Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          Jfxe2g+um5mJje6FxIXk3q6ED96XEJsVfJvARefxt+g=
Subject key identifier:   49:3A:66:E2:EA:58:BF:EE:A5:82:ED:D0:8D:D3:55:36:D9:14:EE:F2
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       268CE82B6A3EBBF1CDF636C638E78A0F5054D297
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:01 +0000
ROA not before:           Mon 09 Oct 2023 15:55:01 +0000
ROA not after:            Wed 09 Oct 2024 16:00:01 +0000
asID:                     262494
IP address blocks:        179.125.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:e8:2b:6a:3e:bb:f1:cd:f6:36:c6:38:e7:8a:0f:50:54:d2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:01 2023 GMT
            Not After : Oct  9 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:ee:36:a6:8d:a5:03:1b:69:2a:72:73:53:
                    fc:e3:4a:57:b3:ca:f2:80:3e:92:9b:bc:c4:3e:b6:
                    84:3d:10:df:85:73:f9:2f:05:9d:cd:23:68:a8:80:
                    34:3f:ce:87:ce:83:95:b5:53:ed:e0:78:bf:92:0a:
                    fd:cb:51:83:b8:97:83:f7:29:92:ee:70:44:1e:82:
                    88:64:07:cf:a1:b9:a5:c0:42:ec:3f:73:c7:33:84:
                    5e:61:b0:fa:e7:8d:c7:34:f2:74:74:88:ea:9a:69:
                    92:ef:d2:1f:17:d1:a0:84:4a:2e:08:58:5f:cd:e8:
                    91:d6:71:ca:75:c9:72:07:16:a6:8b:ac:a6:cc:f6:
                    51:b8:01:69:d5:7b:aa:4b:85:36:a4:96:b0:8b:52:
                    29:e6:75:b6:e7:92:e3:8c:66:e9:e5:f7:a1:3a:2e:
                    c7:1e:e3:c4:5f:11:ba:e6:39:38:70:93:0c:bf:b1:
                    70:e7:90:c4:b1:f2:2b:ac:de:96:49:21:f1:d7:e7:
                    dd:59:1b:56:6a:78:99:e4:ef:29:1f:8b:28:01:bb:
                    cb:18:36:90:71:9e:cb:43:4a:09:f5:b1:64:16:49:
                    1a:b0:86:d4:bb:6e:7d:fd:e0:d5:9b:98:e1:c0:68:
                    bd:19:9b:74:79:f5:36:f3:14:7f:55:ec:be:42:27:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:66:E2:EA:58:BF:EE:A5:82:ED:D0:8D:D3:55:36:D9:14:EE:F2
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:71:94:45:2b:2c:89:50:2b:4e:2d:26:e8:c8:08:70:77:
         a1:50:9e:34:4d:36:64:7c:50:78:14:26:18:b1:6d:48:6c:75:
         e3:0f:80:4e:f3:6f:5f:47:2d:3a:ae:d1:e6:e4:da:c2:22:51:
         8e:ee:43:f1:80:80:80:8b:4c:7b:e1:ab:92:07:0d:e5:11:72:
         3b:6f:a8:f4:44:1e:22:e8:c9:07:57:f8:dd:63:67:27:da:fa:
         0a:7d:f1:ec:14:72:ab:31:c4:36:65:96:a4:ad:35:3b:94:f3:
         ce:d9:ff:1b:ed:f0:18:e4:b1:c4:57:31:5e:5f:ae:f9:da:4f:
         83:bf:04:d9:75:08:d2:88:ef:c6:54:1e:8d:d5:88:9b:da:32:
         58:7e:e0:9e:69:4e:ec:18:f3:6e:fa:cf:cb:bc:7e:22:1f:f6:
         b8:75:b6:86:95:15:10:74:b4:c8:08:d7:2c:2d:25:49:58:a7:
         ab:8b:39:c7:28:1a:3c:ad:08:74:fc:2b:4c:c8:95:8a:bd:e9:
         a1:84:ca:e6:5e:0d:00:03:5b:47:35:2d:4d:37:44:51:08:2f:
         ba:cc:17:7f:6b:a2:46:89:f0:18:92:2d:2a:ca:b6:f1:46:c4:
         d5:40:c5:ed:c7:0c:21:4d:5e:89:9a:27:b3:90:ad:67:b2:68:
         d2:de:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org