Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          axC7BNl1HvQLpEeKHybDS50HyXzpcAOmPtWtM9Z/qh8=
Subject key identifier:   17:0C:E7:19:BE:0A:3C:9F:E6:E9:41:B8:51:30:9F:23:0B:A3:EC:00
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       57D46FD405854C750F4D665030DB0F8627D1A605
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        177.66.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d4:6f:d4:05:85:4c:75:0f:4d:66:50:30:db:0f:86:27:d1:a6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:84:d6:73:cc:1d:36:da:85:6c:68:82:44:
                    dd:02:c3:4f:c7:c3:52:55:49:e1:35:0f:56:5b:3d:
                    bc:6e:09:c0:6d:8c:9b:4d:07:6a:24:36:c5:3b:ad:
                    f7:ea:3c:86:10:69:6f:76:d8:6f:7b:eb:bd:5d:fd:
                    e0:1b:17:e1:fa:da:f4:f6:63:bc:5a:68:18:57:05:
                    e2:c7:15:81:a4:d8:f5:a2:2c:06:f9:9a:98:55:81:
                    6f:ea:92:e2:0e:00:73:f9:e0:89:1e:9b:23:e3:32:
                    69:d3:12:a0:b2:fd:80:80:88:83:d5:f1:96:2d:fb:
                    d0:9e:65:92:0c:7e:be:1e:42:ac:ea:11:0d:9c:6d:
                    b6:b6:42:e7:43:68:c4:1f:16:26:18:c1:b1:50:2a:
                    91:19:2f:38:a5:31:1f:95:17:08:5e:4e:34:c8:a0:
                    10:b5:97:0e:dc:1b:cf:ec:2a:73:7e:b5:2f:81:2c:
                    dd:0a:3c:13:b3:06:11:92:22:ae:44:7e:03:19:91:
                    2f:a0:84:a6:d2:ef:87:25:1f:95:ed:a2:bb:66:19:
                    d3:73:2c:6d:6c:3e:30:b3:5b:bd:b8:5b:4f:16:c9:
                    08:4a:00:57:c9:55:83:e5:93:2b:2a:de:6e:42:1b:
                    48:ec:05:9d:e8:12:92:3a:a6:35:41:95:c5:2b:47:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:E7:19:BE:0A:3C:9F:E6:E9:41:B8:51:30:9F:23:0B:A3:EC:00
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:f3:19:82:2c:fd:dc:fa:35:3f:67:23:69:cc:c1:ac:3e:
         54:2d:26:1f:19:4a:08:6c:9f:0b:be:82:16:33:4e:4c:37:0b:
         b5:cc:21:88:44:cd:c7:16:c4:c4:8d:42:e5:79:63:e0:72:e4:
         29:76:fe:b1:de:5a:5b:5f:fe:0c:d9:ec:17:19:b3:e9:91:f7:
         b5:04:01:68:a4:aa:77:f1:e1:ab:2f:4c:b8:2a:e4:40:2c:af:
         ca:d6:53:3f:e8:19:80:7f:c7:f4:46:a1:71:34:b6:dc:39:80:
         a2:c7:e7:33:22:94:3c:0b:35:1c:77:d9:42:03:e5:f2:2f:56:
         a8:bb:c2:35:09:e2:73:56:46:e1:22:73:59:d2:a0:05:d2:1f:
         67:97:ad:c4:8e:e6:31:21:42:30:6e:38:ae:7d:cf:53:b0:a5:
         b3:ee:04:7f:b5:5e:15:bd:cf:8f:a3:b2:83:48:4c:22:ba:16:
         56:60:f7:c9:a7:5a:cf:54:6b:f5:b7:37:c7:a0:03:c7:bc:65:
         5d:c4:5a:c3:9c:6e:47:9b:96:ab:0e:e1:7e:a8:23:ef:13:8f:
         7f:02:9b:6f:a8:61:28:aa:9a:5f:7f:7d:bf:ba:a0:48:f1:57:
         dc:20:cf:87:79:64:fc:fc:e4:04:0e:11:80:70:e2:0b:31:47:
         81:75:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org