Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          d7MN4XHC7g3q2t+9D5mDiPMkgygDt19mp/Amz1hGCjk=
Subject key identifier:   C1:A3:C6:32:56:0C:D7:B3:CA:56:B1:91:5E:2A:B7:C1:56:5D:ED:85
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       684B14D5C59D22D9094DFC5B432ECCEE9D9FC7A4
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:00 +0000
ROA not before:           Mon 09 Oct 2023 15:55:00 +0000
ROA not after:            Wed 09 Oct 2024 16:00:00 +0000
asID:                     262494
IP address blocks:        177.66.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:14:d5:c5:9d:22:d9:09:4d:fc:5b:43:2e:cc:ee:9d:9f:c7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:00 2023 GMT
            Not After : Oct  9 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:fb:2a:6e:3a:56:1a:0e:86:59:e4:a3:95:
                    39:9e:a2:68:64:11:ac:93:95:c8:55:43:46:dd:d0:
                    96:6f:de:0b:71:be:69:74:8d:c8:2f:0d:e0:ff:45:
                    8e:92:e0:7c:b0:51:26:ea:d7:15:06:35:d8:89:0d:
                    9d:7c:01:17:65:c1:ab:77:94:49:c2:64:f7:01:ee:
                    39:10:80:f8:d3:d3:4b:b6:c3:b2:72:d3:89:ba:3d:
                    6b:8b:28:20:57:3e:3d:0f:9b:83:0f:9f:71:3b:e4:
                    00:80:80:ab:d6:cc:ff:17:41:bc:51:ab:dd:b4:5b:
                    a9:e2:3f:f6:c9:46:dc:ca:df:f3:5f:57:e6:12:12:
                    25:30:b0:ee:33:46:d4:37:ba:4c:b5:fc:d1:41:8a:
                    e7:48:38:89:43:ba:df:b3:8e:58:04:f6:2d:79:59:
                    cb:21:62:b3:f2:7c:b1:cb:65:39:89:2f:ea:9f:3d:
                    51:2e:db:08:ec:30:af:48:3d:61:b6:d9:97:11:ee:
                    58:30:2e:f4:6c:c8:66:42:da:bb:ed:32:c5:3b:c7:
                    8d:bd:c6:3c:81:5a:7b:62:e7:85:c0:5f:c1:a6:3e:
                    10:16:b6:99:9e:7b:ac:d6:72:bc:e2:10:9a:3b:4c:
                    14:aa:d7:57:c6:05:32:79:e3:6f:44:0b:cf:76:67:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A3:C6:32:56:0C:D7:B3:CA:56:B1:91:5E:2A:B7:C1:56:5D:ED:85
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:2a:9e:9a:34:83:c6:a8:f0:76:66:e0:68:20:f8:52:2c:
         43:a9:cd:76:34:68:e7:98:d4:43:e3:77:37:64:94:cd:d4:a7:
         4e:7f:87:e3:05:96:0e:62:bc:7f:01:d1:c4:4f:8c:d0:67:13:
         46:61:50:89:25:d3:4d:2f:f3:8a:71:9a:0b:23:d3:fc:52:e3:
         1e:84:f4:e8:cd:8d:90:c3:cc:52:f4:ea:40:c3:4f:46:df:2d:
         8b:0d:30:5c:d9:60:38:7d:88:d4:65:f7:e3:53:df:5e:8c:48:
         2b:1c:72:a5:f0:86:5f:9d:58:43:9c:65:11:e9:1e:f5:4e:21:
         20:a3:6d:15:31:8a:3e:e2:ee:1d:79:77:85:f1:b3:97:dc:28:
         c6:35:89:a6:54:99:8b:6c:2b:db:45:6b:a5:fc:a6:2c:8c:cd:
         37:63:9d:0b:ef:01:61:ec:9e:3b:2d:b7:03:fe:3b:82:48:4a:
         8c:69:26:87:b8:c8:eb:f7:35:0e:43:ee:98:fa:1c:77:02:8f:
         b1:a8:eb:84:20:c8:db:71:04:d2:9f:ef:4e:d1:af:45:27:21:
         15:8b:0d:45:c2:97:55:63:45:aa:89:2f:ab:52:ae:48:8b:2d:
         a0:09:d7:b4:72:ff:a7:6c:91:dd:ae:75:3d:24:6b:f1:62:13:
         85:95:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org