Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa
File:                     3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          wIIOGyAeMGbpACooSaSF9vVpETwAb3uB7FLx5O2lk5w=
Subject key identifier:   61:47:DB:B9:97:E6:9F:35:2B:DF:31:C5:80:8C:92:E0:69:94:CB:4C
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       67301EB4C3A47D24D197A086F31128ED02B3EA37
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:15:42 +0000
ROA not before:           Wed 02 Aug 2023 21:10:42 +0000
ROA not after:            Fri 02 Aug 2024 21:15:42 +0000
asID:                     262494
IP address blocks:        177.124.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:30:1e:b4:c3:a4:7d:24:d1:97:a0:86:f3:11:28:ed:02:b3:ea:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:10:42 2023 GMT
            Not After : Aug  2 21:15:42 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:ce:a5:b3:06:dc:eb:a4:cc:ab:5a:0a:aa:
                    87:81:78:a1:9a:7a:ce:07:12:98:68:c8:8a:21:55:
                    56:b9:ee:22:11:8b:50:cc:a0:29:7e:58:d3:79:9b:
                    aa:29:41:ab:bc:f8:f2:61:16:47:16:b4:61:3f:41:
                    e7:fe:54:03:ad:7b:bc:41:96:11:ea:2d:47:8b:da:
                    13:60:ab:45:57:39:67:3e:c0:14:45:b8:11:51:aa:
                    50:0e:d4:bc:f6:8b:9d:0c:3d:43:33:3b:2e:8c:1a:
                    3a:66:1c:a5:23:e6:b2:d4:04:de:ec:e4:2f:aa:af:
                    2b:2a:b5:f1:c6:ff:0b:0b:22:30:24:c0:8a:a5:fe:
                    25:90:15:cf:35:00:a7:d8:15:8e:f9:83:db:57:91:
                    d7:b2:24:1a:35:21:de:4f:96:a6:ac:2a:84:89:9f:
                    f7:6a:d9:02:37:00:87:70:04:50:f8:bf:20:21:6b:
                    b7:00:78:a1:f2:36:87:bd:a1:85:1e:4f:2a:e7:ee:
                    a5:3e:7a:c5:a6:4d:d5:a0:eb:da:dc:fc:10:9b:92:
                    13:72:f2:f7:e7:75:03:10:47:92:65:19:1c:4c:92:
                    c0:ab:90:9f:cc:6f:74:76:5f:9f:fd:48:29:11:a6:
                    7e:95:44:17:da:5d:84:ee:c4:78:d1:46:be:b4:2f:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:47:DB:B9:97:E6:9F:35:2B:DF:31:C5:80:8C:92:E0:69:94:CB:4C
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136382e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:e5:d1:a7:79:2f:70:0b:35:8f:9a:2e:46:c2:27:3c:69:6c:
         93:5a:06:53:85:69:15:df:f0:8a:80:de:d2:12:09:8e:44:30:
         f5:1f:d8:e1:e7:48:1b:02:84:18:8c:6c:2f:e7:f6:b6:c2:57:
         73:9e:ff:9d:dd:35:86:ed:3e:53:92:56:04:e0:4e:a6:bc:8c:
         2b:b8:89:8b:62:3d:96:fb:94:b2:b0:c0:fd:72:ff:b6:f3:ec:
         4e:00:61:a0:63:d2:ff:d9:66:ab:07:d8:b5:15:f5:06:ff:7b:
         68:5b:45:ad:55:1f:03:bd:62:65:3f:9e:ad:dd:4b:e2:e0:2b:
         34:23:f8:7f:dd:b2:a5:10:90:87:86:45:11:a1:2e:ff:c7:2a:
         aa:ad:3c:87:e3:58:66:e4:49:ce:66:95:ee:b2:a9:10:51:90:
         37:22:46:c5:e7:2f:96:e2:84:bc:d1:52:3a:38:cf:ad:3e:33:
         89:d6:26:4d:df:68:96:31:ea:8e:7f:bb:cc:51:7e:71:3a:f1:
         a0:3d:6d:1e:d2:a4:8b:3c:1b:a6:92:cf:49:3b:bc:38:05:73:
         ad:14:94:80:12:de:55:35:ef:81:1f:29:50:f6:01:2c:92:de:
         97:fd:7e:64:d7:a6:80:d0:25:78:61:70:6c:3c:c3:24:ea:4d:
         16:c2:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org