Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          rRkVHvjpn6F0RDIFcvLV0jmrfH1v4DhRSlipS+Ut87k=
Subject key identifier:   8D:AB:93:E5:86:5E:CC:B3:AD:B3:CC:62:8E:E4:D0:9B:34:55:A9:53
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       2E4ED39ACF88B9E318A6ED5E734146CD8BC4D452
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa
Signing time:             Fri 04 Aug 2023 07:31:41 +0000
ROA not before:           Fri 04 Aug 2023 07:26:41 +0000
ROA not after:            Sun 04 Aug 2024 07:31:41 +0000
asID:                     262494
IP address blocks:        177.124.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4e:d3:9a:cf:88:b9:e3:18:a6:ed:5e:73:41:46:cd:8b:c4:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  4 07:26:41 2023 GMT
            Not After : Aug  4 07:31:41 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:87:f7:10:64:79:f1:82:9b:d6:39:4f:b9:
                    81:8c:29:63:8d:ec:78:96:33:0e:16:58:94:e6:33:
                    95:4e:a4:57:38:23:e7:2c:df:68:5b:6a:67:52:54:
                    16:82:8f:9a:11:1a:a7:74:25:00:54:76:73:77:d2:
                    2a:70:8c:39:8b:bf:30:f1:28:16:76:6d:60:9c:df:
                    28:df:4b:76:9c:26:6a:17:2b:50:f1:14:4f:47:88:
                    0f:7f:cc:c2:ac:fa:e0:ef:c2:f6:50:e3:53:3e:af:
                    2e:60:29:ac:b8:66:08:a8:19:c8:71:40:7d:7d:a1:
                    9b:bb:9c:78:53:73:b6:b6:38:e0:b3:7b:8a:ce:1d:
                    44:91:1d:8d:53:ae:ea:57:5b:04:30:3a:b8:d2:56:
                    ce:c7:45:4f:a8:2e:67:28:1b:1c:dc:ec:c9:95:67:
                    d8:f0:17:a1:92:18:87:69:c2:18:c0:6f:7a:0b:05:
                    cc:8e:71:4f:4d:fe:a4:c6:e2:1d:05:d1:22:2f:16:
                    a1:0a:90:70:3e:59:ab:49:38:50:3e:56:4d:d2:32:
                    29:ec:95:c5:f6:9d:aa:09:16:dc:fb:6c:12:6e:ea:
                    ac:6e:8b:d9:db:85:1a:0c:8f:c0:28:8f:0b:e0:1b:
                    af:c0:6a:0c:87:b4:b6:6f:da:48:b5:7c:78:90:27:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:93:E5:86:5E:CC:B3:AD:B3:CC:62:8E:E4:D0:9B:34:55:A9:53
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:3b:56:94:a6:6f:d4:9a:8c:00:3e:c5:3b:41:60:ca:99:
         6a:d7:0f:ef:b9:67:4b:6e:3c:43:58:70:db:7d:dc:5c:19:0d:
         8f:91:e0:3f:73:02:a1:18:5b:ba:7e:d8:25:ad:10:8c:00:8c:
         f9:ff:a7:11:1c:c0:04:70:a4:d1:0d:32:72:9d:d0:bc:48:c1:
         b4:91:9a:b3:ea:53:1b:ef:8e:44:c6:26:69:af:34:07:2e:b9:
         41:13:74:92:18:47:93:73:6c:43:c1:8a:58:88:fe:20:72:29:
         38:c1:14:10:1b:30:71:cd:b5:41:7e:46:0a:89:69:dc:e2:02:
         4d:9c:73:38:47:fb:a8:58:f4:1f:be:c2:1f:15:3c:75:36:77:
         01:b1:a5:ec:c8:98:0f:c4:7b:96:3e:a6:84:0b:fd:f7:f1:18:
         10:08:6c:9b:dd:5a:1a:ab:64:db:31:82:b7:0d:94:46:03:f9:
         19:a7:1d:b1:96:4c:86:56:ec:1f:0d:9e:be:93:93:7b:8e:78:
         5c:cf:f5:0f:8a:32:bc:9a:c2:3a:4f:cd:42:48:61:5d:bd:4e:
         55:3b:df:49:7b:85:4e:1e:68:4e:6d:2b:e1:18:16:cb:0a:8b:
         63:b3:fd:d1:9d:c0:ce:45:6b:05:71:69:d0:9b:7f:1b:28:58:
         0b:19:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org