Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131332e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          v2OPxYfgyyvPGXZY1bhiTwbhrg3gACDJ1A0BS58pWFs=
Subject key identifier:   6D:E1:EE:53:E7:9C:8E:9E:1F:11:6B:68:8C:EE:FB:6D:14:99:C7:AB
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       41B2EF772B7BE04AF7BC59558D0D2B20CD36C2CD
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131332e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:01 +0000
ROA not before:           Mon 09 Oct 2023 15:55:01 +0000
ROA not after:            Wed 09 Oct 2024 16:00:01 +0000
asID:                     262494
IP address blocks:        177.66.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b2:ef:77:2b:7b:e0:4a:f7:bc:59:55:8d:0d:2b:20:cd:36:c2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:01 2023 GMT
            Not After : Oct  9 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:16:05:3e:72:eb:8c:4c:41:23:0c:ea:99:
                    c1:0a:78:65:89:35:74:37:0b:22:6b:34:52:77:08:
                    03:30:9c:fe:48:39:d5:b7:db:47:df:c7:6f:3e:1b:
                    a5:12:24:83:03:36:64:83:03:5e:2a:49:e3:42:e9:
                    97:f2:3c:87:c0:e8:99:50:aa:2c:28:9c:47:bd:e9:
                    c0:eb:fe:39:b4:87:aa:1e:32:2e:f8:c2:b9:a1:95:
                    e7:0a:f4:20:48:c8:b2:d2:cc:ba:77:08:7e:71:81:
                    b5:b0:37:6a:5e:3b:02:24:c7:90:c2:5a:79:37:c5:
                    da:1c:e8:00:26:48:b8:6a:03:91:a6:66:e2:a1:64:
                    da:00:7d:b1:80:9a:f9:51:1c:c8:dd:71:a2:6c:d1:
                    65:54:8f:5f:f7:05:7b:f3:1b:e0:08:21:dd:cf:e5:
                    21:5e:d2:ce:6c:94:47:08:f7:11:df:e9:98:1d:3d:
                    48:b2:c9:94:11:f9:77:de:98:d8:5d:ae:92:9e:81:
                    d3:72:11:ed:45:c1:d9:3d:6b:5f:96:ff:fe:72:53:
                    37:fd:c1:c7:f2:25:24:5a:5f:45:6f:60:b7:71:4d:
                    79:f9:4f:2d:96:7c:a8:52:5f:e8:9b:e3:36:e8:d7:
                    73:34:57:ab:c8:48:bd:bc:54:98:9c:fc:36:d4:fd:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:EE:53:E7:9C:8E:9E:1F:11:6B:68:8C:EE:FB:6D:14:99:C7:AB
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:8b:0a:ce:af:68:ce:aa:b9:7e:b2:08:6d:e6:56:57:55:
         c0:84:68:c5:e7:ef:5a:7a:a4:7f:13:8e:d2:cb:57:88:e6:54:
         74:f3:e8:3d:92:22:55:63:8c:29:7c:f3:4b:0c:6c:d2:28:c2:
         6b:09:6a:56:93:26:26:07:6a:3f:e3:d2:5c:94:4a:d9:8e:73:
         e6:4f:71:13:e8:ea:a6:f7:ae:0f:53:2f:5f:9f:d5:5e:94:eb:
         df:4c:28:d2:63:51:8d:a9:a4:ba:fb:3d:5e:b4:2f:37:af:5d:
         af:a5:1e:fc:19:c5:84:6f:e5:ff:1e:dd:0a:65:8c:fe:fa:00:
         a5:19:f5:c3:24:f2:44:32:05:22:e7:c2:ea:4b:1d:82:57:dd:
         ce:e0:9b:78:ea:6c:38:b1:eb:d9:90:14:ae:a8:d0:74:88:40:
         41:03:ad:a9:86:b5:92:b6:4f:cd:6b:ef:69:38:d4:0f:d5:e5:
         fb:74:a3:3f:df:9b:cf:74:a8:05:bd:1f:5d:49:1c:ef:35:67:
         21:83:48:b9:a3:98:b4:5f:d9:85:64:35:ad:db:d9:ab:99:9b:
         42:48:92:64:29:37:d0:56:59:85:15:15:bd:a2:9f:f2:f2:5b:
         3a:01:7d:ab:69:b7:be:d6:ed:51:b7:e3:d6:15:b2:89:dd:ef:
         6a:51:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org