5c:cb:11:81:0b:60:63:48:39:dd:0f:2d:6c:2e:6e:fb:1d:e1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:01 2023 GMT
            Not After : Oct  9 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:2c:18:a4:71:99:c8:49:94:00:6d:9a:ca:
                    cb:c3:86:26:3a:ea:6d:b7:c2:fd:f8:3b:9b:b8:f1:
                    e9:9f:33:4b:2a:00:26:77:97:ae:30:93:08:4a:52:
                    95:fc:6f:8c:e6:db:88:31:49:42:51:78:16:1c:fe:
                    b0:57:52:ff:39:03:1e:fb:b8:8f:0e:51:01:c2:4c:
                    7a:d7:fd:ff:41:a6:a2:97:c3:6b:4c:c6:11:4f:6a:
                    e5:9b:b5:f2:a9:57:93:ca:4f:18:f7:53:fb:f4:8e:
                    09:44:95:15:22:31:27:fa:99:77:ff:6a:31:d3:8c:
                    7e:22:8f:50:ae:37:cd:13:e0:6f:86:7b:a6:cd:bd:
                    b9:c9:16:ac:db:b0:e0:af:25:36:9e:9e:92:e9:dc:
                    a7:fb:f3:5f:ce:9c:c2:c3:4c:24:85:8d:80:99:47:
                    f5:dd:4a:22:41:1a:9e:1d:8c:2b:47:8b:ee:60:6d:
                    a9:a6:88:2c:b4:0b:1d:26:00:a2:2a:af:2e:7b:f7:
                    9f:e7:55:f2:70:f2:97:40:b5:c9:94:04:35:15:a9:
                    44:38:fc:02:21:c6:f8:1b:52:98:78:38:0f:9a:43:
                    fc:fc:6a:82:05:d7:4f:bc:4d:46:8a:86:5b:0b:28:
                    55:8a:a4:0d:84:69:37:b6:71:87:a6:3e:97:b3:df:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:39:EF:43:B9:A5:2F:26:4C:DA:55:A8:D9:02:8B:3C:91:0B:ED
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:48:7b:86:ae:b6:69:28:36:c3:5f:bd:40:ef:90:24:e9:27:
         bb:e2:c5:94:02:d8:ee:f5:45:9b:18:72:73:5b:df:87:84:5a:
         96:46:99:f2:fd:f9:f2:8f:de:f9:19:1d:86:97:b9:09:82:8d:
         01:dd:f0:a4:d3:d6:d6:23:53:12:c7:34:e1:fd:c4:6b:e6:85:
         7e:6a:1c:8d:55:7b:20:f4:63:a9:fe:cb:b0:af:97:43:0e:10:
         c1:9f:4c:a6:0b:62:b7:7f:c9:54:f5:8a:8f:f8:46:c4:49:ab:
         32:54:09:20:f9:be:90:1d:d1:92:c4:74:bc:d1:8d:41:1a:54:
         ff:5a:de:b4:3b:6c:90:b2:c2:a0:95:e3:04:fb:4f:5d:15:d5:
         27:4a:aa:44:87:62:ce:ba:04:b5:22:06:bf:73:17:15:53:0a:
         ce:5b:93:7a:99:2d:56:1f:aa:75:ee:08:68:15:7e:cd:c6:51:
         12:3a:42:c1:db:19:d7:40:b2:53:8e:14:0c:20:08:2f:89:ca:
         cf:8d:6c:af:21:8f:aa:ea:2b:a6:8d:17:59:cb:8d:ea:03:c1:
         a1:54:b5:41:6c:94:d4:10:cc:f9:dc:d5:90:55:e9:35:30:ec:
         ed:46:3f:b4:cd:26:91:db:91:75:16:ee:fa:ca:7c:43:fc:23:
         57:60:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org