Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e302e302f32332d3233203d3e203631363738.roa
File:                     3136382e39302e302e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          LGnQMS2vbcKOK9MiHpiu+PLSTrEYG8qerFYo79XgVyU=
Subject key identifier:   A6:FA:B5:8C:E7:D4:F1:27:BA:1F:51:22:AD:56:68:DB:90:54:96:7E
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       3688860C9A8DA29EF3413A7AD8502E56A6ED670D
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e302e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        168.90.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:88:86:0c:9a:8d:a2:9e:f3:41:3a:7a:d8:50:2e:56:a6:ed:67:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=A6FAB58CE7D4F127BA1F5122AD5668DB9054967E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:ea:41:57:5c:eb:7a:bb:e8:a9:aa:74:1c:
                    bf:76:5d:03:f6:b5:e4:44:64:a1:44:f6:4a:0b:35:
                    38:5a:27:0c:6e:e2:1b:2b:c2:23:85:91:6f:d5:07:
                    59:cb:dc:91:c2:33:51:e2:cd:72:45:d6:d9:eb:2b:
                    da:67:c4:01:49:f3:09:58:26:ab:8d:ef:e3:5e:4b:
                    db:8b:16:b8:64:10:05:c1:9a:84:9f:fb:52:f8:f9:
                    c3:ab:11:c9:69:d5:c6:5a:e2:41:69:c7:df:2a:09:
                    d3:e7:0f:5a:cd:e0:9d:0f:e5:2a:8d:6b:b9:a8:79:
                    7c:a1:a4:7c:35:6d:4b:8b:ea:98:65:0b:a5:95:0c:
                    2b:ea:b9:f2:6a:03:af:2f:84:b1:9c:37:72:ef:85:
                    35:19:63:8e:aa:80:1b:60:7f:d3:89:35:93:ff:ff:
                    15:1e:a2:5d:e0:74:8d:59:80:21:16:8f:7c:e5:8b:
                    80:67:bd:55:a7:cc:ec:7a:b1:f7:f0:ff:13:14:7a:
                    cf:51:13:04:a5:68:65:d2:fb:08:37:c3:ec:f1:e5:
                    10:7a:dc:c6:b5:d6:8f:79:87:b5:69:39:f5:7e:aa:
                    d8:e0:ef:1d:c3:f5:2d:72:86:fd:50:af:ec:0a:02:
                    f8:48:ef:83:0c:70:6e:a0:ef:0c:10:7e:5e:12:e6:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:B5:8C:E7:D4:F1:27:BA:1F:51:22:AD:56:68:DB:90:54:96:7E
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e302e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:e8:76:72:06:c7:6e:3f:93:aa:d4:b3:89:1b:44:c9:8e:76:
         13:53:32:54:b4:06:dd:1c:9a:72:e6:25:b3:ab:06:02:83:72:
         80:c7:88:fc:99:9b:ae:35:f5:e7:4e:00:00:c5:bd:d3:3b:2c:
         c2:91:11:d7:91:f7:9e:61:5e:af:17:39:4f:20:5a:03:47:c4:
         93:d7:86:c3:3a:52:8a:08:ec:b8:93:6e:49:ea:f2:81:79:0e:
         10:70:25:2a:82:54:af:d2:19:6a:34:9a:0e:af:62:5f:f7:b5:
         37:de:b1:71:e9:8a:87:40:ba:51:d7:76:3f:83:d6:ec:b6:09:
         2e:2a:1b:2e:72:66:b6:58:2d:21:c6:91:6f:30:5e:be:02:48:
         7f:11:ab:6e:08:18:1d:dc:14:71:9e:07:f2:ad:a5:c1:1e:66:
         c7:09:b6:28:b9:c3:e9:3e:af:1d:fa:d0:e5:87:bc:d1:5a:ba:
         58:50:58:28:1c:00:aa:7a:1d:a5:3c:57:4e:ae:67:71:be:66:
         59:42:0f:e7:32:b0:8a:4a:0b:02:63:34:e7:53:3f:44:08:26:
         31:89:c7:db:20:d0:b5:bf:a5:1c:53:12:6e:d9:da:19:6b:11:
         76:11:64:64:38:42:55:2d:63:76:05:8a:7b:76:5e:e2:cb:58:
         59:b1:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org