Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39302e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e39302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          Gz/HAOvUjuOewsPmmFDXpHduN9gsH1GC2tFdn86QSAk=
Subject key identifier:   DC:70:3D:3F:62:7D:1F:9A:14:24:85:69:11:36:2D:23:0F:0B:5F:69
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       6FCFBEFB47479DA6AD77001D37C571D51EEB9AA6
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39302e302f32342d3234203d3e20323632343934.roa
Signing time:             Fri 18 Aug 2023 11:51:26 +0000
ROA not before:           Fri 18 Aug 2023 11:46:26 +0000
ROA not after:            Sun 18 Aug 2024 11:51:26 +0000
asID:                     262494
IP address blocks:        45.226.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cf:be:fb:47:47:9d:a6:ad:77:00:1d:37:c5:71:d5:1e:eb:9a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug 18 11:46:26 2023 GMT
            Not After : Aug 18 11:51:26 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:0c:3a:1a:3d:b1:9a:6d:20:17:f0:e8:83:
                    d2:33:b7:82:bf:1a:c7:ae:69:de:fb:29:6f:97:f1:
                    b2:94:31:a7:fa:04:23:69:dc:ad:15:6f:a6:fd:82:
                    c8:36:85:77:66:6b:8c:4c:0a:97:f0:77:04:99:d2:
                    03:06:8b:73:02:9e:46:1e:df:16:6f:0a:1d:4f:af:
                    16:97:a0:8a:37:39:04:ab:f0:61:2d:b7:2c:d7:ce:
                    ad:f2:47:1f:47:61:fc:14:51:ec:99:09:9b:d9:e3:
                    b0:df:19:a8:d7:ff:82:d0:99:38:b7:3a:fe:2c:bc:
                    35:06:91:3c:d7:8a:79:98:e9:77:e8:36:88:e6:8d:
                    49:6a:32:ab:63:b9:5e:fc:0b:b5:d5:24:c0:7d:48:
                    f8:c0:3e:87:75:f8:06:df:72:fb:6b:cc:1d:0e:54:
                    b4:a4:3c:fd:5a:cf:0b:3a:e8:96:f5:cb:81:9c:bd:
                    eb:49:88:dd:11:8e:bf:b0:c7:8e:ff:36:5f:cf:a9:
                    39:be:3e:2e:82:bd:52:a5:98:c0:d9:5d:95:b0:37:
                    14:4a:4b:ee:ae:06:96:90:c3:b8:94:f6:e4:64:45:
                    0c:fa:fd:ee:25:3b:71:7b:bb:03:e9:8b:c2:3a:7b:
                    fd:8a:c0:3d:a9:17:91:00:9b:3d:63:4b:d9:7a:ee:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:3D:3F:62:7D:1F:9A:14:24:85:69:11:36:2D:23:0F:0B:5F:69
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:89:f4:94:d1:0a:b0:b6:2e:6b:c9:02:db:2a:94:28:5b:46:
         30:fc:85:62:28:f8:85:7e:34:ec:20:2e:fd:8a:01:a3:ab:4c:
         fe:e6:ac:0c:e7:59:71:6f:b0:cb:78:8b:43:c5:a7:27:70:31:
         dd:86:88:43:41:26:cc:3e:33:10:46:1d:86:ce:a2:59:d7:cc:
         95:37:56:14:7b:98:11:7b:8c:ca:36:8a:a1:b2:89:6b:ee:c4:
         34:a7:f3:d1:4e:33:73:30:dc:a3:05:20:f4:14:e7:a7:5b:a9:
         af:b8:72:03:f2:8d:bd:58:0c:60:61:98:ef:84:77:a1:ea:ce:
         05:d3:06:cf:65:b6:42:c6:64:dc:87:02:89:3e:3f:be:dc:61:
         be:58:de:ff:1e:0e:0b:49:fe:44:3e:9a:29:9d:39:d7:f8:0a:
         00:a0:82:4e:d4:4b:7d:7f:7a:de:8b:2b:fc:68:88:37:e1:e1:
         07:df:0e:02:23:ee:54:a9:f7:5f:07:ec:c9:21:4a:90:a4:af:
         f5:a5:c8:ab:54:40:30:63:f0:76:de:78:b1:8d:89:9e:30:82:
         a9:81:1d:99:93:85:93:e5:5a:5e:f7:12:2c:d8:69:f7:1d:c1:
         77:1f:a9:55:97:b5:7b:e2:f1:c4:c5:88:3f:2e:ec:85:f9:f0:
         1f:66:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org