Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3136382e39302e3230342e302f32322d3332203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32322d3332203d3e20323635323930.roa (raw, json)
Hash identifier:          6vySP2A8Kc/nXHI685GoDEXgph3CZsuc6mluPoGOt8Y=
Subject key identifier:   D5:F9:A7:48:B0:CA:2C:DF:A4:06:0E:B2:5B:B0:85:99:14:0F:A4:55
Certificate issuer:       /CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
Certificate serial:       6D562F266B2AE4B77387431817CA0727F78AF850
Authority key identifier: 3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3136382e39302e3230342e302f32322d3332203d3e20323635323930.roa
Signing time:             Fri 02 Dec 2022 12:04:27 +0000
ROA not before:           Fri 02 Dec 2022 11:59:27 +0000
ROA not after:            Fri 01 Dec 2023 12:04:27 +0000
asID:                     265290
IP address blocks:        168.90.204.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:56:2f:26:6b:2a:e4:b7:73:87:43:18:17:ca:07:27:f7:8a:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
        Validity
            Not Before: Dec  2 11:59:27 2022 GMT
            Not After : Dec  1 12:04:27 2023 GMT
        Subject: CN=D5F9A748B0CA2CDFA4060EB25BB08599140FA455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:d3:2f:b3:8a:23:a4:0e:22:a6:c0:24:a9:
                    a0:b3:1c:d4:9b:9f:7b:52:cc:77:dd:69:04:b5:d8:
                    b5:57:cc:97:52:f5:7d:63:c5:46:41:1f:47:7c:5c:
                    7e:ea:7b:45:46:e3:03:5f:0d:da:d5:19:88:41:93:
                    ac:2f:23:0f:4c:5c:50:d2:f7:8a:a4:df:8f:a4:b5:
                    8d:33:1c:f0:39:8f:85:fe:2b:14:54:21:66:f0:4c:
                    df:8b:13:91:88:0b:99:c7:b1:e9:a0:1d:4b:55:e3:
                    95:5c:fd:fc:16:62:46:ef:86:75:8d:6b:80:92:ba:
                    42:73:1a:2f:7d:0e:47:df:39:ed:b6:93:6d:59:c9:
                    ca:3c:5a:79:ce:3e:0d:04:1e:09:31:31:5b:ab:ad:
                    2a:53:d2:ca:16:d8:95:f3:1f:ec:83:8f:22:c1:4a:
                    ce:db:58:35:ed:46:e7:a3:e7:06:83:72:32:2d:d4:
                    73:ea:c4:3a:a1:11:e2:20:ae:a7:3d:d1:54:ba:1c:
                    b4:45:85:04:4d:73:22:7c:f8:4f:38:dc:71:e6:e9:
                    9e:f0:e4:d2:cb:d6:36:a4:33:08:d3:9e:5d:02:b3:
                    1a:a9:06:9c:56:7c:c8:20:2c:fd:9d:e6:21:e0:69:
                    21:61:aa:66:e7:31:d9:29:7f:12:d3:60:0f:3f:0d:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F9:A7:48:B0:CA:2C:DF:A4:06:0E:B2:5B:B0:85:99:14:0F:A4:55
            X509v3 Authority Key Identifier:
                keyid:3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3136382e39302e3230342e302f32322d3332203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:c1:ee:d6:18:a4:a1:a5:6b:6d:34:0b:91:79:43:19:0c:
         66:03:97:eb:18:0f:98:11:8e:f9:37:74:9b:28:02:a0:50:23:
         62:99:26:ed:2b:92:39:33:f5:77:a3:f9:01:a0:d4:cd:3f:75:
         53:05:f7:52:99:72:6b:ca:0e:f0:d6:cd:e9:e7:c1:5b:a8:f9:
         ca:1b:d2:42:e2:f2:77:c7:bb:1a:31:d6:0f:a0:19:c4:b1:07:
         49:77:52:e5:0e:83:38:fb:a4:7b:d5:d3:81:8f:35:17:ff:3c:
         c0:a7:e9:f1:cf:36:42:47:e1:78:e9:5b:bd:84:e4:f8:e0:ee:
         13:44:f4:1b:ae:40:a7:c6:2e:f2:a8:43:07:a7:a6:21:c0:65:
         c2:46:a5:27:26:41:79:3c:1f:d8:3c:95:e4:bf:c7:a6:6b:89:
         65:dd:a6:39:2c:24:93:05:9a:b5:0a:0d:1f:4c:dc:29:4b:ee:
         9e:54:6e:14:6a:e2:45:1c:1a:01:21:fd:1f:8c:70:ce:75:99:
         a3:91:4e:ef:ac:b5:b0:39:60:00:3e:1d:9b:f4:f2:a5:f4:fc:
         2e:8d:2a:cc:ad:f3:22:62:cf:37:6f:98:b9:17:67:74:7f:85:
         21:ac:16:49:47:f6:7e:43:e9:2f:db:bf:26:4f:31:8f:7e:08:
         1a:9e:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org