Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3232203d3e20323633333231.roa
File:                     3136382e39302e32342e302f32322d3232203d3e20323633333231.roa (raw, json)
Hash identifier:          AgNeMgCIFB2qEp2zWEMGeDULbKshQq1hmA15eP33YgE=
Subject key identifier:   6C:5E:5A:13:C1:F0:FB:1E:25:D0:47:3B:12:15:0C:64:E4:D9:6E:2A
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       14751A247ED5BCA22DBA3146D4B61AFB1AF57EFA
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3232203d3e20323633333231.roa
Signing time:             Thu 20 Jul 2023 12:43:18 +0000
ROA not before:           Thu 20 Jul 2023 12:38:18 +0000
ROA not after:            Thu 18 Jul 2024 12:43:18 +0000
asID:                     263321
IP address blocks:        168.90.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:75:1a:24:7e:d5:bc:a2:2d:ba:31:46:d4:b6:1a:fb:1a:f5:7e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Jul 20 12:38:18 2023 GMT
            Not After : Jul 18 12:43:18 2024 GMT
        Subject: CN=6C5E5A13C1F0FB1E25D0473B12150C64E4D96E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:55:b7:07:75:19:37:3e:c5:a8:bf:0a:c9:
                    5e:c7:72:17:b6:58:52:f3:5b:1a:5a:fd:41:1d:c6:
                    c2:cc:b6:b0:1c:0f:66:d2:11:17:e1:f0:94:e6:a9:
                    83:f1:f3:1f:be:e6:70:45:7c:52:20:54:eb:a5:3e:
                    92:75:54:aa:14:36:1e:6e:6f:11:fc:01:cf:d7:23:
                    10:cf:a1:18:3f:28:04:24:61:09:64:5e:ad:a0:7f:
                    c4:f1:b0:2f:85:8c:a9:12:88:9f:d1:70:44:9f:c0:
                    bf:3d:14:cd:78:1d:02:07:b8:25:f8:9d:8c:02:5a:
                    d0:38:48:ea:98:1d:ce:7c:42:7d:93:4d:ee:4c:0f:
                    7a:ef:d5:df:47:e0:6d:ce:62:2d:b5:01:6a:ea:25:
                    f6:13:fe:8d:48:c0:43:f3:40:a6:7d:4b:1b:61:02:
                    c3:be:89:aa:c0:15:9c:ad:32:ef:6f:27:2a:f8:c0:
                    38:b5:c8:b6:6f:98:72:cd:23:fa:a7:77:c7:28:dc:
                    4b:44:63:2c:6a:33:31:80:f3:1a:6e:07:f9:f5:b0:
                    fd:b2:d2:10:67:ea:de:e2:dc:21:59:9b:7a:5c:ad:
                    41:2b:34:73:7e:0f:4f:b8:34:c2:0b:2e:e2:00:b7:
                    21:27:be:28:d3:9b:7c:61:79:ea:75:39:ed:4e:5c:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:5A:13:C1:F0:FB:1E:25:D0:47:3B:12:15:0C:64:E4:D9:6E:2A
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3232203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:d3:d1:47:8e:50:c8:36:28:67:0f:31:f7:9f:bc:7a:aa:
         60:81:1b:f2:4e:f6:28:90:90:36:dc:8c:6b:d1:6d:60:3f:0f:
         84:91:06:eb:15:b4:61:f0:f2:de:76:f6:8f:70:03:7b:ee:9f:
         99:0a:94:15:77:a1:1e:f0:eb:fd:43:e4:6e:dc:f4:ea:71:52:
         bb:5e:2a:ca:1f:36:37:3c:1b:7b:9c:47:0d:ca:8f:c2:86:63:
         b8:22:78:48:b1:88:4d:06:e1:fe:26:c5:2d:5d:d1:49:f0:c0:
         13:a6:28:e1:a2:8d:d2:e3:3a:12:4b:60:8b:c8:d1:30:e9:9d:
         9f:ce:53:9e:b2:8d:d2:48:b7:b3:4f:3e:c2:09:e1:99:10:bf:
         e2:1f:28:87:9c:40:c6:2a:00:6f:34:07:75:8f:2f:41:2a:e6:
         a2:76:8f:a4:e2:25:32:ce:25:7e:c0:c0:fd:e0:47:24:3f:6d:
         d4:bc:63:00:6d:29:30:45:31:93:6a:f2:d2:0c:65:d2:34:90:
         87:54:cc:30:e7:20:92:52:a4:8d:ea:3a:87:a8:e8:30:e9:72:
         72:ae:21:4b:0d:8b:de:c4:20:96:bf:2b:fe:8b:65:cb:37:53:
         21:dc:dd:85:38:e4:7a:fd:30:44:17:b2:f7:cc:71:5b:37:c1:
         6a:b0:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org