Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa (raw, json)
Hash identifier:          Ft3qd+exG5skRXMKMAt+L6FmN1E+SdG+fwJdKSiYx78=
Subject key identifier:   57:E1:F9:A9:13:0F:3F:E6:F5:AD:DB:FB:4E:57:F6:E6:73:D5:AD:AA
Certificate issuer:       /CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
Certificate serial:       60E49C80ECFE5E7086B219FA50229F5F28924571
Authority key identifier: 3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa
Signing time:             Sat 26 Nov 2022 13:05:34 +0000
ROA not before:           Sat 26 Nov 2022 13:00:34 +0000
ROA not after:            Sat 25 Nov 2023 13:05:34 +0000
asID:                     265290
IP address blocks:        168.90.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e4:9c:80:ec:fe:5e:70:86:b2:19:fa:50:22:9f:5f:28:92:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
        Validity
            Not Before: Nov 26 13:00:34 2022 GMT
            Not After : Nov 25 13:05:34 2023 GMT
        Subject: CN=57E1F9A9130F3FE6F5ADDBFB4E57F6E673D5ADAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:a8:c6:aa:47:2e:03:57:8d:7c:21:2b:0a:
                    cd:0a:9b:64:3b:6a:ad:f0:18:17:bb:32:fa:26:87:
                    88:b0:67:34:a9:b1:29:70:07:d1:17:ce:74:72:83:
                    e2:47:83:77:c4:d8:eb:12:66:9d:1a:ee:f9:b5:0d:
                    5d:d0:ad:1d:a5:b5:c2:0a:79:f8:2b:f8:81:0f:32:
                    f8:46:cf:bf:26:64:11:26:b5:5c:3e:8a:de:45:11:
                    f6:cc:03:f4:94:cb:f3:cc:ba:a9:50:1f:ad:53:87:
                    f4:97:26:bd:ac:6b:cf:0b:aa:2f:01:67:7b:2d:ab:
                    2b:18:36:50:26:af:a9:f6:1d:82:7f:e1:ee:fa:dc:
                    70:fd:a1:50:a0:54:20:dc:40:fe:fb:56:b6:44:9c:
                    e7:aa:97:de:ce:8f:2f:cf:cc:b9:98:77:bb:b9:5f:
                    6b:f7:ae:e8:dc:58:f3:08:36:49:2f:e7:7b:e5:2d:
                    01:09:64:95:00:a5:03:80:41:68:76:99:dd:27:c0:
                    5f:7a:76:e2:4f:c9:40:93:d6:f5:0d:05:8b:d0:85:
                    59:b8:04:8a:39:01:3b:fe:31:9d:d3:e9:80:13:94:
                    05:d9:21:ea:43:b1:47:6c:e5:3a:9c:5a:da:59:fb:
                    07:9e:b1:08:81:26:f7:84:4b:18:ec:29:76:3d:1d:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E1:F9:A9:13:0F:3F:E6:F5:AD:DB:FB:4E:57:F6:E6:73:D5:AD:AA
            X509v3 Authority Key Identifier:
                keyid:3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:4f:02:85:56:e0:37:83:05:18:bd:70:d2:19:0b:04:5e:fa:
         48:a5:d1:a9:d7:05:42:bd:9e:89:a9:95:97:30:6c:2f:45:9c:
         4e:e6:bf:f4:83:94:49:94:aa:2b:1c:90:62:70:5a:d1:85:f0:
         1a:b4:fa:56:ae:e4:3f:be:9f:71:b6:28:25:2e:25:42:df:b8:
         5d:56:b8:1f:00:cb:35:67:bf:29:25:30:93:c4:3f:10:6d:4f:
         67:4e:ec:37:e9:9f:18:24:33:e4:1e:74:aa:47:05:df:03:5f:
         c3:0a:2c:58:45:14:73:56:32:0d:2e:e7:ec:8c:4a:e7:2d:21:
         15:57:c2:8d:03:fd:e1:65:0f:b7:6a:be:a9:8e:2a:3c:9a:30:
         59:bc:19:54:98:38:34:bc:41:22:59:da:f6:e2:3c:5a:fd:37:
         3b:f4:ab:f2:e8:9d:d7:29:8a:de:4d:c3:99:e1:ea:64:e9:0f:
         15:43:67:95:d0:45:82:5a:90:90:c7:14:86:ff:d3:84:58:99:
         7f:9c:c7:a8:47:8d:02:5c:45:25:a0:8d:ac:e7:b9:64:74:56:
         f0:19:65:32:94:87:35:a3:2b:09:86:45:62:88:be:f3:34:ff:
         5c:ba:f0:d5:bf:de:84:7a:3c:d0:d0:f4:80:9e:e7:ec:dc:cb:
         64:37:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org