Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          nNpk+kstqBIppqgo9boxDyxiakRmw+YKixoNOuAZAZk=
Subject key identifier:   EA:F7:91:48:AE:AF:1E:85:89:2E:7D:A4:F3:A2:E7:0F:AF:FC:A6:0B
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       57D8B22A23C3B8DD0E8F83E4F51DE74DA8C5B78C
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:21:30 +0000
ROA not before:           Wed 02 Aug 2023 21:16:30 +0000
ROA not after:            Fri 02 Aug 2024 21:21:30 +0000
asID:                     262494
IP address blocks:        177.129.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d8:b2:2a:23:c3:b8:dd:0e:8f:83:e4:f5:1d:e7:4d:a8:c5:b7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:16:30 2023 GMT
            Not After : Aug  2 21:21:30 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:e7:6b:b7:ba:38:64:07:06:5a:22:5c:df:
                    da:b9:95:67:3d:80:f7:89:22:0c:60:eb:61:5c:0d:
                    fa:ad:2f:b7:e9:36:c6:83:f9:ae:ac:48:39:7e:19:
                    e7:23:0f:6e:36:a2:86:4a:ae:93:45:9a:02:03:af:
                    33:27:40:2b:f6:a4:50:da:58:e1:f2:37:8f:2e:ee:
                    7a:cc:5f:27:fd:84:3b:e4:b5:fb:1e:5c:39:03:1d:
                    1f:50:c8:9e:df:44:df:c2:e3:e1:7f:69:d2:38:63:
                    e8:05:26:fa:19:31:a8:8c:64:5c:e5:6d:84:51:93:
                    35:89:4b:5b:e2:3d:48:7e:2a:9c:0a:0c:77:29:a0:
                    48:e1:ff:69:95:0d:b1:12:b0:f1:c0:e3:a4:c7:85:
                    9f:0d:8c:ae:4a:88:f1:bb:bb:b4:0f:c3:3d:55:09:
                    67:13:97:c5:19:d2:d2:d4:d5:f3:f2:f9:8f:79:05:
                    b1:df:38:20:f8:e5:46:ed:83:20:36:5e:d7:1b:03:
                    e0:de:87:9a:67:58:64:21:52:da:e5:fe:99:25:f4:
                    fe:1f:d1:81:74:75:f9:8b:70:31:a5:cc:ba:f0:fa:
                    63:3d:52:6f:e7:a9:0e:9b:d4:7a:81:e0:d7:ab:cc:
                    3a:e0:08:e5:b1:9e:a9:7d:f0:6d:82:47:45:33:57:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F7:91:48:AE:AF:1E:85:89:2E:7D:A4:F3:A2:E7:0F:AF:FC:A6:0B
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:86:3a:df:cb:4c:81:8f:6b:36:bd:b3:fa:2c:89:2d:44:dc:
         bb:4b:9d:30:05:da:20:40:8a:78:6b:68:f2:ba:cc:82:2c:88:
         36:f2:45:1e:18:15:cd:67:7b:d1:74:72:ca:f4:03:e4:87:72:
         09:cb:13:72:46:8e:08:f3:63:9d:d3:d7:f9:37:b0:75:57:49:
         26:f6:19:bc:cc:f4:5f:91:33:d8:d5:f5:61:f7:6e:b0:72:55:
         dc:3b:aa:ac:76:e6:d7:3a:23:f2:be:c2:5d:fa:ed:3d:d8:8c:
         14:4c:38:2e:7d:af:05:45:b2:40:b3:f3:61:f2:2b:6c:64:45:
         90:1d:83:f0:fd:e6:43:b2:2b:ae:d7:b8:33:c6:d5:51:96:67:
         30:db:aa:49:20:e7:40:62:85:2e:8f:b3:2e:f6:5f:3d:cb:b4:
         7e:67:57:a1:04:58:c7:7b:c8:c5:2b:5c:db:69:e1:fd:f8:65:
         43:4e:69:04:cb:cd:24:f7:77:49:2f:fd:36:75:7c:05:9e:d3:
         59:e9:c8:18:8e:a1:89:d8:00:84:e0:ad:33:65:ef:0d:a6:10:
         62:8f:72:3c:8c:99:df:d4:23:9e:42:dc:ad:91:72:73:4c:03:
         43:e0:58:29:97:33:58:29:b4:3d:1a:14:d5:6d:cd:39:81:6d:
         ec:9b:64:00
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUV9iyKiPDuN0Oj4Pk9R3nTajFt4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA4MDIyMTE2MzBaFw0yNDA4MDIyMTIxMzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTlENkU3NkJCN0JBMzg2NDA3
MDY1QTIyNUNERkRBQjk5NTY3M0Q4MEY3ODkyMjBDNjBFQjYxNUMwREZBQUQyRkI3
RTkzNkM2ODNGOUFFQUM0ODM5N0UxOUU3MjMwRjZFMzZBMjg2NEFBRTkzNDU5QTAy
MDNBRjMzMjc0MDJCRjZBNDUwREE1OEUxRjIzNzhGMkVFRTdBQ0M1RjI3RkQ4NDNC
RTRCNUZCMUU1QzM5MDMxRDFGNTBDODlFREY0NERGQzJFM0UxN0Y2OUQyMzg2M0U4
MDUyNkZBMTkzMUE4OEM2NDVDRTU2RDg0NTE5MzM1ODk0QjVCRTIzRDQ4N0UyQTlD
MEEwQzc3MjlBMDQ4RTFGRjY5OTUwREIxMTJCMEYxQzBFM0E0Qzc4NTlGMEQ4Q0FF
NEE4OEYxQkJCQkI0MEZDMzNENTUwOTY3MTM5N0M1MTlEMkQyRDRENUYzRjJGOThG
NzkwNUIxREYzODIwRjhFNTQ2RUQ4MzIwMzY1RUQ3MUIwM0UwREU4NzlBNjc1ODY0
MjE1MkRBRTVGRTk5MjVGNEZFMUZEMTgxNzQ3NUY5OEI3MDMxQTVDQ0JBRjBGQTYz
M0Q1MjZGRTdBOTBFOUJENDdBODFFMEQ3QUJDQzNBRTAwOEU1QjE5RUE5N0RGMDZE
ODI0NzQ1MzM1N0JGNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6dbna7e6OGQHBloiXN/auZVnPYD3iSIMYOthXA36rS+36TbGg/mu
rEg5fhnnIw9uNqKGSq6TRZoCA68zJ0Ar9qRQ2ljh8jePLu56zF8n/YQ75LX7Hlw5
Ax0fUMie30TfwuPhf2nSOGPoBSb6GTGojGRc5W2EUZM1iUtb4j1IfiqcCgx3KaBI
4f9plQ2xErDxwOOkx4WfDYyuSojxu7u0D8M9VQlnE5fFGdLS1NXz8vmPeQWx3zgg
+OVG7YMgNl7XGwPg3oeaZ1hkIVLa5f6ZJfT+H9GBdHX5i3Axpcy68PpjPVJv56kO
m9R6geDXq8w64AjlsZ6pffBtgkdFM1e/TQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOr3kUiurx6FiS59pPOi5w+v/KYLMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczNzJlMzEzMjM5MmUzNjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sYE/MA0GCSqGSIb3DQEBCwUAA4IBAQAghjrfy0yBj2s2vbP6LIktRNy7S50wBdog
QIp4a2jyusyCLIg28kUeGBXNZ3vRdHLK9APkh3IJyxNyRo4I82Od09f5N7B1V0km
9hm8zPRfkTPY1fVh926wclXcO6qsdubXOiPyvsJd+u092IwUTDgufa8FRbJAs/Nh
8itsZEWQHYPw/eZDsiuu17gzxtVRlmcw26pJIOdAYoUuj7Mu9l89y7R+Z1ehBFjH
e8jFK1zbaeH9+GVDTmkEy80k93dJL/02dXwFntNZ6cgYjqGJ2ACE4K0zZe8NphBi
j3I8jJnf1COeQtytkXJzTAND4FgplzNYKbQ9GhTVbc05gW3sm2QA
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org