Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e39302e3138342e302f32322d3234203d3e203238353830.roa
File:                     3136382e39302e3138342e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          5sJCT1qvAgYqabG3xJX56HdnsejfghOAMrkLWjW0mjk=
Subject key identifier:   CB:CD:36:F1:E2:A7:18:BF:A5:0E:0C:CD:4B:3D:18:2F:91:2F:08:0C
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       390B9BCECF36CE8966DF32C609D801F4605EDC1E
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e39302e3138342e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:08 +0000
ROA not before:           Thu 19 Oct 2023 19:10:08 +0000
ROA not after:            Thu 17 Oct 2024 19:15:08 +0000
asID:                     28580
IP address blocks:        168.90.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0b:9b:ce:cf:36:ce:89:66:df:32:c6:09:d8:01:f4:60:5e:dc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:08 2023 GMT
            Not After : Oct 17 19:15:08 2024 GMT
        Subject: CN=CBCD36F1E2A718BFA50E0CCD4B3D182F912F080C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:8d:a3:99:db:f3:9c:9f:c5:71:b0:2f:d0:
                    4b:00:0a:71:e4:41:bb:77:ed:a3:84:f7:ec:5f:8d:
                    8c:2a:ec:84:de:63:1b:3d:c1:64:91:94:5d:d9:ef:
                    53:88:f3:4b:90:a2:23:d7:cd:b9:9e:47:5f:09:48:
                    19:b0:75:2f:ae:6c:ce:f7:f0:f2:a6:45:30:a0:0d:
                    09:17:9b:e8:5f:6d:f0:35:33:2c:fc:6a:43:86:68:
                    23:42:d3:c4:ab:a3:c5:52:ba:29:0f:4d:2e:28:56:
                    45:06:c2:6f:0c:57:f7:3d:bf:c6:ac:c0:0e:0b:37:
                    eb:c9:20:00:e1:e6:1f:24:da:06:d1:f3:59:24:c1:
                    6d:4b:ef:bf:4b:81:58:f9:31:c2:5d:c2:0a:e7:6f:
                    43:c2:9c:c6:6d:4b:d0:71:f3:ac:bb:b0:97:a3:de:
                    4e:8f:97:d1:ba:61:33:ae:d1:51:b1:f8:46:76:9a:
                    3b:59:61:78:55:75:d9:27:3a:2e:03:02:08:11:3f:
                    5d:ee:66:0d:27:2a:4c:c5:c5:03:6c:a5:2f:12:4e:
                    1d:44:42:4d:69:3c:22:7a:eb:f2:b1:de:eb:3b:38:
                    24:6f:d6:3b:c8:98:f8:9a:a7:ee:bf:31:2e:85:18:
                    5d:03:af:24:4e:14:20:c3:8a:cb:b2:20:a7:d9:ec:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:36:F1:E2:A7:18:BF:A5:0E:0C:CD:4B:3D:18:2F:91:2F:08:0C
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e39302e3138342e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:68:07:7f:e8:13:35:f4:8a:c2:c1:14:3b:02:f8:8e:0b:
         34:b4:87:0d:fd:50:23:9c:6b:f7:c6:10:ef:dc:e4:98:a0:46:
         7a:49:49:07:39:f5:b3:c6:c8:da:89:95:7f:09:97:e8:19:30:
         05:61:14:64:0a:23:68:97:c1:6e:95:47:0e:9b:ca:b0:09:e7:
         1a:f3:7c:74:59:be:75:f8:ff:86:9e:88:ac:48:12:c6:e8:68:
         b3:7e:8d:05:7e:f6:ea:b4:c6:8c:78:8b:a9:73:b8:32:74:29:
         31:12:96:17:78:61:0f:de:a0:a5:d4:82:0f:e3:b9:b4:3e:3e:
         23:97:04:b1:0c:d5:79:da:8e:03:8c:d2:93:b6:47:1b:f7:cd:
         c4:87:e3:eb:de:a7:b2:a7:2f:cd:81:e4:04:fd:88:c8:38:ac:
         c9:0b:28:1d:10:63:31:ae:bc:b1:28:a6:51:9a:34:26:bd:1d:
         c1:47:e9:56:83:5c:71:39:50:d0:dc:f3:77:55:69:78:ac:31:
         a9:d0:8d:66:88:53:8e:ad:3e:63:cd:9e:dc:0c:7a:c1:77:0b:
         aa:f6:3a:e7:83:f2:20:af:18:39:dc:25:53:cc:cf:60:94:37:
         7a:4a:bf:92:70:33:c5:7a:d6:eb:00:c7:f1:87:9e:7a:42:0b:
         38:08:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org