Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          8VVzzVx59ZGD36hoPFbpDRnQgrEg7ksjIC9ycezu8B0=
Subject key identifier:   79:1F:76:69:23:D3:D6:23:0B:FB:2A:4A:F0:9A:FE:F1:A1:AA:FC:E6
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       748D694AEA3D6775E68550797684809A231008B6
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:01 +0000
ROA not before:           Mon 09 Oct 2023 15:55:01 +0000
ROA not after:            Wed 09 Oct 2024 16:00:01 +0000
asID:                     262494
IP address blocks:        179.125.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8d:69:4a:ea:3d:67:75:e6:85:50:79:76:84:80:9a:23:10:08:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:01 2023 GMT
            Not After : Oct  9 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:da:1c:21:39:cb:a4:30:c6:c4:eb:2d:bf:
                    f0:b6:d2:a8:d1:69:cd:c0:e8:3a:6d:4b:43:70:a8:
                    b0:97:ee:96:e2:f9:c6:54:14:60:3c:38:f6:e4:d4:
                    c8:ff:90:89:2c:63:fd:f3:80:83:09:71:12:bb:b7:
                    85:e1:a6:be:84:f1:83:3e:8b:e8:90:80:49:14:66:
                    d2:7c:91:d5:e9:e9:b6:7c:df:77:e0:0a:27:82:e9:
                    ab:73:03:8a:ba:ea:b2:bc:2d:0e:69:82:31:16:b6:
                    c4:36:08:44:6c:15:2c:d2:79:b6:95:d0:04:4b:9a:
                    ed:4d:2e:29:c9:f7:91:95:25:ef:f9:f1:74:51:1a:
                    be:39:ee:af:68:98:54:9b:42:0c:6e:d4:7c:42:fc:
                    b2:42:59:85:29:75:69:27:c0:6f:40:19:d6:22:fc:
                    8d:67:9a:09:9f:2a:1e:27:cc:11:79:32:ad:fd:8f:
                    30:0c:b8:19:51:1e:39:6b:c8:bd:6f:61:d3:e0:9d:
                    fe:9f:2c:06:20:19:9e:33:01:1b:4c:72:57:6e:75:
                    53:ff:d0:5d:84:66:fb:94:2f:c3:ba:fe:12:75:40:
                    11:07:8c:2b:a7:2d:c1:6d:ab:b7:c3:8f:d4:40:46:
                    f0:54:2f:8a:09:19:31:fa:5a:84:11:6d:28:de:bb:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1F:76:69:23:D3:D6:23:0B:FB:2A:4A:F0:9A:FE:F1:A1:AA:FC:E6
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:c3:fd:a5:8c:83:ff:07:6d:9a:a6:4b:6f:b1:4e:95:e3:
         81:ff:58:e6:fe:c4:8f:ea:84:c3:2a:81:ba:79:93:e9:cf:ea:
         bf:5d:4b:63:2f:34:22:d2:63:a4:3f:51:d3:6d:b9:7c:a9:dd:
         9e:fc:c8:a4:8d:19:94:45:84:7c:a1:bc:3d:0c:ce:2d:20:c9:
         87:3c:65:ca:f4:0d:ce:ea:20:c2:77:24:57:c6:c0:24:78:74:
         e1:d6:7b:d9:dc:a2:e1:ea:69:ad:bd:29:cf:ac:1a:a2:ec:89:
         43:38:fc:d5:14:ba:68:3b:fa:7e:77:68:4f:03:53:c3:15:90:
         67:d3:8c:a2:d5:4d:74:d1:ba:ca:8f:c1:ea:fd:5f:b8:29:38:
         33:a2:3b:f8:00:c8:c1:7d:73:06:f4:6b:c1:e5:32:67:20:08:
         25:7a:89:dc:d0:43:ae:40:5f:dd:19:a2:19:44:1b:2e:6d:dc:
         20:64:3d:a8:f4:de:7d:f9:23:62:d6:28:fd:e2:55:a0:d8:77:
         61:35:bc:e0:0b:bc:e6:a1:c9:96:83:9f:b1:c7:dd:2f:13:ac:
         a3:14:ba:7d:5a:00:ac:44:3b:30:7a:59:14:17:ce:30:49:58:
         f3:26:12:bd:5e:b2:3d:2c:6d:7d:43:fb:1a:85:f8:9c:fd:4e:
         e1:67:ae:ef
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUdI1pSuo9Z3XmhVB5doSAmiMQCLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzEwMDkxNTU1MDFaFw0yNDEwMDkxNjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREFFQ0RBMUMyMTM5Q0JBNDMw
QzZDNEVCMkRCRkYwQjZEMkE4RDE2OUNEQzBFODNBNkQ0QjQzNzBBOEIwOTdFRTk2
RTJGOUM2NTQxNDYwM0MzOEY2RTRENEM4RkY5MDg5MkM2M0ZERjM4MDgzMDk3MTEy
QkJCNzg1RTFBNkJFODRGMTgzM0U4QkU4OTA4MDQ5MTQ2NkQyN0M5MUQ1RTlFOUI2
N0NERjc3RTAwQTI3ODJFOUFCNzMwMzhBQkFFQUIyQkMyRDBFNjk4MjMxMTZCNkM0
MzYwODQ0NkMxNTJDRDI3OUI2OTVEMDA0NEI5QUVENEQyRTI5QzlGNzkxOTUyNUVG
RjlGMTc0NTExQUJFMzlFRUFGNjg5ODU0OUI0MjBDNkVENDdDNDJGQ0IyNDI1OTg1
Mjk3NTY5MjdDMDZGNDAxOUQ2MjJGQzhENjc5QTA5OUYyQTFFMjdDQzExNzkzMkFE
RkQ4RjMwMENCODE5NTExRTM5NkJDOEJENkY2MUQzRTA5REZFOUYyQzA2MjAxOTlF
MzMwMTFCNEM3MjU3NkU3NTUzRkZEMDVEODQ2NkZCOTQyRkMzQkFGRTEyNzU0MDEx
MDc4QzJCQTcyREMxNkRBQkI3QzM4RkQ0NDA0NkYwNTQyRjhBMDkxOTMxRkE1QTg0
MTE2RDI4REVCQjYxQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2uzaHCE5y6QwxsTrLb/wttKo0WnNwOg6bUtDcKiwl+6W4vnGVBRg
PDj25NTI/5CJLGP984CDCXESu7eF4aa+hPGDPovokIBJFGbSfJHV6em2fN934Aon
gumrcwOKuuqyvC0OaYIxFrbENghEbBUs0nm2ldAES5rtTS4pyfeRlSXv+fF0URq+
Oe6vaJhUm0IMbtR8QvyyQlmFKXVpJ8BvQBnWIvyNZ5oJnyoeJ8wReTKt/Y8wDLgZ
UR45a8i9b2HT4J3+nywGIBmeMwEbTHJXbnVT/9BdhGb7lC/Duv4SdUARB4wrpy3B
bau3w4/UQEbwVC+KCRkx+lqEEW0o3rthxQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHkfdmkj09YjC/sqSvCa/vGhqvzmMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfX8wDQYJKoZIhvcNAQELBQADggEBAAHQw/2ljIP/B22apktvsU6V44H/WOb+
xI/qhMMqgbp5k+nP6r9dS2MvNCLSY6Q/UdNtuXyp3Z78yKSNGZRFhHyhvD0Mzi0g
yYc8Zcr0Dc7qIMJ3JFfGwCR4dOHWe9ncouHqaa29Kc+sGqLsiUM4/NUUumg7+n53
aE8DU8MVkGfTjKLVTXTRusqPwer9X7gpODOiO/gAyMF9cwb0a8HlMmcgCCV6idzQ
Q65AX90ZohlEGy5t3CBkPaj03n35I2LWKP3iVaDYd2E1vOALvOahyZaDn7HH3S8T
rKMUun1aAKxEOzB6WRQXzjBJWPMmEr1esj0sbX1D+xqF+Jz9TuFnru8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org