Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          Br4912ENQhzsNfurO/UZibl4rktu9yX7swycc3guA4E=
Subject key identifier:   77:63:65:4E:A2:09:A4:B3:30:1A:44:BB:3C:60:CA:0E:6E:AE:32:08
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       77B6F32934E3D8C06794398C322AD6299AAE7E0A
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:27:02 +0000
ROA not before:           Wed 02 Aug 2023 21:22:02 +0000
ROA not after:            Fri 02 Aug 2024 21:27:02 +0000
asID:                     262494
IP address blocks:        179.191.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b6:f3:29:34:e3:d8:c0:67:94:39:8c:32:2a:d6:29:9a:ae:7e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:22:02 2023 GMT
            Not After : Aug  2 21:27:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:a6:bc:3b:7f:57:07:e4:02:06:62:e6:c9:
                    1a:7d:bc:e0:3f:50:c2:5b:f1:b3:17:1a:cf:97:3c:
                    e9:e4:88:5d:16:b0:c2:41:b1:f7:50:2e:19:e3:4d:
                    03:27:0e:5a:cf:14:b5:f6:ec:75:28:69:2a:e1:ec:
                    38:72:6d:0f:9a:06:5d:89:f7:ca:fa:17:14:fb:31:
                    2c:5c:79:2e:7e:cb:16:0f:1d:e4:2c:7f:dd:5e:59:
                    e9:70:4a:0a:24:1c:15:aa:f1:3b:88:a5:f8:22:6d:
                    cd:84:d9:71:39:62:c4:e4:ce:db:c8:c8:bf:90:46:
                    4a:d0:9c:f2:9c:64:d3:81:3a:60:9a:bb:8c:0f:db:
                    6d:cc:50:7a:99:04:93:b9:6f:a0:fe:3d:f5:e3:98:
                    4f:33:9a:32:f0:fe:9f:4e:13:36:5f:ee:43:12:10:
                    69:46:e7:72:31:94:a9:af:6c:cb:29:1d:6d:28:4f:
                    1a:6c:fc:f6:a9:f8:65:0c:aa:9b:af:34:8d:1a:a3:
                    15:7c:85:62:6c:83:1c:ef:64:11:e6:c4:d5:0e:9c:
                    45:20:42:d9:91:d8:8e:f3:81:d4:b1:f3:f4:21:56:
                    b4:43:32:ec:de:a9:36:f0:c6:4c:6c:9d:23:0a:cc:
                    5e:ca:86:ff:63:36:c8:d0:59:36:c5:b9:44:b7:2a:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:65:4E:A2:09:A4:B3:30:1A:44:BB:3C:60:CA:0E:6E:AE:32:08
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:65:c2:96:97:af:00:b7:a4:9b:10:4a:ff:11:5b:0b:de:48:
         0c:8b:13:13:62:a3:e8:64:58:48:65:ca:7d:dc:d3:12:5b:e2:
         d7:91:5b:85:8b:24:b4:37:55:9e:db:ef:19:7c:3c:29:49:0d:
         50:2d:26:cc:b3:7b:6a:04:c0:9d:3b:cd:75:90:83:80:8c:3f:
         f0:3f:aa:ff:56:24:f6:ab:d2:1d:bf:0a:f4:a4:c2:ed:ba:df:
         73:03:49:ba:11:e8:56:8a:54:f1:a6:52:f9:bd:5f:28:84:87:
         00:d0:72:18:cb:aa:66:2d:b9:8d:50:15:e7:46:f1:d8:36:82:
         41:3f:00:01:45:f6:5b:7e:b5:1a:21:91:f5:7b:99:13:db:0c:
         94:3a:1b:37:e7:85:e9:06:cc:8f:17:55:fe:5f:0b:0d:4b:1e:
         69:78:d7:f6:b9:2c:ea:28:b2:a5:a8:90:b2:5b:bc:1c:39:47:
         95:67:d9:af:8b:ee:6c:69:10:c4:60:97:a0:aa:e5:83:42:e7:
         eb:f4:ad:f4:02:b7:ac:02:6b:0f:c6:71:d6:e2:84:c1:be:fa:
         99:18:46:af:94:9d:86:43:3e:a7:38:75:ee:c5:20:aa:fb:a2:
         32:95:33:f3:f7:9d:33:94:fb:86:fd:68:e0:5b:c9:e1:8e:96:
         26:c7:f3:7f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUd7bzKTTj2MBnlDmMMirWKZqufgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA4MDIyMTIyMDJaFw0yNDA4MDIyMTI3MDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU2OUE2QkMzQjdGNTcwN0U0
MDIwNjYyRTZDOTFBN0RCQ0UwM0Y1MEMyNUJGMUIzMTcxQUNGOTczQ0U5RTQ4ODVE
MTZCMEMyNDFCMUY3NTAyRTE5RTM0RDAzMjcwRTVBQ0YxNEI1RjZFQzc1Mjg2OTJB
RTFFQzM4NzI2RDBGOUEwNjVEODlGN0NBRkExNzE0RkIzMTJDNUM3OTJFN0VDQjE2
MEYxREU0MkM3RkRENUU1OUU5NzA0QTBBMjQxQzE1QUFGMTNCODhBNUY4MjI2RENE
ODREOTcxMzk2MkM0RTRDRURCQzhDOEJGOTA0NjRBRDA5Q0YyOUM2NEQzODEzQTYw
OUFCQjhDMEZEQjZEQ0M1MDdBOTkwNDkzQjk2RkEwRkUzREY1RTM5ODRGMzM5QTMy
RjBGRTlGNEUxMzM2NUZFRTQzMTIxMDY5NDZFNzcyMzE5NEE5QUY2Q0NCMjkxRDZE
Mjg0RjFBNkNGQ0Y2QTlGODY1MENBQTlCQUYzNDhEMUFBMzE1N0M4NTYyNkM4MzFD
RUY2NDExRTZDNEQ1MEU5QzQ1MjA0MkQ5OTFEODhFRjM4MUQ0QjFGM0Y0MjE1NkI0
NDMzMkVDREVBOTM2RjBDNjRDNkM5RDIzMEFDQzVFQ0E4NkZGNjMzNkM4RDA1OTM2
QzVCOTQ0QjcyQTg1Q0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvmmmvDt/VwfkAgZi5skafbzgP1DCW/GzFxrPlzzp5IhdFrDCQbH3
UC4Z400DJw5azxS19ux1KGkq4ew4cm0PmgZdiffK+hcU+zEsXHkufssWDx3kLH/d
XlnpcEoKJBwVqvE7iKX4Im3NhNlxOWLE5M7byMi/kEZK0JzynGTTgTpgmruMD9tt
zFB6mQSTuW+g/j3145hPM5oy8P6fThM2X+5DEhBpRudyMZSpr2zLKR1tKE8abPz2
qfhlDKqbrzSNGqMVfIVibIMc72QR5sTVDpxFIELZkdiO84HUsfP0IVa0QzLs3qk2
8MZMbJ0jCsxeyob/YzbI0Fk2xblEtyqFzQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHdjZU6iCaSzMBpEuzxgyg5urjIIMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzczOTJlMzEzOTMxMmUzNTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s785MA0GCSqGSIb3DQEBCwUAA4IBAQAtZcKWl68At6SbEEr/EVsL3kgMixMTYqPo
ZFhIZcp93NMSW+LXkVuFiyS0N1We2+8ZfDwpSQ1QLSbMs3tqBMCdO811kIOAjD/w
P6r/ViT2q9Idvwr0pMLtut9zA0m6EehWilTxplL5vV8ohIcA0HIYy6pmLbmNUBXn
RvHYNoJBPwABRfZbfrUaIZH1e5kT2wyUOhs354XpBsyPF1X+XwsNSx5peNf2uSzq
KLKlqJCyW7wcOUeVZ9mvi+5saRDEYJegquWDQufr9K30AresAmsPxnHW4oTBvvqZ
GEavlJ2GQz6nOHXuxSCq+6IylTPz950zlPuG/WjgW8nhjpYmx/N/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org