Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa
File:                     3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          iXoZDJQfaCdvqLfov4J3tDgpSmhqYhUGW9HrsNQt8ek=
Subject key identifier:   CC:15:64:74:9D:6A:ED:D9:82:67:0B:D0:FB:CE:F3:19:78:7F:F3:C2
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       2918E3AF3E0DA64DAD47FE2DEB283D50B8C2F9B6
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        170.82.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:e3:af:3e:0d:a6:4d:ad:47:fe:2d:eb:28:3d:50:b8:c2:f9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject: CN=3082010A0282010100D309BB4C58851369B401FC6FB7A72D8397845D0B3005B35307766362821276DECF90F1CE0B755F0CBF32494EACDD57E71A57642B8F4543F9C75953EB1C44935E7A47F50B186EF0ED4E87FBA60D4F84CA260063A650151E50E3E4C2676D84B5B5C6980FE8D62AB05A9990DCE97021B76E1C6C793C349EF22BCF70D927FBF8271199DD3575B9057FE58B4079C407C21A824CEB77E8DF47281752AEF9992B3B0A52057D881FE56451BE954DBBC8E1C40D565116BB9F583C6C78DE2177CCC852324666F31267F0ADBAD33DDD9E3811777C8BA5972A9ED8C70A8E6667DAD94998844AEE5F1BA86B1BF87384B95B788800BDE0B66478DEFC2E5163FA6461AB7DD2F1E10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:bb:4c:58:85:13:69:b4:01:fc:6f:b7:a7:
                    2d:83:97:84:5d:0b:30:05:b3:53:07:76:63:62:82:
                    12:76:de:cf:90:f1:ce:0b:75:5f:0c:bf:32:49:4e:
                    ac:dd:57:e7:1a:57:64:2b:8f:45:43:f9:c7:59:53:
                    eb:1c:44:93:5e:7a:47:f5:0b:18:6e:f0:ed:4e:87:
                    fb:a6:0d:4f:84:ca:26:00:63:a6:50:15:1e:50:e3:
                    e4:c2:67:6d:84:b5:b5:c6:98:0f:e8:d6:2a:b0:5a:
                    99:90:dc:e9:70:21:b7:6e:1c:6c:79:3c:34:9e:f2:
                    2b:cf:70:d9:27:fb:f8:27:11:99:dd:35:75:b9:05:
                    7f:e5:8b:40:79:c4:07:c2:1a:82:4c:eb:77:e8:df:
                    47:28:17:52:ae:f9:99:2b:3b:0a:52:05:7d:88:1f:
                    e5:64:51:be:95:4d:bb:c8:e1:c4:0d:56:51:16:bb:
                    9f:58:3c:6c:78:de:21:77:cc:c8:52:32:46:66:f3:
                    12:67:f0:ad:ba:d3:3d:dd:9e:38:11:77:7c:8b:a5:
                    97:2a:9e:d8:c7:0a:8e:66:67:da:d9:49:98:84:4a:
                    ee:5f:1b:a8:6b:1b:f8:73:84:b9:5b:78:88:00:bd:
                    e0:b6:64:78:de:fc:2e:51:63:fa:64:61:ab:7d:d2:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:64:74:9D:6A:ED:D9:82:67:0B:D0:FB:CE:F3:19:78:7F:F3:C2
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:5f:dd:c7:39:33:44:21:82:58:19:1f:71:ab:07:4a:2f:
         f9:14:33:43:96:1c:f7:2d:2a:2c:92:e9:f2:34:d5:7a:46:2e:
         f6:c9:34:ae:da:2f:11:33:87:8e:af:aa:7e:be:9f:7f:e1:d7:
         af:0a:60:d1:7e:54:b9:4f:78:7f:13:9e:07:c7:66:f4:f9:fd:
         90:d2:0c:b8:a2:40:43:c1:6b:7f:62:dd:1c:e5:56:d8:51:95:
         19:50:02:99:63:ec:be:31:13:0e:1a:1b:b5:41:d1:46:0d:bf:
         de:fd:1e:92:c3:a5:f4:cb:6e:a3:04:37:30:34:bc:ce:61:c2:
         95:9f:53:a0:c5:f1:95:bb:59:d9:57:4b:4e:d0:4c:97:e7:1a:
         43:5c:56:aa:b8:f7:00:74:60:21:17:95:b3:0f:97:4c:65:42:
         c1:f0:54:f9:e6:7c:e6:95:eb:b0:5e:59:16:f7:93:9a:05:eb:
         af:95:2d:de:4e:84:42:92:c7:f0:4b:ed:62:a9:4c:83:4a:8c:
         51:d4:55:f8:01:57:dd:e4:f8:3b:2f:1d:6e:96:09:23:01:84:
         95:02:66:83:a3:c0:b6:56:70:1e:73:42:c4:77:b2:91:a7:fb:
         49:e4:78:bf:38:26:ab:b2:20:da:7d:e5:0e:d7:25:5c:92:0c:
         08:eb:29:e4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUKRjjrz4Npk2tR/4t6yg9ULjC+bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzEwMDkxNDU1MDFaFw0yNDEwMDkxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDMwOUJCNEM1ODg1MTM2OUI0
MDFGQzZGQjdBNzJEODM5Nzg0NUQwQjMwMDVCMzUzMDc3NjYzNjI4MjEyNzZERUNG
OTBGMUNFMEI3NTVGMENCRjMyNDk0RUFDREQ1N0U3MUE1NzY0MkI4RjQ1NDNGOUM3
NTk1M0VCMUM0NDkzNUU3QTQ3RjUwQjE4NkVGMEVENEU4N0ZCQTYwRDRGODRDQTI2
MDA2M0E2NTAxNTFFNTBFM0U0QzI2NzZEODRCNUI1QzY5ODBGRThENjJBQjA1QTk5
OTBEQ0U5NzAyMUI3NkUxQzZDNzkzQzM0OUVGMjJCQ0Y3MEQ5MjdGQkY4MjcxMTk5
REQzNTc1QjkwNTdGRTU4QjQwNzlDNDA3QzIxQTgyNENFQjc3RThERjQ3MjgxNzUy
QUVGOTk5MkIzQjBBNTIwNTdEODgxRkU1NjQ1MUJFOTU0REJCQzhFMUM0MEQ1NjUx
MTZCQjlGNTgzQzZDNzhERTIxNzdDQ0M4NTIzMjQ2NjZGMzEyNjdGMEFEQkFEMzNE
REQ5RTM4MTE3NzdDOEJBNTk3MkE5RUQ4QzcwQThFNjY2N0RBRDk0OTk4ODQ0QUVF
NUYxQkE4NkIxQkY4NzM4NEI5NUI3ODg4MDBCREUwQjY2NDc4REVGQzJFNTE2M0ZB
NjQ2MUFCN0REMkYxRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0wm7TFiFE2m0Afxvt6ctg5eEXQswBbNTB3ZjYoISdt7PkPHOC3Vf
DL8ySU6s3VfnGldkK49FQ/nHWVPrHESTXnpH9QsYbvDtTof7pg1PhMomAGOmUBUe
UOPkwmdthLW1xpgP6NYqsFqZkNzpcCG3bhxseTw0nvIrz3DZJ/v4JxGZ3TV1uQV/
5YtAecQHwhqCTOt36N9HKBdSrvmZKzsKUgV9iB/lZFG+lU27yOHEDVZRFrufWDxs
eN4hd8zIUjJGZvMSZ/CtutM93Z44EXd8i6WXKp7YxwqOZmfa2UmYhEruXxuoaxv4
c4S5W3iIAL3gtmR43vwuUWP6ZGGrfdLx4QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMwVZHSdau3ZgmcL0PvO8xl4f/PCMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczMDJlMzgzMjJlMzEzMjM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qlJ+MA0GCSqGSIb3DQEBCwUAA4IBAQB7O1/dxzkzRCGCWBkfcasHSi/5FDNDlhz3
LSoskunyNNV6Ri72yTSu2i8RM4eOr6p+vp9/4devCmDRflS5T3h/E54Hx2b0+f2Q
0gy4okBDwWt/Yt0c5VbYUZUZUAKZY+y+MRMOGhu1QdFGDb/e/R6Sw6X0y26jBDcw
NLzOYcKVn1OgxfGVu1nZV0tO0EyX5xpDXFaquPcAdGAhF5WzD5dMZULB8FT55nzm
leuwXlkW95OaBeuvlS3eToRCksfwS+1iqUyDSoxR1FX4AVfd5Pg7Lx1ulgkjAYSV
AmaDo8C2VnAec0LEd7KRp/tJ5Hi/OCarsiDafeUO1yVckgwI6ynk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org