Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          131XUH/o+f7QQXqfm2exqfqbvAllXyIS6UAZq6YeE6I=
Subject key identifier:   6E:20:30:FA:C2:D9:F7:7D:1F:35:90:19:DF:CB:B4:31:CC:24:55:B3
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       3628E4AFE26B7BF1CF80F97F152EC3FE40BF089E
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa
Signing time:             Sat 05 Aug 2023 13:00:12 +0000
ROA not before:           Sat 05 Aug 2023 12:55:12 +0000
ROA not after:            Mon 05 Aug 2024 13:00:12 +0000
asID:                     262494
IP address blocks:        179.191.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:28:e4:af:e2:6b:7b:f1:cf:80:f9:7f:15:2e:c3:fe:40:bf:08:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  5 12:55:12 2023 GMT
            Not After : Aug  5 13:00:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:df:aa:cd:75:4a:5e:8f:0f:13:ab:d0:89:
                    1f:85:2a:f7:4d:29:d1:ea:c7:ec:8c:b2:1f:79:8a:
                    21:11:bf:da:21:89:c6:94:fd:fd:d7:fd:e2:64:00:
                    d3:df:ff:94:d1:17:c4:35:51:03:fb:34:e5:5b:a0:
                    d7:63:82:17:cc:83:04:67:8e:10:3f:02:5a:54:7b:
                    ce:ee:1e:2d:ff:90:ca:72:f8:74:d2:b4:e2:a6:d3:
                    b8:10:eb:5e:48:69:a0:a8:8b:49:cb:37:07:ce:a7:
                    0f:f7:00:4a:a3:f0:1e:f8:ca:16:b2:21:0b:96:0f:
                    e8:c9:77:8f:2c:d5:2b:8d:f7:c2:13:64:a4:5b:d7:
                    19:a9:fc:90:c0:7e:24:95:6b:64:0d:2d:49:0e:7e:
                    f2:d1:e7:89:79:35:4c:d3:74:86:30:25:60:99:db:
                    af:9f:3a:3a:88:3b:c8:01:7a:d8:68:d6:6c:0c:27:
                    16:62:80:52:b8:63:eb:5d:7f:74:00:23:4a:55:63:
                    95:2e:24:d3:e8:ed:65:73:3d:9e:78:90:1e:56:43:
                    f3:b2:a1:2c:0a:b7:68:8a:73:3c:6a:19:ca:e2:71:
                    6d:2f:05:33:fb:9e:30:62:f2:46:21:ce:3f:88:a9:
                    45:ee:ff:c0:8f:f7:dc:c4:5c:e7:a4:89:3f:68:2f:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:20:30:FA:C2:D9:F7:7D:1F:35:90:19:DF:CB:B4:31:CC:24:55:B3
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:65:bc:f3:57:7e:d1:88:8f:5a:57:2c:b6:84:15:3d:80:d3:
         58:8e:88:7e:4d:78:ad:28:81:9f:b8:7e:99:bc:41:d0:d1:af:
         57:39:9d:02:76:ae:33:74:67:1c:dc:74:97:60:38:01:ad:30:
         a4:95:40:fb:5d:9b:53:6e:59:2e:79:b4:38:7e:96:88:e1:cc:
         bd:d5:51:da:a4:f4:d5:c8:ae:e5:a6:70:da:7d:84:d0:b1:a4:
         3d:79:3d:9d:b4:5c:35:23:01:3b:fc:93:cf:d7:81:4d:ea:d9:
         ad:68:d0:54:ca:47:90:80:69:76:07:9d:74:af:dc:15:df:f5:
         6a:7a:a8:7e:84:f0:c5:27:2d:46:22:7e:87:e8:92:9c:27:85:
         6d:8f:49:48:ce:31:6e:da:9d:49:13:36:41:88:3a:f0:c2:63:
         05:c5:68:72:2f:8a:e0:cd:4d:5e:a4:2f:60:40:08:b3:5f:a8:
         20:a2:2c:1b:29:88:6f:83:b0:cc:c7:15:2d:e6:0b:3d:89:de:
         fa:66:29:8c:f2:20:98:ef:6b:75:6b:86:0c:db:38:3b:f6:49:
         0f:44:03:99:78:23:6a:ff:4f:ab:1a:0d:15:0b:6a:1d:5e:dd:
         ba:48:f7:3a:c9:f8:4b:08:0e:86:4b:23:c8:ea:15:3b:5d:2f:
         90:5c:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org