Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e322e302f32332d3233203d3e203631363738.roa
File:                     3136382e39302e322e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          AW3/kpeDfT+TgYAfHoYg4k5D6YSKlJo0s8zfXYE11Rs=
Subject key identifier:   D8:72:D2:69:17:4A:50:29:09:7C:74:88:0F:DA:9B:11:36:1A:9E:A5
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       7F67FCF702DB1AEF31431D3BC370B27D3B346E66
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e322e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        168.90.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:fc:f7:02:db:1a:ef:31:43:1d:3b:c3:70:b2:7d:3b:34:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=D872D269174A5029097C74880FDA9B11361A9EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:39:be:08:8d:5f:6a:59:03:f3:51:e6:d8:
                    3f:6d:27:8d:26:7b:86:db:3e:24:05:7c:6a:82:2b:
                    1e:59:b3:7b:a7:02:4a:6c:4a:25:d4:4a:72:0a:6c:
                    48:e7:5f:ee:0f:81:e2:aa:3c:23:2a:b3:c0:4e:ca:
                    26:33:fe:c3:42:fe:35:67:49:f9:30:c8:7e:b7:89:
                    5e:30:1e:a2:6f:c3:d4:37:34:aa:22:61:be:b2:3b:
                    d7:8f:65:76:85:bd:09:22:d9:9a:ad:f8:fc:9d:8d:
                    d2:4a:72:9e:60:79:04:ca:f7:61:d6:58:2d:07:e6:
                    da:8e:bc:eb:44:01:d6:30:45:91:1e:51:1e:e8:cb:
                    29:7c:7a:75:b5:b9:0e:36:95:d8:06:71:8d:87:71:
                    f1:0f:7e:c9:5a:a4:8a:be:b6:a1:59:e3:bb:3a:0d:
                    55:ac:1e:be:95:e5:71:5b:8c:24:8a:31:b0:df:bf:
                    4f:37:e1:44:54:d8:1d:ef:7b:39:61:36:e2:64:34:
                    cf:39:b2:38:6a:73:05:c0:4e:93:0a:0e:d9:8d:c7:
                    05:c1:a5:66:da:d4:32:5b:7f:cd:4e:a0:45:b8:ae:
                    d2:a0:b9:30:ed:2b:f1:e4:8a:35:72:1d:71:75:12:
                    ca:0e:be:45:79:84:85:a2:77:de:f6:21:55:ce:85:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:72:D2:69:17:4A:50:29:09:7C:74:88:0F:DA:9B:11:36:1A:9E:A5
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e322e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:b7:65:a4:2d:95:57:3e:1b:37:ab:2c:3f:0d:a0:b9:ca:49:
         c9:f6:33:19:8f:55:90:65:57:1b:73:8b:c8:20:f2:63:be:d7:
         cd:f9:27:8e:01:bc:47:21:25:a5:fc:46:6b:ee:f5:10:ab:af:
         02:30:5c:fd:1f:bf:ff:8b:be:59:f1:99:b3:dd:43:ab:d2:2c:
         84:f4:57:ca:d4:9a:12:7f:4a:67:01:d5:d4:5d:0d:44:63:ae:
         38:87:d5:41:2a:c7:b7:1a:bb:52:0f:9f:73:2c:cd:dd:f0:2b:
         b0:5d:03:9e:23:d7:f8:49:87:b2:c2:33:0d:c1:33:6c:8b:f3:
         0c:08:2c:c6:24:09:cf:53:ac:1f:80:28:d8:e2:8a:9c:9e:6a:
         de:79:95:4f:3e:fa:4c:ee:d6:87:da:2b:84:09:89:cd:f3:9e:
         51:7e:c4:fc:cb:1b:92:09:7e:33:cd:3c:7c:85:7b:a1:dc:b2:
         db:38:e5:d0:7d:b4:86:f0:d0:92:e4:7b:e0:ec:df:9c:ed:5c:
         67:f5:26:7b:4b:f4:f6:8e:0f:7d:57:3b:c8:78:ac:9d:0a:09:
         fa:0b:3d:ec:24:55:b3:74:54:05:9e:a0:32:55:bf:82:80:8e:
         5f:08:0e:d7:27:12:35:c1:88:2c:38:24:cc:3e:dd:5b:d7:5f:
         11:d1:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org