Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3136382e39302e32302e302f32322d3234203d3e203532353733.roa
File:                     3136382e39302e32302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          y6IO3Ub9+y1EOPdw12LRdvrtO681d66mRkCdLjrinH8=
Subject key identifier:   02:2E:49:29:6A:5B:1E:B4:79:EC:26:9F:F2:E7:03:D5:CE:E5:9A:2E
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       52B1A361F99BB9EB72E95645E8435FEC10B97CEE
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3136382e39302e32302e302f32322d3234203d3e203532353733.roa
Signing time:             Mon 29 May 2023 16:14:05 +0000
ROA not before:           Mon 29 May 2023 16:09:05 +0000
ROA not after:            Mon 27 May 2024 16:14:05 +0000
asID:                     52573
IP address blocks:        168.90.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b1:a3:61:f9:9b:b9:eb:72:e9:56:45:e8:43:5f:ec:10:b9:7c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: May 29 16:09:05 2023 GMT
            Not After : May 27 16:14:05 2024 GMT
        Subject: CN=022E49296A5B1EB479EC269FF2E703D5CEE59A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:b3:c2:9d:26:8a:3e:1b:40:57:8b:92:e8:
                    00:d0:34:6b:fc:7a:c1:c4:db:57:6b:da:75:3c:4c:
                    13:52:e2:89:c6:ad:dc:1a:30:44:25:b1:d3:f9:85:
                    0e:9f:bf:00:85:8c:3d:b5:33:92:7b:50:f0:56:df:
                    2a:09:ae:63:9a:cd:ff:1e:68:7d:54:3a:13:da:ca:
                    51:67:cc:9a:47:17:6b:7e:e0:50:97:4b:7d:45:c5:
                    17:39:c0:f3:ad:de:3e:8d:06:0e:2c:af:5f:e0:90:
                    99:c0:ba:da:6b:17:50:04:da:2b:c9:01:f1:94:3e:
                    18:6b:9f:aa:76:45:c7:d7:43:1c:2e:f0:88:32:87:
                    d9:aa:4a:85:9f:da:a2:a3:b8:e2:d1:da:8c:0b:3f:
                    8f:8a:0c:38:0d:e2:68:6a:ed:5f:28:74:56:11:17:
                    9b:97:58:63:44:1f:27:d1:23:51:19:0d:50:4c:4e:
                    ed:f9:c7:0d:86:bb:d2:c6:09:14:2b:e0:df:a9:16:
                    e8:ec:db:60:19:9b:f2:7c:24:4f:7c:11:2c:b0:55:
                    fe:cd:68:db:05:a1:a0:9a:26:4f:ed:93:e4:c2:92:
                    e1:62:04:3c:86:71:7a:3d:b6:6d:90:d5:e2:d9:50:
                    3f:b6:65:33:f7:ce:ad:98:30:4d:8f:e5:9f:4a:e4:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:49:29:6A:5B:1E:B4:79:EC:26:9F:F2:E7:03:D5:CE:E5:9A:2E
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3136382e39302e32302e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:80:9e:3f:a4:f3:70:3a:86:d2:15:f9:0a:14:e4:29:7d:
         a1:2c:96:00:88:bf:0d:68:ce:e4:a1:f3:da:a1:18:64:b8:26:
         aa:1f:5f:4a:02:87:59:3f:17:db:68:53:e3:61:77:8f:61:04:
         87:62:f7:7d:43:b8:c9:4a:b6:dc:45:2a:17:c8:34:ed:bb:80:
         f8:d9:42:53:11:db:53:f2:d2:b8:32:38:11:ea:52:06:72:33:
         90:72:98:7a:1f:c1:25:20:70:0c:bf:8f:f3:74:fd:af:0f:b2:
         19:6e:2e:f9:f9:cf:0e:83:70:81:19:51:d4:27:a5:4c:fd:56:
         c8:2d:bd:ff:83:bd:26:82:4a:52:3f:87:0b:ef:17:08:24:dc:
         bb:2e:c5:43:16:00:32:15:4b:ae:67:b1:93:c3:ff:25:de:19:
         e8:09:fc:eb:4c:3b:70:62:83:99:6d:8a:cc:c5:97:64:0c:d1:
         51:da:76:2e:8a:9b:6b:69:63:62:85:c5:b4:84:11:98:e1:9d:
         78:45:3f:a0:ac:ab:6f:6a:82:7c:be:ba:7f:dc:17:7d:f7:07:
         a2:ca:cb:39:af:f0:18:10:f7:31:29:1a:cd:8a:f5:8f:c2:40:
         9d:55:6d:3a:1e:2e:02:cc:1c:0a:13:ae:82:36:f0:21:64:e9:
         b7:79:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org