Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          UidVcY0iY/t8ZXsODP4t1olaAShhjk9jTsoyPJWqt6A=
Subject key identifier:   BD:6C:B5:92:A9:03:CB:EB:20:9D:A8:E2:E6:0D:5E:09:1B:3B:A8:60
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       5938527C6FC7C23D2D46A259B16425D8D1EF0511
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:20:58 +0000
ROA not before:           Wed 02 Aug 2023 21:15:58 +0000
ROA not after:            Fri 02 Aug 2024 21:20:58 +0000
asID:                     262494
IP address blocks:        177.129.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:38:52:7c:6f:c7:c2:3d:2d:46:a2:59:b1:64:25:d8:d1:ef:05:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:15:58 2023 GMT
            Not After : Aug  2 21:20:58 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:05:e0:ec:29:45:07:7e:a8:77:75:97:68:
                    68:b0:31:6e:97:db:5f:3e:ac:81:61:e7:62:34:fa:
                    84:f7:2d:73:12:82:dc:f8:eb:6e:0e:1c:0b:6b:f2:
                    4d:09:4b:ad:6f:15:cb:37:70:9b:6b:bb:b5:d6:69:
                    9a:31:14:06:9e:f3:5b:72:99:c1:19:7e:8d:5d:62:
                    71:1c:40:f2:3b:b4:a9:47:e9:a3:bc:b1:d7:5f:2d:
                    1a:90:0a:79:1e:46:cd:c2:ac:0e:50:c4:8e:80:ed:
                    f6:7d:e1:46:55:5b:72:93:ca:80:e7:8e:9a:18:c0:
                    7a:b7:68:33:22:16:51:87:3f:e1:7c:85:0f:de:e4:
                    a7:ad:99:5f:7f:f1:7d:1a:21:8c:39:c9:9c:e2:02:
                    ae:97:da:23:9d:1e:aa:d8:d4:d2:7d:28:84:c5:e2:
                    1a:2d:b2:d7:6a:02:eb:20:c8:10:49:27:8e:d9:32:
                    12:fd:0e:8a:24:4f:f9:f3:84:fb:2a:97:aa:34:bd:
                    81:6a:9f:7b:75:a7:ec:08:74:f8:66:c7:a7:3b:34:
                    99:e5:f1:2f:8e:ec:8b:de:a2:9b:ce:67:46:a9:1f:
                    d6:86:1f:77:e4:3d:34:e2:a2:fe:6f:8a:44:74:fc:
                    7d:61:9d:1f:5c:29:c1:6a:e0:e9:20:e9:8b:2f:a5:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:B5:92:A9:03:CB:EB:20:9D:A8:E2:E6:0D:5E:09:1B:3B:A8:60
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:94:5d:91:ed:9a:31:91:81:4a:84:d1:2f:60:61:c3:0e:
         8c:01:14:41:aa:95:24:40:b6:3c:ab:af:9f:2d:05:47:bf:1a:
         40:9a:3c:34:17:76:dc:73:74:ef:e9:19:c7:a6:cf:83:e9:d3:
         69:51:73:58:f4:52:b9:46:32:74:d0:1b:7b:88:41:ad:ce:47:
         00:6b:39:e3:2a:6e:64:60:9c:5e:7e:ef:b1:59:d3:f6:9c:f8:
         c3:73:9c:85:ce:aa:f7:29:e9:73:a0:7c:7c:69:6b:8a:62:cd:
         18:ee:a1:fe:c9:e2:96:51:1f:8e:06:b6:74:0f:26:fd:80:2d:
         a9:d9:7f:e0:af:7a:af:ea:61:e9:62:f8:b9:d4:57:30:ed:ef:
         59:ad:f0:b8:14:b3:82:56:11:d3:68:a0:6e:d2:b7:fa:d8:fe:
         45:2a:58:6d:d4:51:a9:98:1c:2c:6e:f5:1b:8b:ce:42:19:32:
         00:b5:1f:1a:f2:fd:f6:72:18:17:84:11:39:ba:b3:73:9e:e3:
         4e:70:3b:0a:9d:b3:5f:f3:88:bc:42:f2:f5:a4:b8:5a:33:2a:
         06:68:46:39:85:2f:19:c2:fe:b0:cc:ac:62:39:a4:f1:23:1e:
         3d:0d:16:84:85:b1:dc:20:10:41:5e:66:38:53:e9:bf:e3:18:
         65:fd:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org