Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          AYeFb1aUeavy8uNkiVW6OWUSKEskfePxMzcdh5J5EcE=
Subject key identifier:   5B:91:D4:64:AB:5E:86:53:1E:B4:72:C7:81:26:6A:73:C6:08:6A:34
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       20CC61D4696045BB30520A4E2D640A0E347EFB47
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:24:23 +0000
ROA not before:           Wed 02 Aug 2023 21:19:23 +0000
ROA not after:            Fri 02 Aug 2024 21:24:23 +0000
asID:                     262494
IP address blocks:        179.191.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cc:61:d4:69:60:45:bb:30:52:0a:4e:2d:64:0a:0e:34:7e:fb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:19:23 2023 GMT
            Not After : Aug  2 21:24:23 2024 GMT
        Subject: CN=3082010A0282010100CA530976CC18A50CE67B59BF8CA41C37C4393E1177178AEFB65C6897F97EE587E016D6B6964FF4A297E0B11A03FEF460209C8D65EA4356831D563B94CEBA5E33492024FFE1BBE2F9D7F3EC8B25D6D921DE2E9CE599B1AB14EF263C9A0739A5488F62B5671A685ED3AFD133DE99FD0703DFC9B7277133B9BFF2A5C3838637DF6AD48603ABEBDC2F4DDFA91CDDFFB342F9FEBD3CFD61E740CF380C9AEF8A7FCB14B4BC5CDB5DA0D9B6EEB47AB987301661E4AE90A08E86274C6D77F9CF0F2AF516FD2B6690436D4FE71ECAD1E559FC107368A3B8DBEA66A7D3908BFBD6084EE135C2D2B481D9DADBB50C9B5FDF54AE991DD3E22E8101D75306C39F8FCF4C7305AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:09:76:cc:18:a5:0c:e6:7b:59:bf:8c:a4:
                    1c:37:c4:39:3e:11:77:17:8a:ef:b6:5c:68:97:f9:
                    7e:e5:87:e0:16:d6:b6:96:4f:f4:a2:97:e0:b1:1a:
                    03:fe:f4:60:20:9c:8d:65:ea:43:56:83:1d:56:3b:
                    94:ce:ba:5e:33:49:20:24:ff:e1:bb:e2:f9:d7:f3:
                    ec:8b:25:d6:d9:21:de:2e:9c:e5:99:b1:ab:14:ef:
                    26:3c:9a:07:39:a5:48:8f:62:b5:67:1a:68:5e:d3:
                    af:d1:33:de:99:fd:07:03:df:c9:b7:27:71:33:b9:
                    bf:f2:a5:c3:83:86:37:df:6a:d4:86:03:ab:eb:dc:
                    2f:4d:df:a9:1c:dd:ff:b3:42:f9:fe:bd:3c:fd:61:
                    e7:40:cf:38:0c:9a:ef:8a:7f:cb:14:b4:bc:5c:db:
                    5d:a0:d9:b6:ee:b4:7a:b9:87:30:16:61:e4:ae:90:
                    a0:8e:86:27:4c:6d:77:f9:cf:0f:2a:f5:16:fd:2b:
                    66:90:43:6d:4f:e7:1e:ca:d1:e5:59:fc:10:73:68:
                    a3:b8:db:ea:66:a7:d3:90:8b:fb:d6:08:4e:e1:35:
                    c2:d2:b4:81:d9:da:db:b5:0c:9b:5f:df:54:ae:99:
                    1d:d3:e2:2e:81:01:d7:53:06:c3:9f:8f:cf:4c:73:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:D4:64:AB:5E:86:53:1E:B4:72:C7:81:26:6A:73:C6:08:6A:34
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:a2:a2:a1:f9:08:4a:30:dc:a1:b0:9f:e6:8b:ee:ec:a1:
         eb:65:a7:92:a4:47:79:4b:e4:40:64:2c:79:08:39:1d:6d:26:
         92:ba:7d:ee:8a:5b:ad:ad:b1:83:5d:41:ff:60:bb:d0:49:6f:
         14:27:e9:0c:13:d4:77:dd:07:b9:39:46:11:c6:7e:c8:32:34:
         0a:a4:77:9b:57:38:34:b2:28:0c:ef:b1:14:27:4d:8f:62:01:
         4c:83:2e:49:fd:99:80:ee:8d:39:17:64:06:4c:e4:ae:6d:ea:
         0f:ab:74:ba:de:57:4c:c2:1c:5d:7f:88:10:23:70:94:61:68:
         cd:9c:8e:a2:52:a0:c3:99:91:84:30:8b:14:eb:eb:64:c0:2e:
         1c:02:b0:75:10:b1:9d:1f:c0:19:35:26:83:32:2f:c3:0a:5c:
         b7:78:cc:9b:05:4f:d9:fd:b6:a2:f0:af:0c:65:cf:cc:eb:5d:
         34:49:6f:66:49:fc:9c:95:1b:a7:b7:96:0c:b2:dc:71:26:7f:
         84:69:b0:fe:7c:24:6d:33:c8:b7:84:24:38:dd:24:e9:63:0a:
         db:e1:e6:fa:91:bf:09:74:74:10:95:8c:18:54:de:36:55:93:
         78:1f:db:60:46:73:48:72:b4:b7:32:2c:45:6f:c1:f3:09:22:
         0d:6e:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org