Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e312e302f32342d3234203d3e203631363738.roa
File:                     3136382e39302e312e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          1kyEukXnKwp4K40PRQklL0KrD5wG7Hm/LMtMqMNMIxg=
Subject key identifier:   57:56:41:74:C3:49:7C:12:DF:5C:43:B3:3C:20:E1:57:27:23:63:01
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       450BE68714963DF96449DF381F7874A3EA8AA515
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e312e302f32342d3234203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:45:24 +0000
ROA not before:           Tue 24 Oct 2023 12:40:24 +0000
ROA not after:            Tue 22 Oct 2024 12:45:24 +0000
asID:                     61678
IP address blocks:        168.90.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0b:e6:87:14:96:3d:f9:64:49:df:38:1f:78:74:a3:ea:8a:a5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:40:24 2023 GMT
            Not After : Oct 22 12:45:24 2024 GMT
        Subject: CN=57564174C3497C12DF5C43B33C20E15727236301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:46:16:ef:41:a0:0f:ae:68:bc:1b:f2:cb:
                    99:80:be:5a:49:bb:ad:77:89:0f:4f:30:fc:79:16:
                    24:ca:0e:4e:5e:4c:3c:50:dc:dc:43:5b:1b:e9:a0:
                    88:82:07:05:4e:0d:f8:a7:f5:86:7b:cf:aa:12:f3:
                    88:f2:01:d2:f9:9d:9e:5f:eb:0c:b4:05:06:e2:88:
                    fa:b0:6e:31:20:f0:c6:37:01:b0:53:70:c6:10:12:
                    05:6a:7c:9c:6a:9d:df:e7:f1:3f:e7:7e:6a:e5:6c:
                    55:d7:a2:27:63:1e:d9:9b:72:51:a0:d7:32:36:e9:
                    91:73:76:dc:c5:a0:54:46:10:db:55:9e:05:ec:d8:
                    a1:9a:b9:e1:18:fe:32:6b:04:9b:9c:18:6e:c6:67:
                    6d:14:bf:14:9e:91:86:f3:6c:f3:24:07:84:5a:b6:
                    e7:94:a6:c3:4b:31:e9:31:c8:e8:b4:ca:7b:16:ab:
                    32:f4:21:73:5d:d7:7f:cc:58:a6:5c:c8:80:83:a5:
                    11:15:4b:80:ad:1d:f9:e5:99:d1:33:81:3d:8c:51:
                    36:1e:40:ec:3c:43:3e:48:06:eb:99:7f:30:7c:c9:
                    8a:47:e8:79:c8:96:20:40:a6:5d:f8:38:e1:df:a4:
                    8e:92:73:ba:07:a0:51:cd:fc:39:05:0f:d5:95:50:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:41:74:C3:49:7C:12:DF:5C:43:B3:3C:20:E1:57:27:23:63:01
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e312e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:86:75:af:00:66:2d:fc:a0:a6:27:1a:bb:b8:24:bd:23:c3:
         ca:97:60:b1:1b:bd:02:2f:cd:6a:e0:57:67:4e:77:78:41:d4:
         5b:12:5d:bf:e3:9d:3e:72:c3:5a:d2:00:da:39:b2:f0:b4:87:
         f0:51:69:3d:74:d2:0d:89:6e:42:27:dd:ea:63:ef:af:9a:8f:
         55:74:a2:c4:cc:0d:d2:32:12:f6:66:d2:bd:5a:c1:ee:c7:2a:
         5b:ba:52:e6:f8:4c:68:a0:cd:93:72:92:c9:c2:40:9b:aa:80:
         10:76:85:88:b4:3b:5b:cf:e8:b8:8e:f9:10:35:6f:6f:83:04:
         af:87:92:f1:6b:1f:8d:7a:18:a5:32:f9:f5:b6:4b:45:50:a4:
         3a:b3:44:24:60:3f:54:4e:cd:18:6b:50:01:0b:7a:b3:c3:df:
         03:87:01:dd:3a:d1:dc:b9:b0:2d:95:48:71:8b:8f:d6:01:a3:
         10:b1:52:d0:2e:f7:36:cc:08:a6:a0:e2:c7:f5:54:3b:a3:32:
         19:7c:49:b2:a4:13:8b:62:4e:ec:a6:fd:5d:f9:c7:37:e7:b7:
         b8:2a:ad:5e:21:dc:55:4e:78:82:58:38:48:a9:bf:95:33:8d:
         ed:1d:f8:f9:00:e1:ce:0f:2a:43:fe:79:0c:7f:6b:d0:00:fa:
         50:9e:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org