Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          vymk11IMYzx8bw9wLeZeOxkYUVzoTbIUQ6f3XKB6Ad4=
Subject key identifier:   00:55:AF:16:FF:76:FC:5B:F5:FA:10:23:BD:A4:ED:A8:44:B5:C2:54
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       132BD5B777643ADA0C1B25B43E783D0732F4D776
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        177.66.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2b:d5:b7:77:64:3a:da:0c:1b:25:b4:3e:78:3d:07:32:f4:d7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:e0:61:07:fc:dd:1c:5c:df:56:cd:67:17:
                    bf:94:e1:f0:28:4e:ee:09:de:b8:a8:04:8f:e1:64:
                    e2:94:0b:0b:19:ea:36:6d:57:54:26:d2:d6:b5:44:
                    d0:cb:d5:33:1e:5f:4c:a4:24:8a:13:58:88:6c:3d:
                    73:d3:2b:04:93:5a:0d:6a:7b:d5:13:02:99:0e:7c:
                    f7:93:d9:ff:4c:88:0e:9e:53:88:8d:91:cf:0e:2e:
                    9a:2d:94:7b:f4:c0:88:c0:f1:c1:70:06:6d:7e:2f:
                    d1:f1:1d:ad:e4:5e:1c:d8:7b:1b:57:13:ca:74:a3:
                    3c:76:a9:e2:f8:f0:3e:ac:47:f0:08:5f:de:e2:b9:
                    50:e3:7d:09:d0:02:2e:e3:aa:31:f3:d6:3e:35:e9:
                    7a:a9:6e:70:54:89:76:84:01:3e:5e:c1:de:63:7d:
                    1f:7f:58:1a:d3:4f:66:d7:c2:b2:12:15:fa:81:98:
                    10:01:9e:56:79:53:ef:44:cb:22:9a:b3:9b:11:11:
                    bd:c9:a5:04:f1:b6:a4:6a:66:ce:0e:ba:b4:b5:ce:
                    77:80:7c:35:30:f2:34:b1:5d:78:6e:53:f3:90:06:
                    3c:da:c1:89:0b:02:5e:a0:67:4e:0c:2d:a2:0a:a1:
                    de:28:3a:46:98:f1:67:8d:62:a6:58:4f:af:bb:d2:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:AF:16:FF:76:FC:5B:F5:FA:10:23:BD:A4:ED:A8:44:B5:C2:54
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:92:5c:9c:2c:2e:10:08:64:a6:1c:d8:8e:85:8e:27:59:
         2b:41:26:e4:95:79:d0:f9:00:9d:c0:03:ea:97:1a:74:8f:93:
         f0:03:c0:5a:01:0d:63:59:d8:7a:96:b6:1f:3c:37:74:2c:50:
         82:87:84:25:c2:25:94:1e:2b:e8:c7:22:7d:3a:94:dc:f8:61:
         78:87:f1:25:c9:be:35:75:90:9c:b8:be:aa:8f:e4:0a:2b:3e:
         fe:20:d7:5d:68:80:44:18:9f:42:45:93:2a:95:42:e3:78:2d:
         b8:35:3e:24:bd:1a:29:0b:57:15:6c:6c:32:75:21:30:d5:ee:
         14:e9:c1:b5:08:f2:b8:e1:82:59:c5:fa:07:db:4c:aa:d4:6c:
         e4:d7:e1:9d:cf:c1:18:82:62:52:e4:80:e1:64:dc:b0:e4:42:
         ec:d9:81:cd:65:34:41:0a:d9:05:5b:0e:2b:6c:5d:c6:16:22:
         dc:b8:e1:2a:17:7e:fb:83:0b:7d:52:7b:1f:26:5c:f8:3a:52:
         5e:1b:00:25:4c:96:a9:e4:d7:1c:e7:0f:c9:63:f8:ea:14:44:
         59:92:5d:08:0c:c1:e6:a8:00:17:e3:84:df:f3:4f:d8:0a:bb:
         72:db:73:cd:2b:be:62:15:90:20:0a:c5:88:6e:1e:e4:f1:bd:
         7d:52:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org