Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          kbSQMEB0fim5XIC9UdtNcmAC6aBqPTkL097EFZeIBrg=
Subject key identifier:   C5:D7:8D:38:D1:57:27:EB:7B:60:EE:3F:47:25:99:A4:B0:9B:DC:73
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       280BF312CF66B5DAFDDBE204AF3799E8B960AAD1
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:00 +0000
ROA not before:           Mon 09 Oct 2023 14:55:00 +0000
ROA not after:            Wed 09 Oct 2024 15:00:00 +0000
asID:                     262494
IP address blocks:        177.66.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:f3:12:cf:66:b5:da:fd:db:e2:04:af:37:99:e8:b9:60:aa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:00 2023 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:d2:cb:95:6b:ac:0b:88:65:f1:27:5a:05:
                    c7:03:27:50:2f:c4:af:42:d5:1a:d5:b0:f0:2c:45:
                    a8:af:fb:68:5f:48:90:ba:06:f6:18:c2:44:c7:70:
                    06:f8:0c:b6:4a:1f:dd:3e:c2:8c:14:ce:63:55:5d:
                    da:12:f3:81:10:19:b9:a1:80:4f:94:52:f3:43:f5:
                    1f:82:16:66:33:e3:2c:17:17:11:30:ee:f7:db:d9:
                    8e:24:83:f0:c1:02:94:2b:f5:8f:a2:26:54:98:7f:
                    0c:3d:52:ae:8b:29:34:e2:6c:35:c4:01:f9:50:96:
                    e5:a6:ec:ab:be:41:e0:22:e1:eb:c8:6e:c9:39:a7:
                    0a:39:3a:6c:ef:58:7a:7c:b6:dc:e7:7d:cd:6e:a6:
                    93:1d:d8:8f:d4:e4:8d:db:06:f5:df:ed:95:82:f8:
                    63:60:69:cf:95:d3:82:3e:57:80:65:5b:15:30:1f:
                    2a:73:a1:f2:7c:f6:c5:8e:2c:80:fa:38:09:3f:0b:
                    31:a1:ad:b6:b3:1c:d4:86:55:e6:b4:d1:72:4e:2f:
                    04:01:dd:27:18:12:52:23:ba:a7:cc:e9:76:fb:74:
                    1e:ee:39:5b:0e:37:df:aa:28:39:6e:94:2f:06:7b:
                    03:f4:2f:5c:82:de:b7:75:f6:83:2a:2f:9a:03:64:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:8D:38:D1:57:27:EB:7B:60:EE:3F:47:25:99:A4:B0:9B:DC:73
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:94:a7:41:a1:5d:98:59:fe:4b:0b:6a:65:a1:da:4d:32:
         e1:1d:7a:03:fc:b6:bc:70:f2:9c:e2:41:36:c3:09:16:e3:28:
         73:5b:f8:91:64:dc:ae:66:d4:fb:54:d6:9c:65:36:95:b5:6c:
         8f:d2:50:5a:a3:09:c8:d0:3f:76:54:3c:f7:dc:af:a5:2e:14:
         79:d3:05:80:ee:b7:76:1c:d4:e0:4a:7f:3d:60:94:07:fb:91:
         30:8b:6c:67:1c:26:87:ca:30:9f:b2:24:a1:00:97:b4:48:14:
         61:cf:f8:2d:27:80:f5:88:0b:70:48:cf:a0:ac:2d:a4:22:2e:
         52:cc:0b:c5:4f:b7:4d:c8:65:0c:0b:34:93:3f:63:40:03:5b:
         f9:91:bf:09:1f:f7:91:3b:50:f5:f2:3d:2f:70:8f:11:8c:d8:
         1f:fe:05:ed:b4:bb:4d:61:ea:ac:9b:7e:03:14:b1:f9:2c:69:
         f7:4e:71:cf:ab:d6:a8:40:f3:1d:fc:dc:20:3f:b3:25:be:70:
         3d:be:16:e3:87:d5:70:fe:e3:76:82:0d:c1:d4:a6:dd:6c:c4:
         89:b3:e5:64:2f:cd:b9:4c:58:d7:9f:43:4b:88:01:b7:08:c0:
         c1:5e:24:bf:1c:1e:cc:7b:6f:c1:41:e6:f1:b3:27:36:40:25:
         ed:70:8d:9b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUKAvzEs9mtdr92+IErzeZ6LlgqtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzEwMDkxNDU1MDBaFw0yNDEwMDkxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTczREQyQ0I5NTZCQUMwQjg4
NjVGMTI3NUEwNUM3MDMyNzUwMkZDNEFGNDJENTFBRDVCMEYwMkM0NUE4QUZGQjY4
NUY0ODkwQkEwNkY2MThDMjQ0Qzc3MDA2RjgwQ0I2NEExRkREM0VDMjhDMTRDRTYz
NTU1RERBMTJGMzgxMTAxOUI5QTE4MDRGOTQ1MkYzNDNGNTFGODIxNjY2MzNFMzJD
MTcxNzExMzBFRUY3REJEOThFMjQ4M0YwQzEwMjk0MkJGNThGQTIyNjU0OTg3RjBD
M0Q1MkFFOEIyOTM0RTI2QzM1QzQwMUY5NTA5NkU1QTZFQ0FCQkU0MUUwMjJFMUVC
Qzg2RUM5MzlBNzBBMzkzQTZDRUY1ODdBN0NCNkRDRTc3RENENkVBNjkzMUREODhG
RDRFNDhEREIwNkY1REZFRDk1ODJGODYzNjA2OUNGOTVEMzgyM0U1NzgwNjU1QjE1
MzAxRjJBNzNBMUYyN0NGNkM1OEUyQzgwRkEzODA5M0YwQjMxQTFBREI2QjMxQ0Q0
ODY1NUU2QjREMTcyNEUyRjA0MDFERDI3MTgxMjUyMjNCQUE3Q0NFOTc2RkI3NDFF
RUUzOTVCMEUzN0RGQUEyODM5NkU5NDJGMDY3QjAzRjQyRjVDODJERUI3NzVGNjgz
MkEyRjlBMDM2NDlGM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5z3Sy5VrrAuIZfEnWgXHAydQL8SvQtUa1bDwLEWor/toX0iQugb2
GMJEx3AG+Ay2Sh/dPsKMFM5jVV3aEvOBEBm5oYBPlFLzQ/UfghZmM+MsFxcRMO73
29mOJIPwwQKUK/WPoiZUmH8MPVKuiyk04mw1xAH5UJblpuyrvkHgIuHryG7JOacK
OTps71h6fLbc533NbqaTHdiP1OSN2wb13+2VgvhjYGnPldOCPleAZVsVMB8qc6Hy
fPbFjiyA+jgJPwsxoa22sxzUhlXmtNFyTi8EAd0nGBJSI7qnzOl2+3Qe7jlbDjff
qig5bpQvBnsD9C9cgt63dfaDKi+aA2SfPwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMXXjTjRVyfre2DuP0clmaSwm9xzMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczNzJlMzYzNjJlMzEzMTM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
sUJ0MA0GCSqGSIb3DQEBCwUAA4IBAQAd4JSnQaFdmFn+SwtqZaHaTTLhHXoD/La8
cPKc4kE2wwkW4yhzW/iRZNyuZtT7VNacZTaVtWyP0lBaownI0D92VDz33K+lLhR5
0wWA7rd2HNTgSn89YJQH+5Ewi2xnHCaHyjCfsiShAJe0SBRhz/gtJ4D1iAtwSM+g
rC2kIi5SzAvFT7dNyGUMCzSTP2NAA1v5kb8JH/eRO1D18j0vcI8RjNgf/gXttLtN
Yeqsm34DFLH5LGn3TnHPq9aoQPMd/NwgP7MlvnA9vhbjh9Vw/uN2gg3B1KbdbMSJ
s+VkL825TFjXn0NLiAG3CMDBXiS/HB7Me2/BQebxsyc2QCXtcI2b
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org