Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          3BlwqiH/7TLHoiBRG2cePG0/4IwMPHb8O8kOJioaHqw=
Subject key identifier:   CF:65:C8:EA:A5:0E:70:B3:F2:F7:16:2B:6D:19:97:BB:50:8C:55:11
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       6195928EC0A6982811E27D99DB1F914BB56F6D93
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:00 +0000
ROA not before:           Mon 09 Oct 2023 15:55:00 +0000
ROA not after:            Wed 09 Oct 2024 16:00:00 +0000
asID:                     262494
IP address blocks:        177.66.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:95:92:8e:c0:a6:98:28:11:e2:7d:99:db:1f:91:4b:b5:6f:6d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:00 2023 GMT
            Not After : Oct  9 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:5b:bd:73:a8:64:5a:e8:53:b0:0b:b9:d3:
                    af:3c:76:9f:79:84:30:9a:ec:9b:6c:8a:ef:11:49:
                    08:75:37:5e:0d:c1:11:ca:24:80:5b:5d:18:cd:f3:
                    0a:43:97:48:11:92:ef:43:57:c6:f1:7d:d8:61:ba:
                    3f:cf:bf:bc:d5:ea:57:f9:23:6a:73:d3:72:f7:b4:
                    7f:62:11:df:38:97:6a:37:13:63:f0:c0:97:57:7a:
                    a2:4a:bc:1d:00:e3:25:33:2c:20:85:0e:da:3b:f2:
                    fe:55:92:82:15:83:a2:53:f7:35:bd:63:c5:e6:30:
                    cb:34:94:55:5b:8c:4b:ab:40:5c:78:d6:4a:67:ac:
                    30:1c:e9:98:6e:ea:b1:64:68:1d:e5:09:4f:08:81:
                    94:63:1c:40:5e:22:7e:16:b3:66:87:64:da:31:a2:
                    64:7f:1f:ad:71:b3:f5:6d:42:89:a8:1e:7d:0e:4f:
                    0e:17:e0:64:cd:31:a3:e9:01:ea:d5:98:f9:19:83:
                    00:a2:43:ee:e9:5c:d0:2d:e1:c6:23:15:ad:ed:09:
                    2c:bb:30:18:14:80:4a:b9:f4:1e:eb:5a:64:8d:86:
                    e2:ad:a8:43:1a:1f:6e:90:07:e1:dc:20:cc:e5:4c:
                    2b:52:1e:51:ed:06:fe:45:cd:35:03:5b:62:c6:12:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:65:C8:EA:A5:0E:70:B3:F2:F7:16:2B:6D:19:97:BB:50:8C:55:11
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:98:07:eb:0c:2a:87:29:fb:62:4c:0b:80:44:42:7c:41:44:
         c5:9d:c8:82:0e:0b:33:e8:3e:7b:83:96:0a:6a:a3:17:44:b6:
         01:52:35:7f:7c:25:85:26:03:9f:ea:69:96:47:82:87:0e:11:
         14:45:a6:db:95:6d:ec:f3:36:a9:df:fa:75:9c:42:94:6c:ef:
         67:3c:99:81:4d:fa:c1:fb:c0:c2:31:4c:8c:9f:99:f3:27:b4:
         af:6d:3d:7b:b5:1f:e2:21:20:ac:e9:ca:e9:88:72:e3:06:3c:
         0e:44:3d:62:2c:39:59:5d:c5:19:8e:54:8a:5f:b0:b6:ac:1e:
         ca:28:54:0d:3c:d7:55:9a:2e:79:bc:bb:b0:f7:73:52:32:fe:
         21:fd:a2:0a:7d:fa:b5:42:3a:a5:09:36:14:c9:9c:5f:72:de:
         7a:73:71:5a:b8:83:1b:b2:b0:9c:e3:7c:01:b7:65:2a:8b:22:
         5a:71:f0:a8:d9:63:88:8a:59:96:81:34:ca:9b:10:16:68:25:
         96:d9:2c:3c:e4:f4:0b:44:dd:f7:d7:48:8e:d8:b7:3e:21:9d:
         81:96:fa:29:63:98:84:12:d1:79:6d:27:09:71:f7:55:2b:4b:
         52:d8:9f:1d:f1:27:63:34:05:b1:a3:33:37:af:b7:1f:0e:a1:
         79:76:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org