Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          9XrLv8R1Wfi7iebrdiM7p7/PX0Cygl/e7z/mna1+V0U=
Subject key identifier:   BA:1B:DC:EA:FF:1E:64:B3:6A:50:CF:A3:12:BB:CD:57:E1:AC:EC:0C
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       64607895491100E9DDF64279B5BE382A2C31CFE2
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:20:44 +0000
ROA not before:           Wed 02 Aug 2023 21:15:44 +0000
ROA not after:            Fri 02 Aug 2024 21:20:44 +0000
asID:                     262494
IP address blocks:        177.129.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:60:78:95:49:11:00:e9:dd:f6:42:79:b5:be:38:2a:2c:31:cf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:15:44 2023 GMT
            Not After : Aug  2 21:20:44 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:a6:78:f2:c7:08:94:d1:30:3e:ef:a2:7a:
                    c3:b9:35:f4:84:06:bd:f9:e0:54:c4:b4:2e:00:28:
                    d9:7d:cf:bd:92:4d:4c:ea:a3:2d:b2:86:8e:d9:de:
                    d7:b7:c6:67:8f:02:68:1c:60:2b:9a:19:48:fa:3b:
                    c6:b4:16:b4:30:e6:fd:13:64:29:2e:b4:d3:6e:1d:
                    d8:be:a2:f1:96:57:7c:72:3a:4b:87:e4:99:45:c7:
                    44:53:ed:8e:a3:72:a3:4f:51:37:de:2c:aa:dc:fe:
                    0b:28:92:a7:e3:3e:93:bd:dc:bd:56:6a:3c:c2:b6:
                    81:38:d1:1c:e8:62:00:1f:e1:04:ec:05:29:cb:d7:
                    6e:e9:44:ae:45:7d:a0:3d:be:0d:84:7e:29:7b:ea:
                    03:04:75:a8:0d:a4:3a:eb:01:6f:22:b0:30:67:5b:
                    5f:1f:7a:0d:72:fd:65:3f:74:54:67:46:3a:8f:8f:
                    0e:a7:a8:18:74:01:58:e3:79:45:8f:a0:ef:48:fc:
                    8e:19:dc:a6:ae:2d:b4:6c:df:7a:28:37:70:59:8e:
                    e3:f7:c5:e5:82:1c:31:72:ec:5e:21:a4:10:00:6b:
                    57:44:31:09:8c:11:f9:80:da:13:d2:f8:a3:7d:c5:
                    ed:51:a0:1f:43:31:b3:a9:80:1a:45:8f:89:02:0a:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:DC:EA:FF:1E:64:B3:6A:50:CF:A3:12:BB:CD:57:E1:AC:EC:0C
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d7:36:6d:6e:bc:68:2c:ea:d1:5d:aa:50:b1:aa:3e:78:bf:
         f1:a1:63:3c:3c:ce:25:30:aa:8e:97:30:30:b8:6e:e7:8f:6b:
         a3:6b:ba:42:d3:cf:77:bb:d1:db:b4:93:88:22:2a:54:d9:44:
         f6:86:a0:0d:ae:05:2e:c0:c1:22:e5:af:c6:1b:2e:2e:80:e6:
         08:5e:71:a9:fd:49:a7:11:20:b8:d3:ae:ec:32:bf:a7:f0:e0:
         7d:8f:29:88:78:fd:0d:ce:b8:be:c0:b8:6f:87:22:d6:1c:8b:
         f6:f1:21:90:5e:b7:37:70:96:20:7b:17:05:09:20:33:fc:e9:
         ba:bd:18:56:b1:b3:39:d3:be:79:50:62:2c:53:df:1b:cc:97:
         34:38:c7:8b:7f:f2:54:cf:39:03:91:64:2e:72:1c:e6:bb:fb:
         1a:39:bf:ed:4b:82:16:b7:15:7c:6d:e7:c3:27:a2:80:e2:b5:
         e9:2a:a7:c4:39:09:35:08:b3:3f:20:76:f1:75:07:91:28:96:
         c3:d7:d4:34:68:88:29:4f:62:5b:cb:1f:db:64:2c:8c:16:73:
         b5:48:51:59:72:8a:f5:ba:d1:bf:8c:35:a2:8d:92:c7:f7:81:
         0f:79:e5:e8:d9:00:e0:cb:c0:b6:44:76:51:9e:80:ca:2c:c3:
         0a:ef:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org