Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa (raw, json)
Hash identifier:          laQCRkN6chvFRIwLUNctCwpeY6X+E5SKEujW9kQ6GXc=
Subject key identifier:   D5:F5:61:14:FC:E8:9F:8C:5B:D1:A3:82:4A:06:34:3B:1E:4E:B8:20
Certificate issuer:       /CN=92AB6D40A4BFAB962C103D49F32B13BE572A9636
Certificate serial:       1A68C7FA67A685C0AA72648AC11E715E0E4D2029
Authority key identifier: 92:AB:6D:40:A4:BF:AB:96:2C:10:3D:49:F3:2B:13:BE:57:2A:96:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92AB6D40A4BFAB962C103D49F32B13BE572A9636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa
Signing time:             Sat 06 Apr 2024 11:34:11 +0000
ROA not before:           Sat 06 Apr 2024 11:29:11 +0000
ROA not after:            Sat 05 Apr 2025 11:34:11 +0000
asID:                     265290
IP address blocks:        168.90.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:68:c7:fa:67:a6:85:c0:aa:72:64:8a:c1:1e:71:5e:0e:4d:20:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92AB6D40A4BFAB962C103D49F32B13BE572A9636
        Validity
            Not Before: Apr  6 11:29:11 2024 GMT
            Not After : Apr  5 11:34:11 2025 GMT
        Subject: CN=D5F56114FCE89F8C5BD1A3824A06343B1E4EB820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:81:02:a0:48:b4:56:74:3d:54:49:3e:fe:
                    85:08:d9:89:62:7a:40:4d:58:54:ea:a2:7b:4e:48:
                    6d:b0:94:4e:da:20:80:80:ea:fa:8d:08:46:ce:82:
                    42:ff:b6:ca:fe:36:9c:b0:ef:f6:bb:83:03:77:ff:
                    92:b3:9a:84:6a:08:27:de:81:74:bb:6a:2a:da:32:
                    ec:2b:0e:5f:f5:3e:90:ea:8c:25:47:e1:2c:74:46:
                    d2:3d:6a:d4:11:aa:f4:ae:6f:11:da:f3:21:8d:cb:
                    23:19:c8:c1:5e:d7:17:6d:a2:50:f9:cc:c1:01:6c:
                    08:8c:40:ce:4b:3d:22:9a:f5:1e:f6:e7:e6:3f:a7:
                    c7:97:d3:28:48:d4:fc:f7:9d:de:36:f2:e0:c9:9c:
                    c0:22:ef:e4:dd:7a:44:4b:b4:0c:77:73:0d:a1:f9:
                    64:6d:d8:11:15:86:be:25:ca:03:b6:a6:3d:4f:3b:
                    b6:d1:68:6a:00:6d:30:5c:b7:96:a2:08:50:e9:08:
                    f4:02:f2:e2:56:d5:dc:0d:c6:8d:26:36:8d:dd:02:
                    1e:d9:f6:29:75:4b:a2:23:eb:01:25:8e:62:ba:60:
                    2d:d6:91:c2:a8:7e:18:a4:d6:5f:10:b3:03:70:e9:
                    b8:b9:8d:b4:9c:1b:89:af:11:74:8f:54:bb:46:12:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:61:14:FC:E8:9F:8C:5B:D1:A3:82:4A:06:34:3B:1E:4E:B8:20
            X509v3 Authority Key Identifier:
                keyid:92:AB:6D:40:A4:BF:AB:96:2C:10:3D:49:F3:2B:13:BE:57:2A:96:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/92AB6D40A4BFAB962C103D49F32B13BE572A9636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92AB6D40A4BFAB962C103D49F32B13BE572A9636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:78:87:ef:15:0a:f5:2f:7c:06:6a:75:bc:91:89:e2:5e:b9:
         03:15:ec:36:c6:e2:9a:7e:e4:ed:63:63:1f:1d:b4:6f:9a:3d:
         d1:52:5a:a9:33:94:a3:b2:f4:c5:9c:dd:f9:c4:b1:11:1b:34:
         3e:b9:61:67:32:74:ba:1e:27:0e:f8:55:f1:9b:94:cb:3f:5d:
         ec:ed:e9:f1:72:89:d2:92:87:a2:63:28:ae:60:44:47:d9:11:
         77:94:71:30:16:43:43:da:50:8f:d4:20:0a:18:3e:bb:96:38:
         b3:89:9f:6c:84:4b:af:af:0d:2c:c9:4d:b2:22:08:3a:98:e1:
         cc:68:7b:55:e2:06:c0:fb:95:27:28:69:7a:d5:0e:0a:a9:a8:
         52:69:a2:ba:9a:0d:ec:cb:02:93:62:37:77:7e:97:96:68:3e:
         c3:a4:cb:a8:18:32:d3:77:84:3e:c5:21:a6:02:9f:43:42:11:
         10:12:0d:90:8e:93:cb:0a:eb:3f:ca:f3:51:43:f6:d0:cb:5e:
         47:33:4f:b0:68:1b:f7:02:9d:4e:62:2c:2c:38:ca:21:b0:ed:
         2f:64:91:c0:72:1b:13:0d:51:7f:ba:50:e0:5a:9d:c9:8e:ec:
         d3:4b:09:ee:83:35:cb:64:59:55:7f:f1:ce:58:ae:46:50:d4:
         dc:b6:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org