Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/3136382e39302e34382e302f32322d3332203d3e20323635323634.roa
File:                     3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (raw, json)
Hash identifier:          iAoBFf/5/3R0RPbVCJ9EDuR+OtBanlZDBoVfOPA2jCg=
Subject key identifier:   DE:57:E0:64:AF:98:B4:5A:02:1D:9F:BC:97:CC:51:1A:D7:A5:70:F3
Certificate issuer:       /CN=96D1069FDBEE07B6866CEBEC271699B222A0C206
Certificate serial:       6690C552604C4442F24E48BCDA466011FB17DD94
Authority key identifier: 96:D1:06:9F:DB:EE:07:B6:86:6C:EB:EC:27:16:99:B2:22:A0:C2:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96D1069FDBEE07B6866CEBEC271699B222A0C206.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/3136382e39302e34382e302f32322d3332203d3e20323635323634.roa
Signing time:             Thu 04 Apr 2024 04:18:09 +0000
ROA not before:           Thu 04 Apr 2024 04:13:09 +0000
ROA not after:            Thu 03 Apr 2025 04:18:09 +0000
asID:                     265264
IP address blocks:        168.90.48.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:90:c5:52:60:4c:44:42:f2:4e:48:bc:da:46:60:11:fb:17:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D1069FDBEE07B6866CEBEC271699B222A0C206
        Validity
            Not Before: Apr  4 04:13:09 2024 GMT
            Not After : Apr  3 04:18:09 2025 GMT
        Subject: CN=DE57E064AF98B45A021D9FBC97CC511AD7A570F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:a2:0d:f6:c7:dd:3c:47:03:c6:cc:62:b6:
                    e0:c7:01:a5:1b:af:02:81:c0:9e:3b:16:9e:2e:75:
                    03:37:1e:35:af:e6:f7:61:9a:ed:e1:f4:75:49:7d:
                    78:ea:87:ae:03:4e:5b:b5:90:4d:f0:f3:7f:31:0f:
                    44:a7:86:23:0a:e7:93:e7:2d:c8:50:95:12:5c:3b:
                    77:18:83:cd:30:3b:00:74:fb:4c:95:9b:f2:4c:6a:
                    7b:74:67:89:37:3b:d4:23:50:2d:6a:25:b3:6e:0d:
                    36:b1:30:f3:b3:ae:6c:6e:7c:32:ce:c4:43:6c:02:
                    fd:b0:d4:08:63:e4:38:57:8e:18:35:09:10:90:b0:
                    d7:54:37:9e:9c:8d:ac:6a:3d:46:2e:25:03:fb:08:
                    22:d8:ee:ac:8d:54:55:5c:c8:25:94:2c:7c:02:fa:
                    48:8a:ec:11:a2:22:18:37:9a:ce:05:cb:20:fe:d8:
                    5c:6d:f9:58:a4:95:34:07:7f:18:b6:85:4a:1f:33:
                    35:98:9b:be:09:46:e5:72:ca:0b:e8:9d:e2:a5:fe:
                    cc:f2:62:61:86:2e:ac:3f:a6:9c:81:fa:00:08:20:
                    48:7c:1f:66:6a:e0:73:6e:6f:5b:b1:32:c3:87:b4:
                    d1:c8:85:57:51:fd:0b:f4:9a:e7:7c:e2:e2:1e:08:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:E0:64:AF:98:B4:5A:02:1D:9F:BC:97:CC:51:1A:D7:A5:70:F3
            X509v3 Authority Key Identifier:
                keyid:96:D1:06:9F:DB:EE:07:B6:86:6C:EB:EC:27:16:99:B2:22:A0:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/96D1069FDBEE07B6866CEBEC271699B222A0C206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96D1069FDBEE07B6866CEBEC271699B222A0C206.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/3136382e39302e34382e302f32322d3332203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ee:3a:6b:cc:8e:bd:37:80:b5:10:83:60:05:1a:cf:e0:17:
         ed:7a:95:49:6f:c5:5b:8b:a6:00:8f:54:76:ae:d6:f9:55:2f:
         aa:a0:f9:3d:9b:dc:5c:c6:f6:67:a1:7b:bc:0a:11:31:c9:f7:
         a2:9a:de:bf:3e:b1:06:44:48:7c:17:0e:0a:0b:55:2f:d3:7f:
         cc:7e:41:cc:bb:99:68:8f:8c:60:2b:4d:fd:bc:5b:9b:f3:51:
         5d:23:c9:9e:c9:bc:7b:b2:e0:19:0d:05:eb:01:ec:c7:b2:e1:
         7c:88:0f:e0:a1:c0:9d:ab:a5:00:a6:3b:1d:87:cb:e1:a1:f8:
         7a:32:bf:a0:c7:92:17:d3:9c:1c:7d:79:f6:e4:30:6f:7a:25:
         20:8a:35:48:9c:fa:2e:a3:5a:94:5f:b2:d1:98:84:e0:38:8d:
         fa:ff:6e:09:72:5a:c2:c2:c2:9b:ce:95:81:26:e0:54:bd:7b:
         a6:05:f6:31:fe:dc:9c:15:fd:8a:c5:f9:6c:5c:98:e2:38:58:
         c4:b4:9e:a9:5c:27:69:48:16:1a:aa:fd:3e:74:a8:89:0d:e3:
         39:8c:5d:2a:82:d7:b1:3b:5e:1b:a2:f0:86:4a:c5:6c:e9:13:
         64:bd:c5:50:3a:fa:cc:63:4b:fd:a7:74:24:59:9b:b9:1c:6a:
         cc:9d:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org