Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          KkSOE3K78J8p9Sw/AOBtcNj++fl3ni2/i0htaYoPEe0=
Subject key identifier:   AF:82:DE:6A:32:75:A2:5F:DC:20:2A:A7:ED:C8:69:14:5A:A9:2F:E6
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       29278B2399C0602339E97FB50B82FBFC271B0755
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        170.82.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:8b:23:99:c0:60:23:39:e9:7f:b5:0b:82:fb:fc:27:1b:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:ed:f5:89:df:08:6d:f5:01:34:98:9f:2e:
                    7c:70:de:cb:9e:22:71:f5:b6:91:65:60:0b:f4:c4:
                    1b:f6:f3:31:8c:56:9f:8e:e3:a5:8c:5d:27:d0:2d:
                    14:f1:ba:af:59:ed:fd:0b:5a:be:5d:0a:8c:ea:7d:
                    fc:14:80:1b:d3:a8:83:b5:fe:85:b4:4f:0f:0a:0f:
                    5b:f3:8b:7c:91:1e:7b:a7:04:0c:c0:04:97:40:a7:
                    3f:1c:42:4b:ae:7f:48:aa:8b:a7:8e:67:64:8b:0e:
                    22:93:f8:42:69:2b:6d:ef:37:46:83:d0:a8:97:6d:
                    75:e7:b9:e2:52:14:48:82:1c:42:90:03:38:48:00:
                    ab:83:a8:01:3c:ec:fe:85:e0:5f:6e:dc:86:b5:0f:
                    44:7f:87:b5:2e:37:e4:57:5d:2e:86:ce:bd:05:13:
                    9f:cd:45:d7:0e:af:bc:0b:bb:6f:4b:66:eb:c7:f0:
                    cc:ea:59:51:19:8c:3a:1f:03:6f:ae:22:94:20:57:
                    8a:46:a5:bd:1e:6d:8e:75:17:b6:a9:13:cd:4a:e1:
                    d3:58:df:59:5a:02:ac:57:01:7e:4f:6e:c2:05:35:
                    ca:f3:85:f7:3e:14:7b:e0:4d:f4:6b:2d:7e:ed:d1:
                    be:c4:8e:30:5a:fc:91:57:13:8d:ac:56:24:5c:de:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:DE:6A:32:75:A2:5F:DC:20:2A:A7:ED:C8:69:14:5A:A9:2F:E6
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7f:1c:89:d0:18:56:5c:c6:75:be:e2:0e:92:98:ca:db:45:
         90:8e:1f:24:6d:51:d6:23:79:6d:f1:7b:f5:5a:b0:da:94:a4:
         18:93:04:9e:3b:b1:bb:03:14:99:30:2f:b1:2f:ac:10:1b:6a:
         e4:d5:6e:c8:21:9b:7a:ba:a9:b0:7a:e7:56:22:44:1e:d0:34:
         0b:cb:b8:fc:93:bb:e8:00:75:0a:fa:d5:37:3c:13:c8:86:7e:
         cf:83:91:97:cd:9c:46:31:e6:7b:54:34:e9:44:9e:d7:c7:c1:
         fa:3d:4f:2f:95:61:b7:1c:24:57:a9:69:d6:53:b0:e4:e5:48:
         00:20:a6:46:2c:a5:6c:e9:39:8b:f8:81:92:db:2e:71:da:24:
         93:97:5f:59:03:b8:f3:56:cd:01:45:4a:1b:43:2b:84:90:f5:
         65:85:36:c4:2e:6a:66:bc:e8:76:52:61:55:58:9a:52:58:0b:
         25:f2:01:c2:72:fb:71:3d:4a:4c:f9:91:98:9b:50:c6:4b:30:
         fe:75:b2:cd:53:cb:2b:48:ca:9b:07:57:59:a4:f8:46:42:54:
         b9:3d:fb:7d:21:b6:0e:46:70:17:71:d7:5d:81:2e:cb:fd:64:
         56:69:19:51:2f:2b:90:97:75:49:36:58:cc:00:4e:ca:8c:e2:
         90:86:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org