Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          hH8c5Y9GXH4fNzCgFB9UfhJC/MFID0vldpWy6QPDc7I=
Subject key identifier:   99:EF:E1:B6:D1:D9:42:A1:75:74:71:60:00:63:86:78:32:58:4F:78
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       118887399422BEE82A6EF90E9D4D164759A62238
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:02 +0000
ROA not before:           Mon 09 Oct 2023 15:55:02 +0000
ROA not after:            Wed 09 Oct 2024 16:00:02 +0000
asID:                     262494
IP address blocks:        170.82.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:87:39:94:22:be:e8:2a:6e:f9:0e:9d:4d:16:47:59:a6:22:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:02 2023 GMT
            Not After : Oct  9 16:00:02 2024 GMT
        Subject: CN=3082010A02820101009CBB37D53DF94011C2D7FE16A5279314F18EF06607DA0774CFC802863A893A43B8657D01D2D8FA2F48521955EE5D3926B93945174DD371E87EC9E4F80BAC4C59F292C0F2D94E4A6B5DEA78AF41EBD6F4BD84EFFE23DAD9E7D8ACCC99EB36692D8F701ADFA6ED535882B652163EA08447D6A377E0BDFB540D628938FAA604DED2EB6380163809F75460575BE5570D1B383270C05DD74B3AAE957B8A290080AEA8C0097E4EE59C2028ACB5ED0736B84B8A93D43DEEFAD55D252483F54A5560EF5B119D38CC0FFA2CE86C70DC9AA8D1E892962A114B2D36BCE954618E06889864E1B691C222AB58676B16EDB22363562171F8C2858060796A8BD95AE9E873E685A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:37:d5:3d:f9:40:11:c2:d7:fe:16:a5:27:
                    93:14:f1:8e:f0:66:07:da:07:74:cf:c8:02:86:3a:
                    89:3a:43:b8:65:7d:01:d2:d8:fa:2f:48:52:19:55:
                    ee:5d:39:26:b9:39:45:17:4d:d3:71:e8:7e:c9:e4:
                    f8:0b:ac:4c:59:f2:92:c0:f2:d9:4e:4a:6b:5d:ea:
                    78:af:41:eb:d6:f4:bd:84:ef:fe:23:da:d9:e7:d8:
                    ac:cc:99:eb:36:69:2d:8f:70:1a:df:a6:ed:53:58:
                    82:b6:52:16:3e:a0:84:47:d6:a3:77:e0:bd:fb:54:
                    0d:62:89:38:fa:a6:04:de:d2:eb:63:80:16:38:09:
                    f7:54:60:57:5b:e5:57:0d:1b:38:32:70:c0:5d:d7:
                    4b:3a:ae:95:7b:8a:29:00:80:ae:a8:c0:09:7e:4e:
                    e5:9c:20:28:ac:b5:ed:07:36:b8:4b:8a:93:d4:3d:
                    ee:fa:d5:5d:25:24:83:f5:4a:55:60:ef:5b:11:9d:
                    38:cc:0f:fa:2c:e8:6c:70:dc:9a:a8:d1:e8:92:96:
                    2a:11:4b:2d:36:bc:e9:54:61:8e:06:88:98:64:e1:
                    b6:91:c2:22:ab:58:67:6b:16:ed:b2:23:63:56:21:
                    71:f8:c2:85:80:60:79:6a:8b:d9:5a:e9:e8:73:e6:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EF:E1:B6:D1:D9:42:A1:75:74:71:60:00:63:86:78:32:58:4F:78
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:74:c8:65:f9:04:9c:2e:7b:f1:18:a7:c4:6d:10:ca:17:
         23:c8:7e:34:cc:46:e3:b3:a8:fc:9e:75:f1:3e:2a:b2:35:09:
         ba:45:f9:3a:40:0a:cc:66:b9:8d:13:04:68:10:4b:a7:21:92:
         d1:5b:7a:16:c5:af:53:47:1b:69:36:76:aa:a8:b3:fd:f4:75:
         22:2f:23:d1:8f:d0:8b:34:c9:a7:a8:38:cb:e8:6d:c1:1e:b3:
         56:ff:03:a8:a6:f1:68:f4:0f:bd:ea:52:38:fd:88:3e:ec:b2:
         a4:08:b0:9e:a6:dd:0b:2d:40:64:63:ff:0d:03:60:c4:92:45:
         a4:59:1f:3e:b7:60:7f:db:d5:7e:39:68:d3:49:4e:f1:d2:c3:
         30:16:87:5a:66:83:fb:1c:11:65:49:71:f6:41:91:5c:db:af:
         7d:d3:ac:32:67:df:f6:19:eb:de:ab:ab:40:e0:37:ea:29:5f:
         b5:6c:4f:66:61:d4:0c:85:88:ff:05:97:07:cd:46:97:46:9a:
         29:2b:9a:3c:34:ff:74:e0:ec:e3:f9:73:e9:43:e3:ef:67:59:
         5b:53:45:e2:6d:aa:4f:ee:50:0b:dd:81:a2:aa:d5:14:4e:e2:
         d3:2a:6d:12:4d:a2:d0:77:87:0a:58:4b:a9:ee:aa:c2:f0:4c:
         a9:c4:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org