Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35342e302f32332d3233203d3e20323635333134.roa
File:                     3136382e39302e35342e302f32332d3233203d3e20323635333134.roa (raw, json)
Hash identifier:          mB9P+gUdWsvrVF2raKB30Lh4W2/F807GzSO8uaESp+E=
Subject key identifier:   7D:9E:86:55:A2:30:90:C9:9D:46:40:23:A3:EE:B0:1E:E6:76:62:94
Certificate issuer:       /CN=BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77
Certificate serial:       42A237885CC20CDF578B9AF95250B0133492B7E0
Authority key identifier: BF:E6:A5:A9:E8:2E:60:6B:09:47:93:1E:BB:02:C7:0F:D3:ED:1A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35342e302f32332d3233203d3e20323635333134.roa
Signing time:             Mon 10 Oct 2022 15:27:17 +0000
ROA not before:           Mon 10 Oct 2022 15:22:17 +0000
ROA not after:            Mon 09 Oct 2023 15:27:17 +0000
asID:                     265314
IP address blocks:        168.90.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:37:88:5c:c2:0c:df:57:8b:9a:f9:52:50:b0:13:34:92:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77
        Validity
            Not Before: Oct 10 15:22:17 2022 GMT
            Not After : Oct  9 15:27:17 2023 GMT
        Subject: CN=7D9E8655A23090C99D464023A3EEB01EE6766294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:f2:61:a4:0a:4d:42:4a:de:77:e9:d1:24:
                    ba:07:43:68:ef:e2:62:b9:d7:63:65:2f:df:5a:e3:
                    ec:62:ce:74:f5:41:34:5b:21:b1:78:74:01:ea:1e:
                    7d:dc:67:b5:da:18:65:5f:3a:a0:fa:7a:73:f1:d0:
                    ad:a7:0a:b8:fc:0e:52:d6:bc:2e:d0:d2:ae:f9:91:
                    5b:8e:71:56:6f:5b:f9:06:b9:a2:32:3d:83:39:b0:
                    1a:c7:43:bd:99:c9:e1:4c:39:73:b3:f3:af:f8:9e:
                    86:2b:ce:c8:94:61:a3:5d:e2:56:26:cd:fa:83:e6:
                    f8:d0:94:6e:e5:b0:65:d3:b3:8f:9b:22:e1:3d:5c:
                    2d:f4:d4:50:e6:f8:e1:d5:40:38:0a:d0:6a:03:2b:
                    df:e3:df:e4:ec:ca:67:6a:48:71:1e:60:57:23:8f:
                    9f:6b:bc:45:27:fb:6c:4d:95:1a:42:48:96:d3:7f:
                    57:1f:62:c2:ab:50:60:94:f5:ff:1a:74:2b:7e:e8:
                    ff:99:e0:ab:ca:7d:9e:be:41:47:81:b2:15:83:dd:
                    14:70:bf:7e:b0:c4:98:7e:3d:46:52:50:ef:a5:e0:
                    d3:ed:93:56:29:7b:63:ee:17:e7:07:19:54:05:23:
                    af:22:64:8f:a9:fb:5f:ae:1a:6e:05:44:1b:64:32:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:86:55:A2:30:90:C9:9D:46:40:23:A3:EE:B0:1E:E6:76:62:94
            X509v3 Authority Key Identifier:
                keyid:BF:E6:A5:A9:E8:2E:60:6B:09:47:93:1E:BB:02:C7:0F:D3:ED:1A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35342e302f32332d3233203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:d2:c2:86:26:20:a8:b1:e7:e7:bf:45:7f:16:7a:23:11:
         0f:ee:0b:74:56:bc:9a:02:0f:1c:e3:71:39:e8:7c:5b:04:d5:
         32:a3:33:5f:57:b8:73:44:b2:78:46:66:b3:e9:2e:69:44:17:
         b3:ae:af:d1:ac:ca:eb:5c:95:31:6c:5b:2d:b7:08:a0:30:7a:
         86:3a:9f:ed:a9:6e:0f:4c:ea:46:b4:ae:1c:90:42:1c:48:e7:
         ca:63:5a:30:c4:2b:2b:67:da:a4:fc:20:2f:32:eb:ac:83:77:
         57:dc:25:b6:c1:08:63:12:b2:62:95:da:83:72:98:8d:c5:04:
         da:67:25:b0:b6:9c:45:6a:80:cc:57:93:02:93:83:b8:7b:4a:
         4c:4b:17:9e:d7:1b:a8:c1:00:83:a0:4f:43:06:f4:8e:1f:9c:
         0c:a3:00:21:95:94:41:a2:bc:24:e6:06:19:d5:0a:65:e1:93:
         90:86:a7:b2:de:30:be:ff:ac:36:c3:cc:66:e0:86:4b:ee:2f:
         f2:61:da:8b:a5:0c:15:4e:67:30:7a:a8:3d:a2:53:cf:40:9f:
         94:c5:94:df:f9:cd:3e:5d:d2:7d:43:ff:2c:71:bf:1d:27:4e:
         56:f4:61:f3:30:4c:c1:6d:60:b4:c2:ee:53:dd:47:66:8c:f7:
         ed:f7:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:33 2023 by rpki-client on console-ams.rpki-client.org