Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          nePp4LM8BdoSOv4CAihdRRi/QNdlUcTRAaRL2TeLQBU=
Subject key identifier:   E1:C3:A2:B5:BA:7A:F1:80:BB:DE:33:08:C1:4B:BD:07:28:2B:E3:58
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       23C05BC698BC7B9C3EE84C3C7D03775A29CA919B
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:15:06 +0000
ROA not before:           Wed 02 Aug 2023 21:10:06 +0000
ROA not after:            Fri 02 Aug 2024 21:15:06 +0000
asID:                     262494
IP address blocks:        177.129.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c0:5b:c6:98:bc:7b:9c:3e:e8:4c:3c:7d:03:77:5a:29:ca:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:10:06 2023 GMT
            Not After : Aug  2 21:15:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:2d:3e:dd:4e:50:3f:ff:1d:da:74:e8:60:
                    db:eb:6a:f5:45:24:9b:ba:69:06:4e:87:3d:87:63:
                    6c:91:86:7a:52:01:a1:7b:e1:f8:ad:e2:eb:7d:f9:
                    f7:c9:26:7f:05:36:f3:aa:35:c0:ef:3b:73:e8:e2:
                    e5:77:07:01:df:95:b4:b0:b6:0e:1c:48:c4:6f:17:
                    6a:98:4c:9b:d1:99:4e:dd:46:22:a8:8d:c0:61:d4:
                    27:f8:30:a9:d4:4d:11:99:ff:18:13:4d:42:e6:9b:
                    67:a8:68:fb:e9:29:30:97:d8:80:70:74:81:61:55:
                    5f:b8:0c:84:10:2d:91:65:2c:67:fe:3d:f8:b8:80:
                    42:b7:61:e2:f4:ed:ce:92:26:b4:be:b5:c1:48:19:
                    b6:3b:40:a2:46:be:71:c1:a8:c4:20:6c:3e:29:d0:
                    82:3f:ed:42:bf:1f:0b:6a:ec:f2:40:c1:09:7b:ee:
                    6d:8b:ba:50:34:5d:16:74:56:83:59:7e:a5:e9:be:
                    b1:a2:b3:ee:53:b7:f8:f4:03:00:08:88:20:95:48:
                    a3:33:93:9b:7a:7b:5a:53:10:d4:17:b0:5f:5d:b9:
                    f4:60:6f:fd:04:96:8d:28:86:f0:5f:23:a4:25:ff:
                    d0:2c:21:35:f5:0f:96:ed:7b:d0:ae:10:af:e0:fb:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:A2:B5:BA:7A:F1:80:BB:DE:33:08:C1:4B:BD:07:28:2B:E3:58
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:cc:e9:9f:f9:b9:10:9e:08:d9:b9:08:40:2e:f7:e8:1c:
         26:d6:67:c5:6a:15:95:b1:4e:cd:7a:45:e8:15:aa:9e:b4:bc:
         b2:d2:e6:ea:d8:19:4e:32:12:f2:48:ee:d6:59:8c:96:47:ec:
         5e:8f:ed:bd:94:63:02:e7:d6:f1:22:cd:05:28:1e:4e:21:10:
         42:c8:5d:8b:9e:9c:0b:d3:ff:a7:76:9d:a5:5f:12:94:f3:bb:
         83:58:11:05:52:46:42:4b:59:fb:2d:fa:ff:0f:a2:9e:33:d7:
         5f:3f:6b:ec:f8:d6:ec:c1:51:ea:03:6a:a0:f6:5b:8f:2c:20:
         4e:7b:cc:29:8f:e8:c1:bc:f9:5d:33:19:80:b8:b9:22:30:7a:
         96:2d:15:6a:de:81:29:4c:ec:c2:13:89:1d:ab:15:de:cd:4f:
         b2:51:e8:be:ee:e5:55:f6:90:fb:18:9b:46:6b:35:24:27:a3:
         2b:71:8e:6e:40:fa:e3:97:df:a0:9f:b5:86:b5:5b:6b:3b:a0:
         38:12:61:b9:1c:35:93:29:fc:f9:4b:65:1c:2e:d9:6c:42:00:
         64:76:7b:2e:21:3c:dd:48:2d:9b:79:06:bc:68:db:04:eb:9a:
         4b:b6:8b:6e:8c:88:39:25:3e:7a:1e:d6:d9:29:87:a5:cd:7d:
         ca:5d:87:c2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUI8Bbxpi8e5w+6Ew8fQN3WinKkZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA4MDIyMTEwMDZaFw0yNDA4MDIyMTE1MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTc3MzJEM0VERDRFNTAzRkZG
MUREQTc0RTg2MERCRUI2QUY1NDUyNDlCQkE2OTA2NEU4NzNEODc2MzZDOTE4NjdB
NTIwMUExN0JFMUY4QURFMkVCN0RGOUY3QzkyNjdGMDUzNkYzQUEzNUMwRUYzQjcz
RThFMkU1NzcwNzAxREY5NUI0QjBCNjBFMUM0OEM0NkYxNzZBOTg0QzlCRDE5OTRF
REQ0NjIyQTg4REMwNjFENDI3RjgzMEE5RDQ0RDExOTlGRjE4MTM0RDQyRTY5QjY3
QTg2OEZCRTkyOTMwOTdEODgwNzA3NDgxNjE1NTVGQjgwQzg0MTAyRDkxNjUyQzY3
RkUzREY4Qjg4MDQyQjc2MUUyRjRFRENFOTIyNkI0QkVCNUMxNDgxOUI2M0I0MEEy
NDZCRTcxQzFBOEM0MjA2QzNFMjlEMDgyM0ZFRDQyQkYxRjBCNkFFQ0YyNDBDMTA5
N0JFRTZEOEJCQTUwMzQ1RDE2NzQ1NjgzNTk3RUE1RTlCRUIxQTJCM0VFNTNCN0Y4
RjQwMzAwMDg4ODIwOTU0OEEzMzM5MzlCN0E3QjVBNTMxMEQ0MTdCMDVGNURCOUY0
NjA2RkZEMDQ5NjhEMjg4NkYwNUYyM0E0MjVGRkQwMkMyMTM1RjUwRjk2RUQ3QkQw
QUUxMEFGRTBGQjE0N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA53MtPt1OUD//Hdp06GDb62r1RSSbumkGToc9h2NskYZ6UgGhe+H4
reLrffn3ySZ/BTbzqjXA7ztz6OLldwcB35W0sLYOHEjEbxdqmEyb0ZlO3UYiqI3A
YdQn+DCp1E0Rmf8YE01C5ptnqGj76Skwl9iAcHSBYVVfuAyEEC2RZSxn/j34uIBC
t2Hi9O3Okia0vrXBSBm2O0CiRr5xwajEIGw+KdCCP+1Cvx8LauzyQMEJe+5ti7pQ
NF0WdFaDWX6l6b6xorPuU7f49AMACIgglUijM5ObentaUxDUF7BfXbn0YG/9BJaN
KIbwXyOkJf/QLCE19Q+W7XvQrhCv4PsUfQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOHDorW6evGAu94zCMFLvQcoK+NYMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczNzJlMzEzMjM5MmUzNjMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sYE8MA0GCSqGSIb3DQEBCwUAA4IBAQCa/8zpn/m5EJ4I2bkIQC736Bwm1mfFahWV
sU7NekXoFaqetLyy0ubq2BlOMhLySO7WWYyWR+xej+29lGMC59bxIs0FKB5OIRBC
yF2LnpwL0/+ndp2lXxKU87uDWBEFUkZCS1n7Lfr/D6KeM9dfP2vs+NbswVHqA2qg
9luPLCBOe8wpj+jBvPldMxmAuLkiMHqWLRVq3oEpTOzCE4kdqxXezU+yUei+7uVV
9pD7GJtGazUkJ6MrcY5uQPrjl9+gn7WGtVtrO6A4EmG5HDWTKfz5S2UcLtlsQgBk
dnsuITzdSC2beQa8aNsE65pLtotujIg5JT56HtbZKYelzX3KXYfC
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org