Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e332e302f32342d3234203d3e203631363738.roa
File:                     3136382e39302e332e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          MYFGQsUtTa8PxCIWL50Zu0zKjDrGGAofiSrGjk3nw1k=
Subject key identifier:   D4:20:F0:F2:7D:9C:69:0C:03:D4:11:EA:A6:96:E8:DA:8D:D4:DC:C5
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       0E0BFA4D18F3BD6BD3587AC5AFFE9F62B1C47FE5
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e332e302f32342d3234203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:45:36 +0000
ROA not before:           Tue 24 Oct 2023 12:40:36 +0000
ROA not after:            Tue 22 Oct 2024 12:45:36 +0000
asID:                     61678
IP address blocks:        168.90.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0b:fa:4d:18:f3:bd:6b:d3:58:7a:c5:af:fe:9f:62:b1:c4:7f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:40:36 2023 GMT
            Not After : Oct 22 12:45:36 2024 GMT
        Subject: CN=D420F0F27D9C690C03D411EAA696E8DA8DD4DCC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:63:34:06:26:95:61:63:c2:d5:3d:e3:46:
                    cd:36:e7:a0:6f:9e:a8:8f:2d:02:ca:ba:35:12:71:
                    d8:cf:7f:e1:52:3a:2a:ee:8c:67:de:dc:69:d7:32:
                    bd:ee:85:99:56:a9:f6:a7:85:ff:96:4e:7e:e0:2e:
                    b4:ab:5b:50:1a:3f:5c:a4:4e:be:81:22:f7:b4:cb:
                    97:dd:b5:de:c7:7d:e2:90:a4:31:af:a3:b2:49:f7:
                    f3:4d:62:a1:ed:4f:1e:7e:72:77:ea:12:4c:5a:2e:
                    a4:0a:35:ad:03:3a:7e:f4:0c:b6:b7:56:0a:9d:a5:
                    cf:2a:2b:6c:f8:af:e6:3c:ba:e5:5d:9d:6e:b2:c7:
                    b4:cc:7a:10:94:37:8e:4e:4f:eb:1c:f8:19:eb:72:
                    09:cc:94:f6:d1:83:58:4c:01:eb:c1:f8:8d:4d:ca:
                    6f:c2:ca:9a:a3:55:25:c9:db:93:9c:ce:68:9e:e7:
                    8e:6b:74:ac:2c:d3:5a:e6:4c:0c:45:f2:3e:95:eb:
                    76:eb:58:59:ac:aa:87:d0:00:45:8a:2e:8c:17:fe:
                    fd:60:69:b9:e5:d7:79:bd:e1:f2:7e:ca:31:b1:4a:
                    f8:67:73:c2:80:2c:cc:a1:c6:bd:8b:37:66:77:89:
                    15:7a:35:c2:c7:10:89:2b:c6:5f:10:73:e7:7a:b4:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:20:F0:F2:7D:9C:69:0C:03:D4:11:EA:A6:96:E8:DA:8D:D4:DC:C5
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e332e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:33:4b:e0:50:15:2b:94:c2:4e:ee:ac:3a:43:cc:30:48:
         ee:78:58:d7:58:42:37:b1:6c:69:23:f9:44:ca:a1:7a:a9:db:
         a5:46:ba:18:fd:0a:47:93:a5:d6:d3:66:63:e4:83:ba:94:09:
         f3:05:be:5f:97:6c:83:08:a4:4e:8c:27:4e:c0:d6:eb:9c:b8:
         52:ad:25:42:15:70:58:32:7f:ab:19:67:6c:29:cb:10:9c:cb:
         b7:d6:21:b5:b1:fd:23:40:36:fa:93:a5:f9:05:7f:8a:d5:5a:
         ee:a6:fa:d9:44:cb:a5:70:ee:6e:d7:56:1b:6a:2b:b5:20:b3:
         5e:5c:cf:75:31:2e:36:b1:05:53:4d:75:59:92:22:55:d6:a4:
         a8:7e:2c:52:5d:d2:97:37:3a:56:d9:8c:12:e1:25:8b:db:d1:
         4b:3c:58:7d:89:ad:65:9d:30:38:39:7d:94:6c:c3:a3:0f:1b:
         9f:7f:5a:4b:5a:74:61:bd:39:46:01:d9:d9:f4:a9:5f:e7:21:
         70:f9:4c:5f:2e:af:28:4d:f8:ca:17:b8:12:f6:43:4c:70:35:
         5f:f7:31:f9:4c:f4:a1:b2:dc:3a:e4:d8:26:c4:9d:7b:29:c0:
         75:48:b4:35:6b:bc:1c:2c:2a:cf:c5:90:5e:14:8f:22:f4:96:
         2f:aa:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org