Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e332e302f32342d3234203d3e203631363738.roa
File:                     3136382e39302e332e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          s4+kNo9tQEdVLrG0Pv85OSazyrPXkb5/zuZx52zjr5Y=
Subject key identifier:   4A:12:3F:41:92:6A:E3:82:68:1B:55:A2:50:05:0A:0B:41:5A:4A:59
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       715B9E3D6CC9388D3305C759C13AB47D2C5EC8DC
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e332e302f32342d3234203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        168.90.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5b:9e:3d:6c:c9:38:8d:33:05:c7:59:c1:3a:b4:7d:2c:5e:c8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=4A123F41926AE382681B55A250050A0B415A4A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:52:a3:91:19:9f:21:78:aa:7c:b9:8c:f7:b5:
                    05:1c:6c:ae:32:5b:86:70:5b:cd:49:27:32:82:37:
                    14:f7:2d:72:8e:26:3d:bd:a5:01:d2:2d:82:7a:9b:
                    92:9d:ce:3d:c4:10:b3:29:c5:31:00:59:08:8d:79:
                    85:d9:2e:38:28:ed:11:32:82:97:15:b6:ad:7c:6c:
                    02:c4:df:b8:56:d8:9f:85:18:2c:63:5e:b4:8a:fc:
                    12:54:d0:7a:1b:98:8b:0a:e1:fd:e2:99:b1:cd:d2:
                    b6:b9:50:ef:ab:b1:74:f0:87:41:35:0d:d7:be:8b:
                    97:ac:5c:8a:b5:80:c5:e3:ca:8f:dc:ef:11:37:90:
                    eb:21:63:f9:83:08:b5:ea:0e:11:05:6e:78:9f:0b:
                    ff:36:18:4d:6a:1f:cb:b6:96:76:45:2b:06:aa:a8:
                    86:71:2b:78:f7:0d:d8:f5:92:80:05:ad:9c:e0:6a:
                    08:70:f6:87:de:0e:0f:db:d6:59:04:1e:0a:a2:dc:
                    e5:3b:54:5f:78:59:3f:65:18:ef:28:1e:f8:1d:f5:
                    f7:c8:a4:bd:3e:0c:19:a1:24:40:03:2a:62:65:1a:
                    92:04:29:1f:fc:01:23:6e:ab:38:42:c2:d6:51:e6:
                    4d:ba:39:20:2d:83:01:78:79:15:45:73:c3:8e:75:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:12:3F:41:92:6A:E3:82:68:1B:55:A2:50:05:0A:0B:41:5A:4A:59
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3136382e39302e332e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:5f:c4:75:d4:54:c3:fb:69:81:14:88:51:63:e1:66:c1:08:
         5b:1c:01:c2:f8:e2:a4:5c:f9:7c:d1:02:f8:f7:00:b7:43:4e:
         23:10:83:40:07:23:54:76:46:1c:88:47:71:ec:3e:08:88:29:
         3e:d8:b6:b6:e6:26:ad:78:21:52:6e:b8:cf:e6:c4:d2:36:46:
         39:09:ce:5f:7b:e8:6f:ff:c8:c7:18:d0:a9:fb:4e:74:01:43:
         4d:7a:de:c8:39:b3:9c:88:fa:25:57:4c:4b:da:4c:d1:d9:b8:
         e8:07:65:90:9b:19:0f:73:e9:4b:31:0e:ca:79:a8:2f:ef:d1:
         1f:48:ea:43:7c:f8:f7:6a:90:6e:67:fd:31:d7:34:ba:cc:a2:
         b9:2d:ee:6b:88:74:d9:1e:60:e5:49:83:56:e9:9b:17:ca:e4:
         cf:e2:f3:e3:10:ed:02:54:81:76:ee:ca:98:24:75:f3:0f:8c:
         3a:35:05:b4:0e:bc:aa:de:6b:1a:aa:d6:91:0d:3c:04:fc:d8:
         3b:a4:61:e0:3c:1e:9b:e4:e7:a8:fe:1f:3c:54:0b:b4:c5:e9:
         8b:12:4a:f6:fb:13:23:1e:0e:95:30:48:37:23:7b:79:26:9b:
         9b:87:db:9d:39:aa:5f:f3:4e:98:6e:ac:ef:a3:62:c1:22:98:
         9d:d1:82:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org