Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          YmC/mMrwQq/Oybov9ccT0BlmxRa3crEEW64Zt0XliOk=
Subject key identifier:   24:0E:04:36:9D:B4:75:A2:2F:1F:96:DA:37:63:1F:65:78:14:FB:A4
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       01791AB9AA55AFA20FB33702BC7CE738013D48A7
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:24:36 +0000
ROA not before:           Wed 02 Aug 2023 21:19:36 +0000
ROA not after:            Fri 02 Aug 2024 21:24:36 +0000
asID:                     262494
IP address blocks:        179.191.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:1a:b9:aa:55:af:a2:0f:b3:37:02:bc:7c:e7:38:01:3d:48:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:19:36 2023 GMT
            Not After : Aug  2 21:24:36 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:08:ce:f6:ef:d2:5f:3c:04:d2:c7:43:43:
                    65:bd:62:54:99:b7:e5:07:e6:7b:73:d7:8b:4d:b8:
                    67:74:d6:7a:c9:f0:bb:be:4e:01:50:12:51:6f:34:
                    1b:9a:09:5e:c1:b4:d5:be:27:b3:53:41:50:68:97:
                    22:f7:9a:d3:e4:4f:87:83:b7:86:1c:0b:9b:8c:f8:
                    2b:48:2d:19:53:f2:c0:e2:64:b8:df:37:97:aa:46:
                    80:2e:ac:50:a5:5d:f9:a2:94:90:84:3e:ca:33:c2:
                    f1:43:ae:05:c8:43:8f:ba:af:82:ca:18:ea:0c:0e:
                    0a:3a:cf:95:14:a4:b7:6c:c4:31:dd:3d:15:8b:83:
                    09:b4:60:32:19:4c:3e:2a:34:55:bc:b4:f7:b9:10:
                    eb:29:2c:ab:1a:7f:85:55:85:a7:55:bd:30:66:87:
                    91:b3:4e:a6:6c:47:42:69:bd:74:29:0a:79:7f:62:
                    94:6a:f9:f3:ec:fd:ac:3a:be:22:66:8f:27:7c:01:
                    48:8b:f0:07:84:69:3f:24:d5:22:48:3a:5f:2a:91:
                    b0:53:98:67:e7:93:af:82:6b:29:7d:d5:cd:13:4e:
                    2a:c9:a8:01:a3:4f:20:7a:ba:57:13:1a:15:22:fc:
                    a1:22:8d:3c:a2:67:d9:25:34:36:da:70:18:2f:e2:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:04:36:9D:B4:75:A2:2F:1F:96:DA:37:63:1F:65:78:14:FB:A4
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d2:d3:96:5e:43:94:14:b2:66:17:87:f1:25:d4:82:8b:64:
         6c:2e:5f:c5:a0:76:13:75:5b:73:79:39:7e:13:86:ac:49:1b:
         33:55:e5:ea:12:19:35:1f:64:c9:a8:7c:02:fa:65:1b:62:6f:
         02:db:9e:3f:5c:89:0c:bf:44:c8:7b:7a:7c:cb:74:25:ae:8b:
         9c:b6:b7:74:d2:14:54:1b:31:ea:94:cf:75:38:21:eb:3a:67:
         d8:42:e3:c5:32:d1:8a:a2:6f:b7:f6:30:5e:6d:f1:c2:7f:f2:
         46:f4:55:5f:10:7f:43:05:42:d6:f1:39:68:65:d1:f9:a7:e9:
         3c:3b:23:6f:ec:a6:d6:52:a7:f0:37:ad:dc:a3:8b:4f:43:9e:
         84:22:99:0a:42:1b:b4:b5:86:a2:f4:0b:d6:10:ba:4f:9e:0c:
         69:a7:91:fa:aa:ae:cf:a0:fe:21:15:91:78:4c:8c:ca:ea:f2:
         2e:b9:db:71:93:4d:47:20:8e:4b:e8:3e:1e:49:8f:13:49:6a:
         2a:bd:36:7b:05:56:4b:89:fb:54:7c:be:f9:6b:54:b6:a5:16:
         af:c6:da:25:ed:d9:18:10:f9:ec:f6:b5:f6:28:74:84:30:75:
         7e:cd:82:50:bf:14:db:b2:cb:ce:c5:32:1a:09:84:cc:c1:74:
         c8:d1:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org