Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          MdxevUz84ps+TeqN+3OhFeyWvdjYRbRM5YCCSNoH04g=
Subject key identifier:   E5:2A:03:17:72:E3:45:E5:09:4B:CB:4E:8F:27:65:45:98:51:29:C6
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       640DCB18B035FEA67A6FD482CB326BD1CCDCFCE1
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        177.66.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0d:cb:18:b0:35:fe:a6:7a:6f:d4:82:cb:32:6b:d1:cc:dc:fc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:f5:a5:cf:d0:02:ad:cb:08:96:35:47:89:
                    3b:f4:45:bd:45:43:13:af:a2:49:13:1d:42:26:76:
                    d8:8b:dd:5a:72:93:21:f5:93:bd:2a:30:e3:0b:b5:
                    ef:40:05:0e:1a:3e:8c:12:98:f6:1d:8e:34:82:b9:
                    d0:fb:d1:14:a7:64:4c:c3:73:19:b9:f2:10:67:bf:
                    bf:e2:b4:fa:1a:0d:c3:eb:dc:a3:50:ae:e8:1b:eb:
                    24:01:94:d2:a3:d3:64:e3:81:28:68:6e:11:b9:a5:
                    24:6e:e4:bb:4b:b4:17:ea:4d:c7:ae:b9:87:fa:18:
                    98:65:d4:97:82:07:4a:d0:48:ba:52:74:a4:92:a2:
                    83:ec:85:9b:73:43:12:ce:74:e0:91:c4:bf:1b:7a:
                    3e:b6:e2:4f:55:a2:3a:43:21:5c:26:55:96:57:49:
                    a9:4b:21:0f:22:08:ff:ea:9c:74:06:7c:8e:a9:66:
                    80:92:63:50:c4:3f:90:1a:9c:ee:fd:e2:4c:2c:7b:
                    3a:da:17:d9:c7:59:7e:b4:3c:43:cf:18:6b:3a:07:
                    8f:6d:0f:f7:82:e1:36:7a:20:ae:77:db:91:a4:20:
                    51:31:d7:d1:29:b2:2e:9c:50:84:3d:2f:b2:e5:49:
                    df:c7:09:17:1e:98:bf:44:a6:0a:d2:ff:f8:90:10:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:03:17:72:E3:45:E5:09:4B:CB:4E:8F:27:65:45:98:51:29:C6
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:56:09:52:c2:77:2c:a9:40:17:33:03:52:4d:ca:b0:a1:
         4e:10:58:e5:7b:2a:4f:9e:c2:f6:a1:f3:3a:3b:b6:cc:a2:86:
         e0:dd:11:84:ab:63:02:b5:9f:84:a2:72:86:ed:06:fe:4c:2d:
         e2:0c:69:87:a2:60:3d:ae:d6:24:6e:9a:eb:e2:7f:1a:58:f6:
         ae:2e:fe:09:66:11:53:9c:cf:82:81:e4:6d:e4:a7:36:e3:de:
         09:55:61:90:2e:1e:d0:98:69:05:b7:be:47:68:19:a9:99:82:
         90:64:3b:d9:75:72:0c:88:34:a4:87:04:e7:5c:74:a7:52:7a:
         17:7c:50:e8:41:d4:6e:5a:e3:5f:44:82:90:b2:05:0f:11:a4:
         3f:78:09:cf:13:59:c2:ee:19:51:25:07:06:01:24:af:9e:f4:
         65:56:55:87:15:e9:f3:01:a4:06:b4:7c:81:64:29:ff:15:27:
         bd:a9:f9:4c:1f:4f:73:7b:ab:30:30:d4:cc:80:48:d4:59:32:
         24:0a:f2:64:b5:e3:5f:48:c1:5e:f8:e8:b8:95:7f:bf:59:05:
         ba:46:52:fe:39:e7:3d:d4:5a:c9:6c:fc:ba:38:74:12:f2:ce:
         99:91:00:be:02:fe:2f:ea:b3:4b:72:d2:82:4d:e6:e4:10:ff:
         e0:f5:87:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org