Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          pGFOZ1BC9qPioE0GacEy5WVwSgQr97n2Awrp4y+X8mE=
Subject key identifier:   6A:52:04:26:C0:F5:AA:A6:25:FE:AC:67:84:09:9C:BC:5B:0C:4A:E8
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       68063E48A0A622F6751C9762577E183A9380645D
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        170.82.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:06:3e:48:a0:a6:22:f6:75:1c:97:62:57:7e:18:3a:93:80:64:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject: CN=3082010A0282010100A9077AA34D6D953094D4CD103E09B77E233DCA663449B3C28D39AA189DA51DCAE82F8D82B10D931CE19CD85C00BD7AC7F94821F96507CBCC682EB1548E660596037C4038D3D1362B4902E959E08D76BFDA863B73BA14006DBF8995C6E2B85365C5A13051EC63C969B8625882B72CA081028FB9F967B08A49578F9717CD431A7D6917A05FEF63FBD52BC348DF8B763559A2ED2944EF83A32C8B2AA4E0DD9AAFA0BE8CD0920F21DEE2D251BC11A9ED30FF154565B522555565F9C7BE19C54E03FCA15B303D724A4C2B3A22BA729BEBD846E5581C0A9F1B4288DBA1BB80346E4C41997679E34656177BF05F363BE05636379CF706FF289D66B69F360D1C3B96BF2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:7a:a3:4d:6d:95:30:94:d4:cd:10:3e:09:
                    b7:7e:23:3d:ca:66:34:49:b3:c2:8d:39:aa:18:9d:
                    a5:1d:ca:e8:2f:8d:82:b1:0d:93:1c:e1:9c:d8:5c:
                    00:bd:7a:c7:f9:48:21:f9:65:07:cb:cc:68:2e:b1:
                    54:8e:66:05:96:03:7c:40:38:d3:d1:36:2b:49:02:
                    e9:59:e0:8d:76:bf:da:86:3b:73:ba:14:00:6d:bf:
                    89:95:c6:e2:b8:53:65:c5:a1:30:51:ec:63:c9:69:
                    b8:62:58:82:b7:2c:a0:81:02:8f:b9:f9:67:b0:8a:
                    49:57:8f:97:17:cd:43:1a:7d:69:17:a0:5f:ef:63:
                    fb:d5:2b:c3:48:df:8b:76:35:59:a2:ed:29:44:ef:
                    83:a3:2c:8b:2a:a4:e0:dd:9a:af:a0:be:8c:d0:92:
                    0f:21:de:e2:d2:51:bc:11:a9:ed:30:ff:15:45:65:
                    b5:22:55:55:65:f9:c7:be:19:c5:4e:03:fc:a1:5b:
                    30:3d:72:4a:4c:2b:3a:22:ba:72:9b:eb:d8:46:e5:
                    58:1c:0a:9f:1b:42:88:db:a1:bb:80:34:6e:4c:41:
                    99:76:79:e3:46:56:17:7b:f0:5f:36:3b:e0:56:36:
                    37:9c:f7:06:ff:28:9d:66:b6:9f:36:0d:1c:3b:96:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:04:26:C0:F5:AA:A6:25:FE:AC:67:84:09:9C:BC:5B:0C:4A:E8
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:6e:df:56:85:2d:69:7d:c2:3d:4b:0d:7e:14:77:f1:0a:
         80:04:e0:78:8c:97:9d:36:73:6c:88:ff:0a:e5:df:dc:5c:88:
         1d:c3:27:81:25:ab:cc:08:c5:ab:05:71:6a:3e:31:1a:5c:0a:
         37:12:19:53:a0:ae:ec:94:92:82:e4:b4:17:45:6b:d0:f4:b4:
         6c:a9:21:2c:fd:30:5c:34:b9:ff:3b:3f:d2:0b:22:ee:bf:ec:
         07:15:18:53:14:69:d4:0b:41:b0:b3:16:be:2f:19:a9:40:51:
         5a:70:12:88:0a:5b:57:31:0f:bd:ab:24:82:21:00:ef:e3:2d:
         8a:6a:bf:0a:a1:b3:53:4a:83:0d:7e:5a:04:08:08:2d:fb:b8:
         8f:ca:d0:9b:5b:0a:a1:e6:d3:c8:7f:a6:1e:4d:31:b8:d7:a9:
         f7:bd:5f:de:5a:3c:48:ed:6f:f7:b5:97:63:9a:74:8a:06:ae:
         5c:d4:2b:65:9b:11:85:b6:eb:e2:7d:9a:7d:85:d7:a9:8f:89:
         23:f4:95:a2:44:85:e2:0f:75:03:09:48:81:fa:b5:83:07:15:
         ef:11:32:c9:78:5b:96:d3:45:6d:9b:37:5d:08:1d:24:46:f5:
         89:32:33:1d:de:fa:30:8a:38:7c:73:30:cc:0f:07:9c:02:2f:
         59:53:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org