Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          aPjKBZxvODgo86N6B1AVzAoDDE2ttyhJF+vpqkxeaHo=
Subject key identifier:   2B:15:6B:FF:B9:27:F9:65:47:04:C1:99:90:A3:BB:4B:00:2B:0A:87
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       2ADEC8EBE40C88D631B93F19887514326B61F827
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        177.66.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:de:c8:eb:e4:0c:88:d6:31:b9:3f:19:88:75:14:32:6b:61:f8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:d1:47:12:7b:78:6d:cc:f2:7e:34:b5:f2:
                    4d:e6:db:d0:36:53:6b:cc:e5:01:51:2f:00:95:6a:
                    e8:86:a0:18:df:48:44:8f:ef:50:2c:12:c1:2d:12:
                    fc:42:d1:d9:d7:a3:b5:e1:13:53:35:0c:01:d7:ec:
                    8b:a6:7d:18:7f:84:c0:73:ae:a6:4a:67:79:e5:5c:
                    8a:dd:45:73:2e:5f:eb:0b:5d:20:46:2d:0f:b3:f6:
                    96:b2:b8:c9:a9:dc:c0:c7:df:5d:a5:ad:0e:bc:f4:
                    9a:c3:9e:19:47:93:95:b1:a4:27:2f:07:46:31:b2:
                    aa:11:0e:f2:76:de:b8:35:59:51:9a:cf:7b:ed:98:
                    b9:e1:61:b7:f9:80:eb:c5:04:6b:b5:53:cc:14:64:
                    cd:9d:24:3a:e3:23:74:bc:6c:e9:8b:ad:3d:60:35:
                    d0:9f:c2:06:84:3f:56:d7:d2:eb:6c:ed:69:71:fc:
                    07:5c:db:3c:45:98:10:97:b6:c1:88:31:92:fd:11:
                    09:3e:37:ad:6e:91:c2:0d:95:e8:6f:f1:2a:92:71:
                    fe:c2:da:c2:bc:dc:54:70:ae:ae:6e:24:05:89:51:
                    cb:ce:9d:89:8a:45:30:ae:8b:cf:58:03:e3:29:c1:
                    4d:92:71:12:de:4e:c7:35:7c:fa:2b:9c:53:62:4b:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:6B:FF:B9:27:F9:65:47:04:C1:99:90:A3:BB:4B:00:2B:0A:87
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:17:bc:02:f2:61:5b:95:87:ae:25:5f:39:9a:af:82:7d:fa:
         c5:c5:28:f4:56:c7:98:1b:41:53:b3:74:43:b9:88:58:32:86:
         9d:70:74:c5:d2:b4:4d:ad:f5:e3:09:0f:97:57:4d:a4:60:52:
         e5:ee:b3:07:cf:f8:10:1a:c1:8b:9b:ea:74:91:37:3f:0b:2b:
         4d:06:ba:bd:0a:2c:c9:c8:9d:c4:62:46:de:53:16:62:5b:1a:
         7d:53:93:5e:f4:0f:a5:4d:37:cb:c4:2b:5f:bf:3c:58:97:be:
         07:3b:ab:46:29:c7:47:96:c4:94:80:a9:65:c8:1e:a3:cb:f2:
         7a:39:c6:6d:da:7e:f9:f5:53:fa:61:c6:02:8f:f3:36:42:fc:
         4f:7c:4a:10:64:58:7e:6d:b5:d6:79:5b:77:80:4c:14:fd:9e:
         4c:2e:53:d8:10:af:1f:07:55:ad:a7:91:ec:1f:38:90:43:63:
         79:5f:f0:82:15:4c:dc:d7:08:0d:66:60:11:d6:50:ea:25:21:
         70:38:df:b7:82:2c:f3:59:29:d0:e7:56:c0:e5:3e:6b:af:38:
         b3:f6:55:b8:d1:79:80:e4:33:33:42:aa:56:ee:6d:48:3c:e6:
         f5:c4:45:04:89:59:97:01:3d:42:93:27:f2:93:98:ee:6d:8f:
         8e:f2:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org