Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e322e302f32332d3233203d3e203631363738.roa
File:                     3136382e39302e322e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          hzrayahrFHyh5WB7FvvZDDw4tS4KhYYcqXE/YnSoiiQ=
Subject key identifier:   D0:D7:64:B6:D0:47:EC:B8:7B:D4:DD:5D:04:73:0D:0E:96:A4:52:72
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       37EFF6981D877DEEAD42DC3798095F91B5628E77
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e322e302f32332d3233203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:45:28 +0000
ROA not before:           Tue 24 Oct 2023 12:40:28 +0000
ROA not after:            Tue 22 Oct 2024 12:45:28 +0000
asID:                     61678
IP address blocks:        168.90.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:f6:98:1d:87:7d:ee:ad:42:dc:37:98:09:5f:91:b5:62:8e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:40:28 2023 GMT
            Not After : Oct 22 12:45:28 2024 GMT
        Subject: CN=D0D764B6D047ECB87BD4DD5D04730D0E96A45272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:a2:c2:74:91:b3:ac:39:29:17:d0:17:4f:
                    f9:70:7f:01:fa:4b:9b:c7:93:d8:11:16:52:b9:42:
                    51:be:47:65:0b:f3:46:0d:fd:76:3c:53:fd:b3:0d:
                    e0:0b:20:61:fc:c9:96:84:c5:7b:98:5a:2c:26:f9:
                    b2:e8:37:7b:7a:6d:0d:66:21:bb:6c:de:9b:00:47:
                    b9:a2:92:fc:97:eb:e1:61:d3:47:20:85:14:db:9c:
                    d0:60:9d:c0:a8:fe:aa:82:79:c8:8f:b7:7b:a8:c0:
                    dc:0f:b3:94:13:eb:b3:04:f3:dd:ba:35:68:07:3d:
                    65:c1:71:76:32:8e:5f:56:f5:b4:94:39:6c:4a:01:
                    a4:4a:48:cb:5a:17:cf:fc:8f:30:10:26:cb:bd:f6:
                    f7:94:5b:e5:ee:d4:ce:48:c8:d3:5d:23:d4:c4:b2:
                    f8:b4:46:95:ee:06:45:13:16:be:00:98:f5:62:6b:
                    e7:4e:c7:a2:e1:ce:c8:0b:ac:25:6a:96:45:18:70:
                    b6:64:6c:ed:67:69:25:60:e6:8d:72:08:24:a0:2c:
                    1d:83:f2:04:f7:e8:20:89:50:58:ca:bb:4c:72:a5:
                    ed:71:2b:09:d5:44:4a:73:7e:e7:0a:e9:d5:e7:a3:
                    b5:f3:1a:c1:30:85:fc:2c:64:aa:7e:db:95:93:59:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:64:B6:D0:47:EC:B8:7B:D4:DD:5D:04:73:0D:0E:96:A4:52:72
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e322e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:3d:f4:9b:74:e6:d1:87:49:35:ff:01:23:43:94:9a:79:
         03:3b:f0:c2:99:f3:d0:de:9c:09:d5:27:72:38:f5:65:c3:13:
         47:b4:8d:aa:fa:68:4d:d8:59:6e:2b:45:1e:12:59:6c:54:d7:
         33:ae:12:58:a7:28:52:d4:7f:6a:76:69:34:82:69:38:79:c3:
         d8:d1:b9:d0:70:11:92:ba:4b:1d:b3:86:df:2c:86:75:59:ea:
         4e:da:62:02:6b:dc:86:45:70:31:30:13:4c:97:3f:9d:bc:e1:
         d8:c0:b0:a7:5e:1f:cd:1c:00:91:09:76:35:2f:35:fb:9f:f1:
         b9:d1:60:02:f0:c0:9e:e4:37:4a:e1:a7:01:bd:85:aa:54:1c:
         e3:28:1a:34:40:c1:48:c3:a0:bb:ab:44:fe:25:c5:cf:75:96:
         90:6a:cb:bd:4c:4a:b5:eb:77:64:09:5a:48:ca:8c:70:34:72:
         2e:1d:68:70:4d:09:41:3c:3a:c4:d9:46:89:11:ee:11:cd:7e:
         81:a1:01:97:26:3a:5c:20:9c:b6:94:bb:00:3b:9c:e2:03:2f:
         01:b7:d4:e0:91:79:cd:a1:ce:91:c3:1e:5a:56:d3:c2:cc:df:
         b1:7e:f2:4a:83:07:08:71:6b:77:08:5c:f1:65:96:12:53:48:
         ca:14:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:10 2025 by rpki-client