Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3136382e39302e32302e302f32322d3234203d3e203532353733.roa
File:                     3136382e39302e32302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          3RzauDNjHJQBGIc/ATJhaY2g3pTlbnHtD1a9ePCusDk=
Subject key identifier:   EE:93:6F:44:B9:3D:F3:34:AF:22:06:7A:E2:04:1F:DE:76:75:E3:F5
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       6C2582B393EFB15619C4390CAFC21E1667A44E05
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3136382e39302e32302e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        168.90.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:25:82:b3:93:ef:b1:56:19:c4:39:0c:af:c2:1e:16:67:a4:4e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=EE936F44B93DF334AF22067AE2041FDE7675E3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:1d:bd:b6:c1:1e:57:c6:2e:71:d0:3c:8c:
                    0a:e5:d6:b2:b6:4a:3f:eb:cb:1a:f7:8b:95:1c:77:
                    0e:c7:73:72:2a:cd:ce:a3:f8:ac:ea:9c:1c:03:55:
                    b4:5f:58:c6:33:e0:e4:b0:aa:a3:29:cd:f1:09:c1:
                    65:80:b6:65:ea:21:6a:e0:bb:48:76:ee:66:9a:c5:
                    e7:f0:13:9b:21:d6:2d:67:28:6f:15:6a:46:d7:da:
                    1b:c8:4e:af:1a:e5:ed:6c:38:4b:f0:75:f6:01:65:
                    d6:66:cc:41:1f:51:99:b8:c2:e4:67:d5:3d:a0:bb:
                    7c:1e:b7:36:30:83:d0:8e:d2:85:fc:13:35:dc:8f:
                    e3:ac:c6:f1:08:bf:ba:4b:47:19:17:80:b0:f4:b5:
                    a1:e4:33:de:5a:55:7a:bf:ea:1e:1f:23:fe:d5:05:
                    e5:1b:33:b4:d3:fe:13:7e:9d:dd:49:42:f7:b4:9a:
                    ba:4e:67:80:7f:41:9a:b7:82:88:d1:78:5a:b0:66:
                    0a:30:67:49:72:c0:2a:6d:bf:9a:19:e9:4f:8f:5e:
                    4c:fc:04:f5:a3:f4:09:b3:95:66:2e:e3:23:e3:a2:
                    2b:5f:8d:c5:e7:e2:d2:39:a8:21:20:17:3e:cc:04:
                    45:a7:a7:2e:03:f6:46:8a:54:0d:65:c3:04:62:c1:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:93:6F:44:B9:3D:F3:34:AF:22:06:7A:E2:04:1F:DE:76:75:E3:F5
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3136382e39302e32302e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:13:2f:1c:2a:ad:3d:0a:f4:17:6a:48:ae:79:d2:79:25:bf:
         9f:03:09:0b:76:65:f1:13:2d:ae:c5:35:a9:05:3f:ca:a7:3e:
         1a:08:0e:eb:75:fb:f2:8e:d4:77:dc:56:d4:1a:19:2f:20:a7:
         38:39:49:45:76:9c:2d:b8:c6:07:d2:f9:a9:ff:a1:70:5d:ca:
         89:46:0a:15:96:10:a2:75:9e:2a:68:37:8f:d2:03:13:4c:c6:
         ba:5b:fe:72:a4:8e:77:22:af:56:7c:66:14:93:e2:ba:d7:47:
         53:d3:ba:a0:29:f1:df:b2:c4:22:57:50:17:15:d2:8c:42:48:
         0f:b8:50:b1:8a:0c:15:f7:03:88:a1:d2:aa:e7:b1:25:a7:cb:
         36:e5:2a:0e:9e:c8:14:7b:c7:99:f6:0d:1f:40:17:f2:a9:0a:
         93:a4:7d:90:a9:92:d8:1a:e7:7b:db:b7:e4:92:df:68:c7:c2:
         7b:ca:69:34:c3:aa:e1:0c:bc:cb:f3:8a:b8:8e:2e:19:59:21:
         d0:81:b5:a6:a5:a1:c8:2e:67:5f:53:95:35:32:f2:d3:1e:c1:
         ad:bc:73:d1:10:06:c7:84:76:87:50:90:73:f3:02:7a:75:ec:
         d3:89:3e:62:fe:c1:87:d8:0d:42:48:ab:5c:55:a4:d4:28:bc:
         f3:61:48:49
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbCWCs5PvsVYZxDkMr8IeFmekTgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0MTI0RTI4RkY0MzQ5OTIwRUNDOEQ0QzFFRTE2QUYx
QjYzNkE0NzAeFw0yNDA0MDMyMzUzMzJaFw0yNTA0MDIyMzU4MzJaMDMxMTAvBgNV
BAMTKEVFOTM2RjQ0QjkzREYzMzRBRjIyMDY3QUUyMDQxRkRFNzY3NUUzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeR29tsEeV8YucdA8jArl1rK2
Sj/ryxr3i5Ucdw7Hc3Iqzc6j+KzqnBwDVbRfWMYz4OSwqqMpzfEJwWWAtmXqIWrg
u0h27maaxefwE5sh1i1nKG8VakbX2hvITq8a5e1sOEvwdfYBZdZmzEEfUZm4wuRn
1T2gu3wetzYwg9CO0oX8EzXcj+OsxvEIv7pLRxkXgLD0taHkM95aVXq/6h4fI/7V
BeUbM7TT/hN+nd1JQve0mrpOZ4B/QZq3gojReFqwZgowZ0lywCptv5oZ6U+PXkz8
BPWj9AmzlWYu4yPjoitfjcXn4tI5qCEgFz7MBEWnpy4D9kaKVA1lwwRiwVQVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7pNvRLk98zSvIgZ64gQf3nZ14/UwHwYDVR0j
BBgwFoAUhUEk4o/0NJkg7MjUwe4WrxtjakcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpHQVdRNGd1TTVKUHBBdHM1NUx0TG1WQ3NGWE15UGh6Y1BadFNRRWs0
aGsvMS84NTQxMjRFMjhGRjQzNDk5MjBFQ0M4RDRDMUVFMTZBRjFCNjM2QTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDEyNEUyOEZGNDM0OTky
MEVDQzhENEMxRUUxNkFGMUI2MzZBNDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqR0FXUTRndU01SlBwQXRzNTVMdExtVkNzRlhNeVBoemNQWnRTUUVrNGhrLzEv
MzEzNjM4MmUzOTMwMmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM1
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqhaFDANBgkqhkiG9w0BAQsFAAOCAQEA1RMvHCqtPQr0
F2pIrnnSeSW/nwMJC3Zl8RMtrsU1qQU/yqc+GggO63X78o7Ud9xW1BoZLyCnODlJ
RXacLbjGB9L5qf+hcF3KiUYKFZYQonWeKmg3j9IDE0zGulv+cqSOdyKvVnxmFJPi
utdHU9O6oCnx37LEIldQFxXSjEJID7hQsYoMFfcDiKHSquexJafLNuUqDp7IFHvH
mfYNH0AX8qkKk6R9kKmS2Brne9u35JLfaMfCe8ppNMOq4Qy8y/OKuI4uGVkh0IG1
pqWhyC5nX1OVNTLy0x7Brbxz0RAGx4R2h1CQc/MCenXs04k+Yv7Bh9gNQkirXFWk
1Ci882FISQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 02:28:21 2024 by rpki-client on console-ams.rpki-client.org