Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          j6FhN4+0eOTnU51RHbJVa0itr5PeGNfXUC7DmipKAp4=
Subject key identifier:   55:42:A6:5F:30:9D:6E:4A:55:CF:42:B1:87:0A:B7:B7:C7:67:27:EA
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       2E996D01E28879BAE6DB2B156BFE4F59F331839D
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:19:02 +0000
ROA not before:           Wed 02 Aug 2023 21:14:02 +0000
ROA not after:            Fri 02 Aug 2024 21:19:02 +0000
asID:                     262494
IP address blocks:        177.124.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:6d:01:e2:88:79:ba:e6:db:2b:15:6b:fe:4f:59:f3:31:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:14:02 2023 GMT
            Not After : Aug  2 21:19:02 2024 GMT
        Subject: CN=3082010A028201010097DC5BEB1DC18D5645BA87C3F65BBFBAB521976DADDD6CEADB61374A86EA54E9050452FB220B9437B482239856A861939DDA800F7B3A17941559C2E37C51299FC473E6B8F995FF3A6BA0B42C3E5C66B3E8705B233E6441F0D82802CE76A2BCA38CB4D7208F8359060383C4AF51557E0DCCBA13782ED69752BD27A4ACEE0BD328B79D05C186EA56C332C9B7D4D80229F7B53B9E2136E69B99D80477A9708C62F270BA20305E67B53F0EE0D1787DCE7DAFEBA03BA959C89705A1B49930149447B3D0935CA348F2C1DFD54495EDD26809C7E17F954CB266A3A3BE2A8A38C157F9BA2E62B95F681E88ED5C4A73DBE94C30C8FAC3A844126E1BF26A9BEF568552B4410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:5b:eb:1d:c1:8d:56:45:ba:87:c3:f6:5b:
                    bf:ba:b5:21:97:6d:ad:dd:6c:ea:db:61:37:4a:86:
                    ea:54:e9:05:04:52:fb:22:0b:94:37:b4:82:23:98:
                    56:a8:61:93:9d:da:80:0f:7b:3a:17:94:15:59:c2:
                    e3:7c:51:29:9f:c4:73:e6:b8:f9:95:ff:3a:6b:a0:
                    b4:2c:3e:5c:66:b3:e8:70:5b:23:3e:64:41:f0:d8:
                    28:02:ce:76:a2:bc:a3:8c:b4:d7:20:8f:83:59:06:
                    03:83:c4:af:51:55:7e:0d:cc:ba:13:78:2e:d6:97:
                    52:bd:27:a4:ac:ee:0b:d3:28:b7:9d:05:c1:86:ea:
                    56:c3:32:c9:b7:d4:d8:02:29:f7:b5:3b:9e:21:36:
                    e6:9b:99:d8:04:77:a9:70:8c:62:f2:70:ba:20:30:
                    5e:67:b5:3f:0e:e0:d1:78:7d:ce:7d:af:eb:a0:3b:
                    a9:59:c8:97:05:a1:b4:99:30:14:94:47:b3:d0:93:
                    5c:a3:48:f2:c1:df:d5:44:95:ed:d2:68:09:c7:e1:
                    7f:95:4c:b2:66:a3:a3:be:2a:8a:38:c1:57:f9:ba:
                    2e:62:b9:5f:68:1e:88:ed:5c:4a:73:db:e9:4c:30:
                    c8:fa:c3:a8:44:12:6e:1b:f2:6a:9b:ef:56:85:52:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:42:A6:5F:30:9D:6E:4A:55:CF:42:B1:87:0A:B7:B7:C7:67:27:EA
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:3b:91:64:cb:a7:2a:42:0c:fb:f7:77:81:c0:cc:87:d2:1a:
         4d:52:e2:09:61:48:d9:e4:f0:13:89:84:ca:8e:ee:1b:a3:8c:
         41:0f:53:24:91:d5:21:87:f1:73:4c:6d:10:87:ff:aa:e8:51:
         1a:57:7e:87:f4:a3:ca:d5:1b:97:52:95:25:01:b5:5c:84:9f:
         7f:81:8b:54:23:8b:15:46:83:90:47:a2:fc:2b:25:21:08:61:
         c5:a8:41:eb:94:6d:0a:75:04:00:97:e9:ef:5c:1b:c5:ab:ea:
         b8:2b:2e:ff:8c:65:2f:8b:9f:3c:aa:65:f2:1e:89:7d:3b:8a:
         0e:35:f5:44:c8:81:50:9a:a4:a0:b7:26:af:64:ab:24:25:8e:
         ef:2a:57:25:81:ef:7f:49:d8:5f:b2:c1:66:a6:73:a8:39:bf:
         20:ad:2f:22:1c:73:3b:b4:28:40:ab:fb:ea:ec:80:ee:13:1b:
         8d:ca:ee:98:ff:ec:1b:b7:6c:da:ae:4d:e5:e8:74:20:73:ba:
         e8:bf:1b:b4:01:d5:d1:93:4d:d9:54:d4:54:93:41:76:02:40:
         d1:2c:55:fb:cf:99:06:22:6b:ab:4f:11:95:26:c5:1c:ae:22:
         f4:65:d8:a2:b4:55:c6:f3:ae:8c:4d:6c:13:37:ba:2d:99:2a:
         6f:f9:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org