Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3139312e3234302e3136342e302f32322d3332203d3e20323633303432.roa
File:                     3139312e3234302e3136342e302f32322d3332203d3e20323633303432.roa (raw, json)
Hash identifier:          jmuj6k3SmXLoU9njo7xQ7PxIKB8ZbgKa7oww0ZdfjOg=
Subject key identifier:   45:B1:60:DF:8D:39:73:84:8A:3B:89:BE:43:88:AF:7C:6D:FC:61:B8
Certificate issuer:       /CN=90524BFE16E4163C4B4EB6424540F3989155006C
Certificate serial:       5D664D1EC32E337011E82A7330186C48375397F2
Authority key identifier: 90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3139312e3234302e3136342e302f32322d3332203d3e20323633303432.roa
Signing time:             Mon 03 Apr 2023 19:16:56 +0000
ROA not before:           Mon 03 Apr 2023 19:11:56 +0000
ROA not after:            Mon 01 Apr 2024 19:16:56 +0000
asID:                     263042
IP address blocks:        191.240.164.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:66:4d:1e:c3:2e:33:70:11:e8:2a:73:30:18:6c:48:37:53:97:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90524BFE16E4163C4B4EB6424540F3989155006C
        Validity
            Not Before: Apr  3 19:11:56 2023 GMT
            Not After : Apr  1 19:16:56 2024 GMT
        Subject: CN=45B160DF8D3973848A3B89BE4388AF7C6DFC61B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:92:f4:0e:81:d4:f6:9f:37:a6:51:6e:65:
                    37:dd:52:64:34:e9:5b:ba:98:23:59:b3:4f:97:95:
                    9f:0c:87:fc:c5:e3:f0:f4:04:79:d6:51:fb:a4:49:
                    99:19:78:f0:a6:c3:7b:f3:ca:da:14:b3:89:b7:9a:
                    43:f3:6a:33:0a:f9:75:39:0c:85:2f:61:38:c6:4a:
                    58:d1:e7:31:13:c9:74:73:db:3f:f7:70:1e:10:fa:
                    f1:66:f9:d7:d9:f6:b4:9c:3b:68:14:db:22:ee:d2:
                    75:86:a3:cc:d5:d7:4e:21:a0:a9:c1:fb:72:7c:a5:
                    c1:f7:e7:19:65:b6:0f:26:98:bf:60:23:f6:03:7d:
                    f9:d2:e3:86:9a:89:0a:bf:eb:79:16:1e:de:6e:ea:
                    e7:81:b5:f8:a8:4e:78:da:22:fa:76:f7:e7:04:9b:
                    ee:65:51:b1:4b:18:e7:68:b5:63:eb:83:b9:53:d6:
                    ed:a0:db:f6:9e:7f:1a:8b:ff:ce:77:49:cf:ca:19:
                    d9:9b:29:d7:b3:27:48:48:5a:14:d0:26:e8:95:18:
                    72:6b:e3:7e:50:18:01:19:df:4e:a9:67:11:4c:3f:
                    4c:6a:a1:fe:94:8c:75:6d:59:89:39:51:b6:9f:52:
                    2a:34:7d:01:97:26:6c:b3:6f:82:2f:10:3f:cc:18:
                    68:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:60:DF:8D:39:73:84:8A:3B:89:BE:43:88:AF:7C:6D:FC:61:B8
            X509v3 Authority Key Identifier:
                keyid:90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/90524BFE16E4163C4B4EB6424540F3989155006C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3139312e3234302e3136342e302f32322d3332203d3e20323633303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:5c:28:a2:65:59:08:72:ae:69:50:c7:90:eb:c5:b8:11:
         f8:52:2e:80:55:bf:c1:71:9d:cc:44:18:c0:c0:b7:10:37:90:
         20:84:78:16:e2:c6:8e:f6:04:a2:a6:b2:67:40:d0:73:03:e0:
         74:f9:7b:12:56:06:7d:3f:e6:a0:0f:d3:a5:14:3c:8c:35:c5:
         4d:fd:92:49:76:a5:12:e7:56:0f:69:38:15:15:74:c6:10:d7:
         a4:08:99:2f:25:24:b3:30:26:ae:2f:88:98:ca:49:85:b6:3d:
         c9:06:0a:3b:18:c9:1d:ce:e1:f5:d8:4c:c3:ad:c3:5d:4d:24:
         be:88:14:9e:12:e5:ac:d6:91:69:48:97:06:81:a8:8e:00:db:
         45:75:da:21:d9:e4:85:ce:1f:9b:fe:cb:28:ba:c2:85:a0:ad:
         1a:3e:da:51:e6:a7:37:14:d3:94:db:9d:1f:8d:1a:7d:e1:9c:
         dd:fc:71:b8:c1:6c:ab:9f:6c:1b:f6:cb:48:07:ba:e4:90:5a:
         2a:89:16:28:05:15:4c:74:85:45:27:ea:c7:76:b8:64:98:8e:
         d2:62:91:3f:39:d3:37:ba:ee:78:b9:a9:d8:fd:f7:e0:a6:35:
         c2:50:22:99:58:ab:54:14:be:6c:c1:83:17:37:e0:38:20:6a:
         bb:a2:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org