Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          kZgBQsl8981iYGUdWhzn2xn9UGfrRx2TB6HFDkOrjTM=
Subject key identifier:   2D:9A:F6:FF:9A:2F:10:9D:04:3E:F4:2E:7D:CD:1F:DE:46:D0:81:10
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       3B34C90D1089EA62572D7AE738E4EFF8A966066B
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:00 +0000
ROA not before:           Mon 09 Oct 2023 14:55:00 +0000
ROA not after:            Wed 09 Oct 2024 15:00:00 +0000
asID:                     262494
IP address blocks:        179.125.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:34:c9:0d:10:89:ea:62:57:2d:7a:e7:38:e4:ef:f8:a9:66:06:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:00 2023 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:04:db:8e:a4:a2:95:0a:59:58:23:81:1e:
                    3b:bc:5e:37:0d:48:05:36:80:04:8e:a6:31:85:dd:
                    8b:b4:14:21:35:33:84:8e:71:5c:3a:0f:41:d0:f5:
                    a3:91:7f:14:8f:eb:14:97:ad:f8:67:62:62:6d:b0:
                    1a:e5:ee:a9:d0:c4:8a:63:8e:94:99:76:d5:b7:4e:
                    5a:27:05:cd:c3:e5:fe:5f:3b:16:a1:4f:4f:34:4b:
                    7b:17:be:cb:55:29:4f:d9:eb:c7:22:55:cf:c3:d8:
                    31:de:0c:c5:b5:51:8b:a1:84:5a:84:a3:3b:37:d0:
                    89:3d:ff:e2:c7:28:3b:44:e0:02:b6:d5:7d:dd:f5:
                    f5:37:f9:1b:91:b0:79:93:c7:a9:e8:f5:0b:a8:2a:
                    ac:a6:ad:9b:6f:b0:3b:fa:ba:fe:4d:64:a6:7d:63:
                    15:09:87:d2:b6:f5:78:7c:c9:80:70:a3:1d:5f:67:
                    b5:a2:74:19:59:85:3e:bf:40:88:a5:be:33:55:64:
                    0f:14:86:4c:b4:72:5f:ba:48:d1:7a:43:c1:77:1f:
                    ed:5e:20:08:30:af:9c:c9:1b:40:db:5f:42:3b:af:
                    c5:91:a0:a3:eb:3c:25:ec:4c:57:be:9d:cb:f1:17:
                    5a:c2:92:dc:6c:62:15:2e:bf:be:92:bd:13:54:62:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:F6:FF:9A:2F:10:9D:04:3E:F4:2E:7D:CD:1F:DE:46:D0:81:10
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:97:5f:ca:57:30:71:f1:2d:ed:72:10:35:d3:a6:06:7d:
         bd:7e:ab:b7:71:c3:0d:25:1f:53:bb:13:ca:13:b0:61:e0:61:
         e3:a3:6f:9b:98:7e:ee:51:cb:56:b1:56:31:2c:cc:9a:ec:97:
         3a:fd:8b:8d:20:38:cb:d1:45:32:fc:b8:5f:e1:b5:e1:2a:f1:
         77:7d:52:c3:8a:72:51:cf:a3:09:30:dd:37:40:59:6f:d2:29:
         28:21:2c:e6:4e:69:5d:21:0f:a8:34:df:d1:64:98:4c:2e:2c:
         57:2c:50:b1:be:d3:43:4a:8c:83:67:79:f5:f1:7d:71:34:94:
         97:27:79:2e:ee:ff:fd:19:1d:2a:93:81:16:e9:f7:66:ce:59:
         7b:c7:d6:a0:33:89:36:bf:16:7a:28:40:ad:22:c2:90:81:0a:
         d3:4e:ad:ff:07:3b:39:36:ab:7a:ef:15:f2:a1:c2:57:8f:f3:
         3d:54:f0:5d:df:9e:b7:13:d4:7f:da:41:8f:ab:22:5b:e5:c2:
         17:be:b9:16:9b:e4:8b:82:4c:d7:ab:30:37:6d:97:ef:cc:4d:
         f1:36:48:ff:da:a8:db:53:74:f1:d2:d2:69:0f:ae:51:8d:90:
         bb:ee:cf:62:c8:5b:ee:d9:8a:25:17:31:3c:1c:c6:78:c4:a3:
         ee:2a:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org