Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e302e302f32322d3232203d3e203631363738.roa
File:                     3136382e39302e302e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          44JcVyOqdHnj1sLmX4OP09CeJL10QFiFN/QI2ATslCk=
Subject key identifier:   92:29:0D:66:05:60:A1:BA:B0:FE:BE:0E:FB:A3:F4:D3:D7:EB:F7:A1
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       07D79DF912803D8B56A4A6A2286FBE5D7AE49CF8
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e302e302f32322d3232203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        168.90.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d7:9d:f9:12:80:3d:8b:56:a4:a6:a2:28:6f:be:5d:7a:e4:9c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=92290D660560A1BAB0FEBE0EFBA3F4D3D7EBF7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:e1:17:8f:d5:cd:5e:05:41:cf:ca:6e:ac:
                    32:4f:cf:ae:44:92:d3:ed:8a:8d:76:b7:10:bb:79:
                    8d:51:6f:cd:cf:a0:31:b2:7d:fe:71:92:b2:05:da:
                    2d:e0:43:4c:89:21:d8:54:4c:f2:9a:47:f0:b5:9a:
                    fa:f0:9e:b7:7f:cb:55:1d:d9:c5:b5:6e:97:c8:87:
                    b9:d3:b4:3c:0e:01:e2:b6:3d:a2:e4:71:b3:9f:db:
                    ac:6c:90:4c:df:62:a0:a1:3e:80:2d:32:12:be:96:
                    d2:c6:53:17:e2:4e:1d:5a:8c:4d:57:71:ad:78:4d:
                    87:ae:1f:9f:ea:f4:5a:a9:56:81:e7:4c:5b:6d:2e:
                    ff:7a:e7:c8:7b:96:89:0b:08:7c:9f:a0:a6:c2:94:
                    4c:aa:1d:f4:07:77:40:c0:29:ba:e7:70:1e:cf:0c:
                    fa:10:ef:5a:6e:5f:9e:00:9f:2d:96:63:85:81:21:
                    e2:d7:85:37:e2:0e:b3:64:5d:b2:ff:37:3a:e7:6a:
                    3e:5b:ff:be:ae:09:1a:8a:2b:7b:db:d0:74:86:7f:
                    b9:2b:39:3f:ba:c8:03:13:4b:76:5a:27:84:70:0b:
                    ff:cb:50:1e:4d:ef:73:6a:dd:f2:2a:54:1d:e3:91:
                    9c:ad:36:37:d4:1e:28:ae:82:35:3f:78:bb:9b:f6:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:0D:66:05:60:A1:BA:B0:FE:BE:0E:FB:A3:F4:D3:D7:EB:F7:A1
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e302e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:8a:2e:10:15:26:9b:1b:e2:08:34:fd:4d:23:e7:be:4f:b2:
         b4:e0:0a:e9:d8:8a:64:89:69:8a:e5:0b:66:76:d6:ff:b6:9f:
         e1:31:15:29:a2:41:35:44:35:4e:f8:e9:7f:7f:aa:12:2e:06:
         93:6f:81:8c:d0:5a:ea:76:37:d1:38:54:78:38:83:01:fd:c8:
         4c:ad:f4:6f:7a:a6:d4:9a:ba:ec:71:44:79:1d:ac:b1:d1:ba:
         5a:59:04:18:24:0a:2f:82:16:1c:af:76:3a:e9:53:8f:12:56:
         17:70:a4:24:02:98:bf:0a:21:1c:4a:af:87:4f:22:07:eb:d9:
         57:35:f3:70:ad:8c:99:6d:a1:ab:a7:ab:78:2c:33:4c:43:cc:
         be:23:41:de:f4:a0:08:61:7a:79:84:ee:ad:5f:03:f6:d6:37:
         47:f5:33:57:20:0f:03:11:fe:0e:eb:a5:af:c4:80:da:14:0a:
         db:df:8e:c3:8f:ba:d9:64:01:7f:d1:40:f5:4b:88:28:91:cc:
         db:60:43:6f:d2:5a:e3:fc:49:e6:06:83:92:c4:8b:29:22:ac:
         85:4f:e1:49:e1:30:08:af:24:b0:d8:5d:4f:90:ac:0b:10:4a:
         ef:92:c8:eb:b3:f7:c0:66:ac:9e:2f:ac:7a:62:b4:40:54:76:
         96:79:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org