Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          fF0aHzpvqXsJFgOVFeDNV5b6cjsirOyiw8KkQkCJL44=
Subject key identifier:   04:35:59:CA:3B:C4:5A:1E:12:6C:A6:DE:0D:98:79:51:F4:83:24:EC
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       1A123078E6E81F19CEA21751C653950A6FA9911F
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:19:16 +0000
ROA not before:           Wed 02 Aug 2023 21:14:16 +0000
ROA not after:            Fri 02 Aug 2024 21:19:16 +0000
asID:                     262494
IP address blocks:        177.124.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:12:30:78:e6:e8:1f:19:ce:a2:17:51:c6:53:95:0a:6f:a9:91:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:14:16 2023 GMT
            Not After : Aug  2 21:19:16 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:ff:0f:0a:c1:4d:9c:ce:ae:6a:62:44:d5:
                    f0:7e:1f:35:5a:40:49:53:24:79:0c:ba:6b:1f:f2:
                    13:0f:be:cb:d5:5b:d9:c1:68:f7:ce:39:35:23:64:
                    be:cb:e2:4d:1f:3b:d3:f3:6e:f5:16:b8:92:da:63:
                    9d:7e:3d:d6:a0:04:2c:b4:68:c2:97:7a:44:17:a0:
                    57:71:6b:e4:13:e7:c9:9d:a9:fc:bd:03:4b:d7:b2:
                    d2:2e:52:69:94:77:9b:48:bf:03:7d:17:e5:bf:a4:
                    66:99:dc:4e:67:f0:c2:c5:f8:b1:14:e5:9b:c2:51:
                    aa:fa:c8:6c:eb:63:f2:fc:2d:47:e1:88:2a:05:17:
                    44:e9:43:60:77:fb:b9:ef:11:35:1e:fe:e4:43:41:
                    04:4c:73:ab:f0:35:26:fa:54:fa:52:7d:44:00:d7:
                    73:76:a6:ae:5f:cc:ef:74:fc:11:c8:85:48:4c:ec:
                    0c:68:6e:13:c1:9e:4c:a6:02:91:4d:74:53:85:7e:
                    96:bd:b8:ec:37:bf:9a:e2:c9:eb:10:f4:81:fb:cb:
                    6e:fe:f3:b2:80:66:7b:87:61:f0:6c:9c:5d:51:3f:
                    b1:b9:6a:94:14:34:18:0a:2b:62:47:06:42:d7:f1:
                    b4:80:bd:35:69:d7:11:47:33:15:c2:34:52:05:8c:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:59:CA:3B:C4:5A:1E:12:6C:A6:DE:0D:98:79:51:F4:83:24:EC
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:22:65:46:32:99:6e:c7:45:1c:c6:3e:39:e2:2f:10:6a:6b:
         8c:ee:06:f9:3a:49:7f:5a:ab:79:ce:a2:d5:73:69:93:f8:b9:
         0a:4b:f1:79:7b:b6:44:e2:6e:bb:47:47:a3:d1:f8:78:40:0f:
         d6:6a:4e:08:d5:76:18:dc:7d:f4:73:3c:5c:f9:13:a8:ac:79:
         c0:09:7f:b1:2d:4c:51:bc:ef:5f:4f:96:fd:ef:ca:0a:e5:8c:
         79:98:0e:3f:32:1c:49:ae:77:b1:73:79:8f:09:a3:c1:de:71:
         d5:22:ad:41:89:00:52:39:b9:72:1f:74:f4:dd:f6:ab:a1:a6:
         83:a9:bf:ee:17:11:c2:d9:68:70:36:53:ef:c7:b6:cb:14:c9:
         05:57:33:01:05:e7:1d:21:7c:a4:77:30:91:c2:6b:a0:76:15:
         9b:29:88:09:64:ff:38:83:2f:48:68:1d:48:b0:1d:68:ce:c9:
         21:25:95:10:81:ba:7d:04:34:ca:c1:a5:de:72:33:11:94:58:
         b7:7d:3a:c1:19:5b:f2:90:22:4f:4c:fd:f6:2d:98:01:e4:0c:
         5e:8c:1f:fc:9a:c8:48:08:1e:bc:a3:56:2c:0b:0f:3f:ed:db:
         23:a9:2b:e3:e1:24:49:f9:62:2c:b4:24:b7:8d:8f:d9:66:bf:
         85:91:ec:b6
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUGhIweOboHxnOohdRxlOVCm+pkR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA4MDIyMTE0MTZaFw0yNDA4MDIyMTE5MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU1Q0ZGMEYwQUMxNEQ5Q0NF
QUU2QTYyNDRENUYwN0UxRjM1NUE0MDQ5NTMyNDc5MENCQTZCMUZGMjEzMEZCRUNC
RDU1QkQ5QzE2OEY3Q0UzOTM1MjM2NEJFQ0JFMjREMUYzQkQzRjM2RUY1MTZCODky
REE2MzlEN0UzREQ2QTAwNDJDQjQ2OEMyOTc3QTQ0MTdBMDU3NzE2QkU0MTNFN0M5
OURBOUZDQkQwMzRCRDdCMkQyMkU1MjY5OTQ3NzlCNDhCRjAzN0QxN0U1QkZBNDY2
OTlEQzRFNjdGMEMyQzVGOEIxMTRFNTlCQzI1MUFBRkFDODZDRUI2M0YyRkMyRDQ3
RTE4ODJBMDUxNzQ0RTk0MzYwNzdGQkI5RUYxMTM1MUVGRUU0NDM0MTA0NEM3M0FC
RjAzNTI2RkE1NEZBNTI3RDQ0MDBENzczNzZBNkFFNUZDQ0VGNzRGQzExQzg4NTQ4
NENFQzBDNjg2RTEzQzE5RTRDQTYwMjkxNEQ3NDUzODU3RTk2QkRCOEVDMzdCRjlB
RTJDOUVCMTBGNDgxRkJDQjZFRkVGM0IyODA2NjdCODc2MUYwNkM5QzVENTEzRkIx
Qjk2QTk0MTQzNDE4MEEyQjYyNDcwNjQyRDdGMUI0ODBCRDM1NjlENzExNDczMzE1
QzIzNDUyMDU4Q0M4NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxVz/DwrBTZzOrmpiRNXwfh81WkBJUyR5DLprH/ITD77L1VvZwWj3
zjk1I2S+y+JNHzvT8271FriS2mOdfj3WoAQstGjCl3pEF6BXcWvkE+fJnan8vQNL
17LSLlJplHebSL8DfRflv6RmmdxOZ/DCxfixFOWbwlGq+shs62Py/C1H4YgqBRdE
6UNgd/u57xE1Hv7kQ0EETHOr8DUm+lT6Un1EANdzdqauX8zvdPwRyIVITOwMaG4T
wZ5MpgKRTXRThX6WvbjsN7+a4snrEPSB+8tu/vOygGZ7h2HwbJxdUT+xuWqUFDQY
CitiRwZC1/G0gL01adcRRzMVwjRSBYzIQwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FAQ1Wco7xFoeEmym3g2YeVH0gyTsMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczNzJlMzEzMjM0MmUzMTM3
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACxfKswDQYJKoZIhvcNAQELBQADggEBAAYiZUYymW7HRRzGPjniLxBqa4zuBvk6
SX9aq3nOotVzaZP4uQpL8Xl7tkTibrtHR6PR+HhAD9ZqTgjVdhjcffRzPFz5E6is
ecAJf7EtTFG8719Plv3vygrljHmYDj8yHEmud7FzeY8Jo8HecdUirUGJAFI5uXIf
dPTd9quhpoOpv+4XEcLZaHA2U+/HtssUyQVXMwEF5x0hfKR3MJHCa6B2FZspiAlk
/ziDL0hoHUiwHWjOySEllRCBun0ENMrBpd5yMxGUWLd9OsEZW/KQIk9M/fYtmAHk
DF6MH/yayEgIHryjViwLDz/t2yOpK+PhJEn5Yiy0JLeNj9lmv4WR7LY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org