Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          29dsBn1KraRh5KZxsr8FqKAz83h9FzCek+eByY72CgA=
Subject key identifier:   A3:B4:60:54:1D:4F:2C:BE:C1:58:F1:BF:59:40:4B:9A:96:4B:29:C0
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       19696F9995AEA2EB36DA3750E58CF5226D9DFAE1
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:18:51 +0000
ROA not before:           Wed 02 Aug 2023 21:13:51 +0000
ROA not after:            Fri 02 Aug 2024 21:18:51 +0000
asID:                     262494
IP address blocks:        177.124.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:6f:99:95:ae:a2:eb:36:da:37:50:e5:8c:f5:22:6d:9d:fa:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:13:51 2023 GMT
            Not After : Aug  2 21:18:51 2024 GMT
        Subject: CN=3082010A0282010100B2D1E6CAD5491F269B20FEA780E1171FFAC436F54C338D319C3AE215892815393CBD554636C4EEED3AED7054D54C70711532DF5628F54DDB3E42ED0138864D464B64CC0E0940812CB83142F890D4124BB52A5065067F4722E16A2D17A9053F74A08B7767A29C6475C8E6ABF79C8868EC22C83F9CC857B61FCE14978EB2E56093E53BC9A03AC8061637DBAA4C6136B9A40EB88D6CCCC4185B5012728B99A4987C1997B62C333E5E6583EE77812D938CCAF07809314D60D0525BF52882547FEF21AD94C3ED147D968108A8A4A4CA6E61FF13BCF049C293C8C5BD6260CF97B4314D6B529C5CBBFD833EA7FADC716BC205EB185915ABAE1C7EF38E02D7C60700BAC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:e6:ca:d5:49:1f:26:9b:20:fe:a7:80:e1:
                    17:1f:fa:c4:36:f5:4c:33:8d:31:9c:3a:e2:15:89:
                    28:15:39:3c:bd:55:46:36:c4:ee:ed:3a:ed:70:54:
                    d5:4c:70:71:15:32:df:56:28:f5:4d:db:3e:42:ed:
                    01:38:86:4d:46:4b:64:cc:0e:09:40:81:2c:b8:31:
                    42:f8:90:d4:12:4b:b5:2a:50:65:06:7f:47:22:e1:
                    6a:2d:17:a9:05:3f:74:a0:8b:77:67:a2:9c:64:75:
                    c8:e6:ab:f7:9c:88:68:ec:22:c8:3f:9c:c8:57:b6:
                    1f:ce:14:97:8e:b2:e5:60:93:e5:3b:c9:a0:3a:c8:
                    06:16:37:db:aa:4c:61:36:b9:a4:0e:b8:8d:6c:cc:
                    c4:18:5b:50:12:72:8b:99:a4:98:7c:19:97:b6:2c:
                    33:3e:5e:65:83:ee:77:81:2d:93:8c:ca:f0:78:09:
                    31:4d:60:d0:52:5b:f5:28:82:54:7f:ef:21:ad:94:
                    c3:ed:14:7d:96:81:08:a8:a4:a4:ca:6e:61:ff:13:
                    bc:f0:49:c2:93:c8:c5:bd:62:60:cf:97:b4:31:4d:
                    6b:52:9c:5c:bb:fd:83:3e:a7:fa:dc:71:6b:c2:05:
                    eb:18:59:15:ab:ae:1c:7e:f3:8e:02:d7:c6:07:00:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B4:60:54:1D:4F:2C:BE:C1:58:F1:BF:59:40:4B:9A:96:4B:29:C0
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:99:ec:1f:d3:72:81:24:fc:fc:7f:4a:bc:64:41:1a:e2:14:
         cd:54:33:d2:3d:44:98:38:14:c1:d7:21:51:43:53:fd:7f:65:
         ab:aa:11:eb:4e:cf:3f:ef:9d:07:98:4e:0d:c9:0b:01:72:39:
         29:de:9b:ef:c9:97:25:b0:94:68:bd:eb:a4:6d:9a:b1:be:10:
         39:76:25:cd:57:fe:c7:7b:0c:00:a2:ad:72:12:98:0a:26:4c:
         a0:f6:d6:d7:e8:04:e0:f0:13:ac:d8:4e:7f:9f:4a:d8:22:7c:
         5c:78:b0:99:65:4a:37:22:2f:a3:b1:c7:f4:70:66:45:73:23:
         65:45:93:63:d9:ef:6b:56:e4:ea:5a:f8:67:f6:af:3b:86:45:
         e0:a9:4f:dd:49:34:2c:b4:a9:aa:d0:79:9f:d9:21:10:5f:8a:
         61:8b:f0:4d:95:80:29:ad:ec:6d:a7:6d:c6:1e:20:57:57:28:
         8c:57:67:32:91:06:ab:5d:7c:58:45:6c:45:87:e8:e7:95:d1:
         41:ca:7f:65:21:0b:9e:23:dd:58:ba:de:85:b3:12:90:b8:0d:
         4c:21:57:26:2f:25:4f:c1:6b:28:bc:04:d6:f1:b2:3e:4e:8b:
         f0:31:fa:9f:90:bb:da:b9:ae:39:ca:ed:2a:e8:1e:38:51:26:
         d7:9f:55:11
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUGWlvmZWuous22jdQ5Yz1Im2d+uEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA4MDIyMTEzNTFaFw0yNDA4MDIyMTE4NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJEMUU2Q0FENTQ5MUYyNjlC
MjBGRUE3ODBFMTE3MUZGQUM0MzZGNTRDMzM4RDMxOUMzQUUyMTU4OTI4MTUzOTND
QkQ1NTQ2MzZDNEVFRUQzQUVENzA1NEQ1NEM3MDcxMTUzMkRGNTYyOEY1NEREQjNF
NDJFRDAxMzg4NjRENDY0QjY0Q0MwRTA5NDA4MTJDQjgzMTQyRjg5MEQ0MTI0QkI1
MkE1MDY1MDY3RjQ3MjJFMTZBMkQxN0E5MDUzRjc0QTA4Qjc3NjdBMjlDNjQ3NUM4
RTZBQkY3OUM4ODY4RUMyMkM4M0Y5Q0M4NTdCNjFGQ0UxNDk3OEVCMkU1NjA5M0U1
M0JDOUEwM0FDODA2MTYzN0RCQUE0QzYxMzZCOUE0MEVCODhENkNDQ0M0MTg1QjUw
MTI3MjhCOTlBNDk4N0MxOTk3QjYyQzMzM0U1RTY1ODNFRTc3ODEyRDkzOENDQUYw
NzgwOTMxNEQ2MEQwNTI1QkY1Mjg4MjU0N0ZFRjIxQUQ5NEMzRUQxNDdEOTY4MTA4
QThBNEE0Q0E2RTYxRkYxM0JDRjA0OUMyOTNDOEM1QkQ2MjYwQ0Y5N0I0MzE0RDZC
NTI5QzVDQkJGRDgzM0VBN0ZBREM3MTZCQzIwNUVCMTg1OTE1QUJBRTFDN0VGMzhF
MDJEN0M2MDcwMEJBQzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAstHmytVJHyabIP6ngOEXH/rENvVMM40xnDriFYkoFTk8vVVGNsTu
7TrtcFTVTHBxFTLfVij1Tds+Qu0BOIZNRktkzA4JQIEsuDFC+JDUEku1KlBlBn9H
IuFqLRepBT90oIt3Z6KcZHXI5qv3nIho7CLIP5zIV7YfzhSXjrLlYJPlO8mgOsgG
FjfbqkxhNrmkDriNbMzEGFtQEnKLmaSYfBmXtiwzPl5lg+53gS2TjMrweAkxTWDQ
Ulv1KIJUf+8hrZTD7RR9loEIqKSkym5h/xO88EnCk8jFvWJgz5e0MU1rUpxcu/2D
Pqf63HFrwgXrGFkVq64cfvOOAtfGBwC6wwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKO0YFQdTyy+wVjxv1lAS5qWSynAMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczNzJlMzEzMjM0MmUzMTM2
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACxfKkwDQYJKoZIhvcNAQELBQADggEBABCZ7B/TcoEk/Px/SrxkQRriFM1UM9I9
RJg4FMHXIVFDU/1/ZauqEetOzz/vnQeYTg3JCwFyOSnem+/JlyWwlGi966RtmrG+
EDl2Jc1X/sd7DACirXISmAomTKD21tfoBODwE6zYTn+fStgifFx4sJllSjciL6Ox
x/RwZkVzI2VFk2PZ72tW5Opa+Gf2rzuGReCpT91JNCy0qarQeZ/ZIRBfimGL8E2V
gCmt7G2nbcYeIFdXKIxXZzKRBqtdfFhFbEWH6OeV0UHKf2UhC54j3Vi63oWzEpC4
DUwhVyYvJU/Bayi8BNbxsj5Oi/Ax+p+Qu9q5rjnK7SroHjhRJtefVRE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org