Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          0NGu4MoDSXSbrQhp0PUdur4I0cy+r7tcNcm++GCQyHs=
Subject key identifier:   DB:19:50:65:74:E4:50:D1:B4:BD:47:AD:0B:60:AC:A7:EA:32:1E:A8
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       105E64078B853436DBA767CFEA9C69A3A7C7468F
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:21:12 +0000
ROA not before:           Wed 02 Aug 2023 21:16:12 +0000
ROA not after:            Fri 02 Aug 2024 21:21:12 +0000
asID:                     262494
IP address blocks:        177.129.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:64:07:8b:85:34:36:db:a7:67:cf:ea:9c:69:a3:a7:c7:46:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:16:12 2023 GMT
            Not After : Aug  2 21:21:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:a0:39:be:dc:70:90:a6:e7:b3:09:22:66:
                    97:9e:78:99:32:7f:ee:74:3c:8f:ae:eb:14:5c:21:
                    3c:14:83:2e:93:90:da:60:06:1f:51:ec:28:42:08:
                    14:e6:3a:f8:72:53:fc:06:84:f2:1e:96:bc:7a:f1:
                    11:2a:55:f6:60:95:1c:e5:9d:8d:26:c1:34:c2:f7:
                    26:41:d2:96:a3:e2:a7:a7:b0:17:38:55:f8:f3:60:
                    9e:92:f8:b5:7e:d7:b4:4d:c5:21:f6:5e:0c:62:29:
                    5e:07:3d:4e:db:0f:c9:90:c6:12:81:b9:4e:84:90:
                    cd:39:e4:5f:a7:15:ee:4d:14:47:3d:77:ba:fc:ee:
                    a3:1a:30:82:0c:4a:13:5d:62:b8:76:8e:e8:5f:46:
                    95:d0:2f:f0:84:38:f4:f3:af:5e:5b:d5:f9:db:39:
                    18:59:14:1b:7b:49:f8:35:b3:0a:61:a3:ff:61:29:
                    e3:31:a9:41:5d:44:26:4c:c3:32:ff:d0:a1:ee:ee:
                    37:c4:8d:c3:62:69:0d:ed:e9:07:02:1f:2e:db:d1:
                    dc:ef:80:52:5e:39:71:91:9b:b7:f0:c9:b6:93:27:
                    47:f4:f3:09:45:b9:8f:b0:50:e1:d3:4a:94:a4:cc:
                    ae:ba:49:81:0b:79:fd:7a:38:7e:64:36:4a:66:da:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:50:65:74:E4:50:D1:B4:BD:47:AD:0B:60:AC:A7:EA:32:1E:A8
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:2a:7a:7d:79:c2:cf:7b:88:b5:5f:ae:86:51:8e:ad:d7:
         11:55:34:0b:6c:33:1f:7e:72:ef:dd:9c:8a:b3:9e:aa:c9:5d:
         d2:57:7b:b0:cb:97:d5:85:cc:73:d1:7b:c2:af:02:67:c7:1a:
         40:8c:cd:55:cd:5b:46:99:15:47:6e:ea:82:c4:1e:21:84:ea:
         64:e9:e0:b8:ab:84:e8:2b:b0:de:3a:ad:50:d3:08:0d:09:17:
         01:0a:2a:c3:17:10:fc:06:62:4b:bb:18:b6:1f:66:a8:95:42:
         d2:42:4f:b7:17:11:20:4b:d2:1e:24:4b:1a:6c:ba:91:d9:d2:
         e2:11:0c:09:ce:77:57:8b:92:79:60:fb:b3:1a:72:7e:c7:86:
         70:4f:9c:4f:d9:9b:b8:4d:17:8f:c6:0a:da:38:48:e5:fa:a6:
         a2:7b:a6:a5:cc:af:21:a4:86:e2:a6:32:cc:35:af:4b:58:1f:
         30:5b:69:c0:e5:11:d4:c6:1d:9b:6a:43:45:ec:2c:fa:1e:50:
         9d:88:5b:49:05:ef:c7:c7:b3:c8:ac:31:44:e2:e5:45:2d:57:
         c0:10:ad:ac:16:54:7d:f3:56:b2:bd:6e:87:f4:7a:75:58:0a:
         2d:4d:bd:6a:c1:26:9e:68:a7:83:cc:a9:ca:51:22:d5:ec:d4:
         db:2b:0a:11
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEF5kB4uFNDbbp2fP6pxpo6fHRo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA4MDIyMTE2MTJaFw0yNDA4MDIyMTIxMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFEN0EwMzlCRURDNzA5MEE2
RTdCMzA5MjI2Njk3OUU3ODk5MzI3RkVFNzQzQzhGQUVFQjE0NUMyMTNDMTQ4MzJF
OTM5MERBNjAwNjFGNTFFQzI4NDIwODE0RTYzQUY4NzI1M0ZDMDY4NEYyMUU5NkJD
N0FGMTExMkE1NUY2NjA5NTFDRTU5RDhEMjZDMTM0QzJGNzI2NDFEMjk2QTNFMkE3
QTdCMDE3Mzg1NUY4RjM2MDlFOTJGOEI1N0VEN0I0NERDNTIxRjY1RTBDNjIyOTVF
MDczRDRFREIwRkM5OTBDNjEyODFCOTRFODQ5MENEMzlFNDVGQTcxNUVFNEQxNDQ3
M0Q3N0JBRkNFRUEzMUEzMDgyMEM0QTEzNUQ2MkI4NzY4RUU4NUY0Njk1RDAyRkYw
ODQzOEY0RjNBRjVFNUJENUY5REIzOTE4NTkxNDFCN0I0OUY4MzVCMzBBNjFBM0ZG
NjEyOUUzMzFBOTQxNUQ0NDI2NENDMzMyRkZEMEExRUVFRTM3QzQ4REMzNjI2OTBE
RURFOTA3MDIxRjJFREJEMURDRUY4MDUyNUUzOTcxOTE5QkI3RjBDOUI2OTMyNzQ3
RjRGMzA5NDVCOThGQjA1MEUxRDM0QTk0QTRDQ0FFQkE0OTgxMEI3OUZEN0EzODdF
NjQzNjRBNjZEQUE1RUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwdegOb7ccJCm57MJImaXnniZMn/udDyPrusUXCE8FIMuk5DaYAYf
UewoQggU5jr4clP8BoTyHpa8evERKlX2YJUc5Z2NJsE0wvcmQdKWo+Knp7AXOFX4
82Cekvi1fte0TcUh9l4MYileBz1O2w/JkMYSgblOhJDNOeRfpxXuTRRHPXe6/O6j
GjCCDEoTXWK4do7oX0aV0C/whDj0869eW9X52zkYWRQbe0n4NbMKYaP/YSnjMalB
XUQmTMMy/9Ch7u43xI3DYmkN7ekHAh8u29Hc74BSXjlxkZu38Mm2kydH9PMJRbmP
sFDh00qUpMyuukmBC3n9ejh+ZDZKZtql7QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNsZUGV05FDRtL1HrQtgrKfqMh6oMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczNzJlMzEzMjM5MmUzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sYE+MA0GCSqGSIb3DQEBCwUAA4IBAQA7xSp6fXnCz3uItV+uhlGOrdcRVTQLbDMf
fnLv3ZyKs56qyV3SV3uwy5fVhcxz0XvCrwJnxxpAjM1VzVtGmRVHbuqCxB4hhOpk
6eC4q4ToK7DeOq1Q0wgNCRcBCirDFxD8BmJLuxi2H2aolULSQk+3FxEgS9IeJEsa
bLqR2dLiEQwJzndXi5J5YPuzGnJ+x4ZwT5xP2Zu4TRePxgraOEjl+qaie6alzK8h
pIbipjLMNa9LWB8wW2nA5RHUxh2bakNF7Cz6HlCdiFtJBe/Hx7PIrDFE4uVFLVfA
EK2sFlR981ayvW6H9Hp1WAotTb1qwSaeaKeDzKnKUSLV7NTbKwoR
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org