Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          QT7QQoQ6KU+v2uwcSyP7056yFjbwHcaCcqdt5BTnVag=
Subject key identifier:   BA:AA:10:B4:FE:96:4F:94:2D:6A:88:0B:09:D5:90:4B:06:AE:6F:72
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       190BAEFFD6AE0DA53888930866ED1336C9160D7D
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:00 +0000
ROA not before:           Mon 09 Oct 2023 14:55:00 +0000
ROA not after:            Wed 09 Oct 2024 15:00:00 +0000
asID:                     262494
IP address blocks:        168.205.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0b:ae:ff:d6:ae:0d:a5:38:88:93:08:66:ed:13:36:c9:16:0d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:00 2023 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:e1:37:37:82:ef:1e:81:09:ef:6e:8a:73:
                    3b:4f:53:96:47:3e:42:9a:58:6b:c1:71:c3:bd:81:
                    61:18:e1:80:73:aa:98:bb:7d:16:a8:1e:66:e3:95:
                    26:79:90:f5:2b:b4:79:4e:23:bd:68:c6:44:d3:e7:
                    ea:d1:39:90:c0:d3:d7:5f:7c:bc:2b:ff:12:57:9a:
                    fa:25:d9:83:ca:97:d6:7a:c5:20:1d:ac:b6:cb:dc:
                    28:a2:65:10:44:e8:19:4c:aa:1b:ae:e7:25:b5:b9:
                    32:46:3e:05:e1:67:2f:78:e5:df:48:cc:85:06:06:
                    1e:c1:2c:a6:39:4d:c9:fb:2d:34:53:80:77:f9:05:
                    70:14:c1:fe:fd:23:0f:fa:69:6a:08:1b:46:7a:76:
                    af:5b:fe:70:fd:4c:ab:6d:83:a4:d5:d0:24:37:04:
                    25:46:c5:d0:fa:cc:51:c9:11:ff:7e:a7:7b:d5:c1:
                    46:6d:65:81:71:f5:a9:a2:82:57:71:95:e0:1d:11:
                    5d:9b:da:01:0e:bc:70:b4:2b:e6:9c:ca:f3:4a:05:
                    78:c3:a2:1a:5f:19:ad:f1:a1:d1:4d:6e:6d:c5:c5:
                    8c:b5:cd:cd:4e:6b:bb:36:50:92:f1:7d:1b:0f:4a:
                    7c:85:4a:21:81:c5:b2:a4:13:33:e5:d8:9c:86:b5:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:10:B4:FE:96:4F:94:2D:6A:88:0B:09:D5:90:4B:06:AE:6F:72
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:73:ae:d2:49:39:49:97:22:a3:64:5c:df:fb:bf:dc:91:
         35:ee:54:fc:48:7f:26:67:60:24:ad:32:f8:4c:18:8d:cf:0d:
         fd:18:9a:b9:8e:91:15:31:e1:2f:0c:70:bb:9a:59:43:84:25:
         27:93:15:80:b9:90:e8:d6:b4:2e:80:60:9d:7e:4d:c3:0e:ff:
         95:39:41:f2:a1:a3:6e:e4:db:9c:4c:88:ad:c4:b2:57:d9:8c:
         fb:f1:fa:c3:b2:ff:df:2b:e5:a7:fc:be:0f:4f:15:24:ca:79:
         88:c7:b1:7f:f5:0b:81:bb:05:28:54:14:d6:24:34:38:9c:a9:
         93:3d:96:06:f5:f4:29:3f:ed:dc:71:d7:1a:c2:6a:aa:a6:d8:
         8d:a8:11:b5:11:f2:85:dd:64:f2:3a:01:9e:06:87:11:eb:ea:
         de:35:ff:00:ca:25:8f:24:7e:aa:dc:68:06:e9:1c:22:d8:b2:
         9e:c5:0e:c9:30:ed:b6:76:69:58:bd:dc:4c:34:fd:43:69:77:
         86:da:6b:e8:c6:20:1d:b9:f7:f4:77:2a:7b:7f:7b:c2:4e:1f:
         de:0a:97:59:96:d4:f5:bd:c7:3d:08:0c:f2:38:07:00:1f:60:
         d3:42:a3:ab:d4:28:9d:57:7c:e9:70:c1:75:08:db:93:16:c6:
         65:de:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org