Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234312e302f32342d3234203d3e203631353739.roa
File:                     3136382e39302e3234312e302f32342d3234203d3e203631353739.roa (raw, json)
Hash identifier:          zkaQzSt81mE2edP3cdEQ7HQfxsu/4FuPXrHQm6TUy4g=
Subject key identifier:   92:10:4D:13:49:71:B0:42:A7:91:77:43:BC:37:A5:5C:FA:F6:EB:25
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       3A53FE81E2B7B8761E3098674AF0AA8813445080
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234312e302f32342d3234203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:39 +0000
ROA not before:           Tue 06 Feb 2024 11:56:39 +0000
ROA not after:            Tue 04 Feb 2025 12:01:39 +0000
asID:                     61579
IP address blocks:        168.90.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:53:fe:81:e2:b7:b8:76:1e:30:98:67:4a:f0:aa:88:13:44:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:39 2024 GMT
            Not After : Feb  4 12:01:39 2025 GMT
        Subject: CN=92104D134971B042A7917743BC37A55CFAF6EB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:d8:d6:9c:e5:be:12:93:aa:88:cb:61:49:
                    86:b1:8d:2e:aa:ab:fa:46:02:d9:1f:f2:9f:82:1d:
                    d7:b8:a3:46:6a:b5:37:75:dc:e2:6d:8b:4b:70:74:
                    de:89:5c:97:c1:b0:63:a7:fd:ba:26:2b:0f:7f:fe:
                    67:3f:ac:4a:70:de:58:34:f0:1f:ea:14:ba:3d:29:
                    de:26:2d:04:36:e5:64:5c:c4:a9:29:4e:2c:b5:84:
                    f4:b4:c7:7b:c0:6f:6e:47:dd:21:16:25:d2:58:84:
                    e0:79:90:e0:7b:3a:72:df:78:05:04:ce:21:80:c6:
                    c8:a3:52:1d:56:20:29:01:44:1d:74:59:fa:2e:5e:
                    eb:a0:3a:fe:2f:e7:c2:7b:d8:3f:40:f4:56:59:30:
                    02:3b:99:5c:4e:92:9b:91:66:23:3f:80:9e:f8:aa:
                    ea:d1:ab:38:75:cb:d6:ba:f7:b4:4b:5b:56:33:a9:
                    17:ba:cd:85:63:67:0a:5e:ac:63:01:3d:bb:49:4d:
                    66:13:9e:42:af:81:1e:4c:2a:78:2b:11:e0:dc:d7:
                    ca:06:bf:56:bc:b5:a2:38:de:22:e0:d6:40:56:86:
                    95:95:ea:af:c7:9d:d7:ca:14:11:87:6e:d9:08:00:
                    05:c3:a5:f0:f2:ba:67:54:ef:1b:3f:ca:ae:ec:4e:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:10:4D:13:49:71:B0:42:A7:91:77:43:BC:37:A5:5C:FA:F6:EB:25
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234312e302f32342d3234203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:05:b4:10:96:df:86:70:08:42:0a:22:97:d1:08:82:63:
         5c:46:7a:7d:c2:2f:77:6f:3d:1a:3a:59:1d:93:2c:bd:07:94:
         3f:a1:c7:d9:66:9e:fb:ba:84:da:a8:ac:7a:bc:91:93:3b:d1:
         08:74:dd:df:b2:80:4c:5a:85:f4:98:66:73:d4:2d:2e:e8:f3:
         67:b4:8e:58:e7:2f:9a:ca:29:83:4a:91:0d:c4:f0:3f:55:2f:
         6d:66:bd:6c:d9:2f:e5:91:3e:f4:9d:8b:2c:8d:5e:80:8b:d1:
         d2:2e:93:58:68:7a:15:d8:f5:b6:73:35:3f:ff:17:ea:92:7e:
         f5:fa:84:33:e4:04:a8:06:ba:59:e0:40:97:b8:5c:ad:ea:c5:
         69:45:9f:fb:e6:d2:ce:f4:bb:5c:9e:95:10:11:2c:a6:bf:bd:
         50:b0:98:a8:8c:4b:a4:79:3e:41:d3:2e:9b:75:e9:7d:54:ea:
         c6:5d:d2:f4:2c:a2:fd:0c:30:42:ff:31:90:cd:48:40:94:ab:
         d7:f5:50:32:96:33:e5:de:3d:92:1d:9b:4e:fc:67:0a:df:bc:
         6d:15:d8:4d:a6:07:7a:cc:cd:56:65:73:22:d1:02:9a:a8:66:
         3b:d4:60:af:6d:df:a8:92:ac:6d:9a:10:71:6c:96:c2:78:b9:
         9d:70:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org