Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          Hb8k59QIoXTdt1KC1hvAqfrC5sBHDTgZsOj4i24EZFg=
Subject key identifier:   BA:F7:D1:82:9F:40:1D:33:A4:BC:04:9F:C0:9B:1B:1F:64:45:4A:92
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       6F930B2758EB4711109CEC4DF82566581024AE52
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:23:38 +0000
ROA not before:           Wed 02 Aug 2023 21:18:38 +0000
ROA not after:            Fri 02 Aug 2024 21:23:38 +0000
asID:                     262494
IP address blocks:        179.191.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:93:0b:27:58:eb:47:11:10:9c:ec:4d:f8:25:66:58:10:24:ae:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:18:38 2023 GMT
            Not After : Aug  2 21:23:38 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:79:25:de:16:e2:59:62:92:ab:ae:ff:d6:
                    aa:57:4b:1e:ce:c1:b7:90:7c:99:1d:0f:94:3f:a9:
                    74:89:3c:45:9a:45:84:35:22:6e:58:3b:90:38:71:
                    1c:59:7a:29:c8:bf:ac:ed:3c:58:26:f5:b3:37:2f:
                    bc:07:70:30:f5:3f:0e:d9:b4:0a:0a:c6:b6:b0:5b:
                    62:b8:be:7d:0c:f7:12:40:a2:8d:d4:10:87:d0:94:
                    a4:fd:bd:4d:0a:22:54:2f:b7:60:11:25:bd:6e:4b:
                    21:66:f0:76:61:73:dc:e5:7a:18:cb:61:b1:55:3a:
                    50:87:6c:2a:f8:0c:0d:ab:34:ad:d8:5f:31:69:27:
                    56:8a:9f:ac:f3:55:5a:2b:a1:e4:32:27:8e:78:e7:
                    d2:23:ae:cd:e0:78:e0:21:f0:30:2b:86:2c:87:32:
                    6b:8c:7e:61:4d:4e:aa:c3:5b:69:1e:84:34:e0:39:
                    92:db:4c:1b:5e:eb:cc:77:4d:11:46:94:a0:93:c5:
                    87:e2:d3:07:8c:e4:be:00:52:78:3c:70:ed:ec:9d:
                    02:95:22:22:4f:46:3f:af:80:f7:f6:fb:81:7f:bb:
                    5a:6e:1a:b1:72:0f:4a:8b:62:4b:03:e2:b7:75:98:
                    48:92:d4:5c:32:1c:27:d6:e5:08:05:c3:96:0b:58:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:D1:82:9F:40:1D:33:A4:BC:04:9F:C0:9B:1B:1F:64:45:4A:92
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:80:c1:99:c3:4e:f4:c7:c9:8d:8f:7a:f9:b6:2a:5f:9d:
         b1:50:9d:c8:f9:38:e8:e9:ed:5a:c4:4c:3d:86:42:01:94:30:
         87:9a:c1:a1:68:28:51:df:ac:4d:87:52:12:54:42:09:15:88:
         20:cc:5b:4b:f0:05:79:a5:e0:85:93:da:88:dc:0e:6f:b4:fc:
         78:0d:12:33:42:67:12:62:0c:b6:c5:b8:48:f5:7b:85:17:0f:
         e7:c3:e3:7d:69:44:74:47:ec:e5:77:20:79:90:0e:43:51:4e:
         08:77:a5:05:c6:92:a8:4e:a6:37:2a:f0:9b:db:69:97:c9:4e:
         f5:45:86:ed:60:05:4e:1c:be:07:8d:d6:db:62:b8:5f:3f:47:
         a8:20:b0:cc:4c:df:d7:d8:bc:6f:f0:15:ef:80:7a:fb:72:21:
         f0:25:e2:26:8a:22:49:3a:c5:d5:cc:d1:97:0b:88:0b:c7:4c:
         83:20:53:42:b1:f7:d2:18:2b:54:6a:c2:34:86:ec:0b:8d:53:
         f4:02:8a:b5:a0:e2:d0:26:33:9a:8d:2d:1f:5c:49:c2:58:0f:
         94:b1:9b:b7:4c:ce:37:c9:a7:05:9e:32:87:41:ab:02:87:60:
         64:a3:61:28:85:43:af:c3:17:3a:3f:dd:1a:d6:30:fa:4d:60:
         12:be:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org