Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa (raw, json)
Hash identifier:          KrJsIsc4JmNZZ10+fpOe9WPDh68PpDfwPiufvId6os0=
Subject key identifier:   13:E9:6F:1E:05:72:6F:DA:D2:03:0C:95:C9:1D:B6:F0:79:25:4E:6C
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       7F86A123713239F5F83FB006326A2A879F7745C4
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        177.66.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:a1:23:71:32:39:f5:f8:3f:b0:06:32:6a:2a:87:9f:77:45:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:f1:80:65:11:b1:a2:8a:7b:07:3f:1c:3f:
                    69:56:e9:b9:11:b6:84:9f:6a:71:b3:74:21:8b:6b:
                    e7:a7:01:7d:a9:96:bb:82:e0:cc:e8:50:91:83:e3:
                    ed:37:40:ef:c5:16:10:7d:01:47:a5:dc:07:44:02:
                    44:86:39:70:bd:01:59:49:24:0f:cd:75:e8:99:a4:
                    ad:c4:cc:96:2a:db:83:92:c1:19:80:77:9d:1e:38:
                    a5:0a:c0:c1:4b:41:74:58:ca:ca:fc:0a:74:56:44:
                    39:e2:30:fd:e9:d4:56:7a:c8:33:1b:8a:25:13:9c:
                    15:8e:05:dd:8c:e5:6e:d1:9b:89:58:56:36:ca:00:
                    30:e8:d5:79:db:ee:8e:79:a0:02:e6:cf:5c:5e:2d:
                    48:f2:9a:98:78:73:da:28:e0:7a:61:70:7f:27:ec:
                    a4:d9:fa:08:9d:cd:d3:e7:11:39:1a:3c:a4:59:a0:
                    c3:bf:38:72:50:ea:5c:18:68:ca:41:68:a8:5e:d4:
                    4e:30:02:f3:19:3e:01:37:7f:89:e4:6b:77:e2:c6:
                    ee:ca:8e:08:a3:a6:fc:99:66:d2:8f:96:20:d2:0e:
                    41:c0:24:d7:f7:41:6f:10:ed:72:79:b8:62:04:bc:
                    6d:94:9e:b4:48:b5:88:f9:bb:61:b0:bb:2d:48:5b:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E9:6F:1E:05:72:6F:DA:D2:03:0C:95:C9:1D:B6:F0:79:25:4E:6C
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32312d3231203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:9d:f0:96:18:94:48:5c:dc:a0:0a:16:55:f6:52:5b:0a:
         8f:f6:7c:ec:91:7f:f9:3e:43:29:25:79:ab:16:9c:98:fd:35:
         86:5f:df:f7:c8:d8:64:4a:85:a1:d8:b0:f9:ca:7b:df:ee:9e:
         0c:2b:7f:e2:81:6f:93:7f:4f:74:a1:7a:a6:79:41:d1:18:af:
         75:07:a1:e2:fe:51:e0:51:7e:25:a2:79:c7:ec:3a:5f:62:d3:
         78:7f:aa:5a:e6:69:22:93:43:0f:c6:3c:a7:f3:11:fc:9f:27:
         94:7c:5b:a7:60:6f:05:1f:f1:74:c8:ff:19:2f:c6:a5:72:d9:
         fe:12:d0:cb:76:26:80:fd:0a:5e:71:10:da:62:39:46:8d:6d:
         0c:eb:1c:65:4d:e8:dc:e5:aa:8b:e1:10:4e:0c:13:ec:82:5b:
         4f:29:73:9f:7a:95:94:8d:0a:c6:00:9b:f8:12:fe:11:50:b6:
         5a:ce:26:83:96:67:64:dc:82:4f:79:04:5c:0a:89:a3:4c:60:
         dd:df:3a:10:ba:3d:71:fd:d1:d4:ee:2b:8c:37:b1:2e:23:66:
         70:8d:27:18:1e:58:02:15:69:d3:a4:53:b0:6c:a9:91:d4:32:
         f1:e5:b7:19:27:8f:c7:52:95:63:41:ff:c8:8d:8e:14:aa:49:
         7f:2d:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org