Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          OJM7ui4xSwrqr0aPyeQIKKheK096BusuJOyrmAJ67pU=
Subject key identifier:   BD:64:AC:62:07:AB:85:13:09:7F:6D:A7:7A:B4:82:3B:74:F2:44:45
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       55600BCD2B2DB91819D3FAD68EA0C56BC063D60A
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:00 +0000
ROA not before:           Mon 09 Oct 2023 15:55:00 +0000
ROA not after:            Wed 09 Oct 2024 16:00:00 +0000
asID:                     262494
IP address blocks:        170.82.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:60:0b:cd:2b:2d:b9:18:19:d3:fa:d6:8e:a0:c5:6b:c0:63:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:00 2023 GMT
            Not After : Oct  9 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:55:f8:5e:15:0a:08:d0:eb:9b:e1:6d:68:
                    6d:e0:55:2c:57:ab:a6:b6:19:f3:1e:93:d3:8a:96:
                    5e:08:5c:0d:bb:c4:03:9e:97:30:50:c6:31:10:a8:
                    4d:76:09:38:74:6b:53:47:97:d2:9f:9c:25:b5:ab:
                    74:19:50:57:80:b4:8a:d2:b6:4f:e8:78:9b:bd:aa:
                    68:7c:e0:42:37:07:9c:ab:62:fb:72:c1:d2:4b:c8:
                    9c:b0:40:6c:4c:2e:09:07:0b:f1:19:d8:df:a1:61:
                    41:bf:99:8c:6a:2d:2c:8b:e5:67:9d:13:de:d3:98:
                    c4:fe:88:49:0d:e0:16:e2:6e:90:68:f4:3e:a1:65:
                    82:92:8b:80:61:e5:5d:ce:de:45:17:11:a2:c9:10:
                    e6:d3:e7:cc:42:49:df:6f:81:9e:d0:d3:08:bc:35:
                    85:8d:c5:f4:e7:ee:e5:bb:e8:6a:bc:e6:c6:f7:fb:
                    ac:19:f6:6f:e9:a6:cf:06:4c:47:64:30:05:12:f7:
                    e8:37:ea:52:6a:8c:33:e0:96:4a:77:3c:62:74:76:
                    46:98:4b:30:ee:db:5b:7f:d6:0d:17:e6:15:4f:e0:
                    c6:7b:c5:51:ee:cd:a9:d7:d4:48:cd:5b:2e:c4:10:
                    a2:08:68:b8:cb:c3:13:43:ea:32:c6:db:71:59:19:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:AC:62:07:AB:85:13:09:7F:6D:A7:7A:B4:82:3B:74:F2:44:45
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:04:39:56:84:f1:2e:bc:15:49:de:84:0a:3e:be:91:d7:90:
         1b:c6:26:4c:07:25:ee:01:8b:b8:72:10:c2:77:14:33:a1:8b:
         1d:d5:46:8a:eb:1b:6f:c4:6b:7f:20:b4:95:a3:95:d0:54:73:
         f3:52:4d:39:c9:3e:42:eb:4e:1e:45:e5:44:ad:b9:db:11:fe:
         05:1d:67:6f:cf:37:8e:fe:e0:14:60:b3:8b:ad:b9:da:f1:c3:
         8d:1f:28:04:98:5e:74:50:df:12:ed:53:26:7b:45:46:5b:9b:
         46:61:81:c5:87:60:33:d1:66:19:18:a7:b4:01:2d:91:14:c6:
         d4:3a:17:c2:45:5e:26:29:07:69:30:07:9d:94:05:53:2e:0d:
         a9:95:93:a8:b3:90:42:09:f0:f5:7d:81:d8:85:76:fe:eb:b4:
         00:c5:cd:bb:50:1b:45:2b:19:68:4f:2a:b3:44:95:8e:90:e0:
         34:59:40:e2:35:54:fb:fb:15:cd:c3:49:46:37:ae:f9:76:98:
         33:3f:74:f0:ad:6b:ad:b8:c4:de:d8:1c:9e:27:84:60:d9:36:
         cf:e3:f0:41:39:64:86:b7:7a:ea:6b:fa:1d:46:0e:df:13:73:
         2e:33:d3:db:68:a3:dc:78:16:91:94:31:3d:38:c2:50:f3:e9:
         e8:65:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org