Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3233203d3e20323633333231.roa
File:                     3136382e39302e32342e302f32322d3233203d3e20323633333231.roa (raw, json)
Hash identifier:          QxxNqtfLw/jya5RWWpgi+018WaZ0u0+pdovV8Y2+jw4=
Subject key identifier:   50:BF:D6:E1:96:BF:D9:B4:F2:EB:2D:10:AB:DA:1D:7F:1C:AB:A2:E3
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       23E797DE89457C61C1DB1344CE6A52ADB44DF496
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3233203d3e20323633333231.roa
Signing time:             Tue 12 Sep 2023 16:35:56 +0000
ROA not before:           Tue 12 Sep 2023 16:30:56 +0000
ROA not after:            Tue 10 Sep 2024 16:35:56 +0000
asID:                     263321
IP address blocks:        168.90.24.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e7:97:de:89:45:7c:61:c1:db:13:44:ce:6a:52:ad:b4:4d:f4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Sep 12 16:30:56 2023 GMT
            Not After : Sep 10 16:35:56 2024 GMT
        Subject: CN=50BFD6E196BFD9B4F2EB2D10ABDA1D7F1CABA2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:cc:72:55:77:50:80:09:00:2b:86:b8:05:
                    d1:40:9b:1f:99:23:f8:38:9f:76:22:41:93:d9:da:
                    ba:48:da:79:90:ae:4e:27:fa:73:e0:4a:0c:da:06:
                    49:5a:54:6a:7e:df:8c:65:70:0e:bd:b0:c3:f8:aa:
                    9e:69:c6:37:45:e3:1c:2a:28:7e:a5:35:fb:fb:ed:
                    96:af:28:36:a2:0c:56:dc:cf:96:69:ce:48:fe:1d:
                    64:ef:ab:12:51:6a:78:3d:39:cf:e2:bd:01:a3:b1:
                    b2:48:2a:85:bd:24:1e:0a:30:a6:c4:e3:5a:81:1a:
                    bd:d3:07:ea:e3:45:0a:82:f4:d3:1e:aa:aa:c3:40:
                    13:13:ae:9a:30:6b:78:15:43:d1:27:f6:a3:c4:65:
                    74:eb:b0:71:d4:d1:ad:02:ea:f1:ae:48:75:ef:28:
                    d5:63:bd:70:47:b3:b0:4e:15:22:42:34:8b:34:55:
                    90:1f:61:c4:64:f4:c6:35:7c:31:02:26:5f:49:dd:
                    00:dd:34:d2:0a:a6:02:6c:33:b3:3d:99:41:ac:8a:
                    01:41:f4:74:53:63:69:22:5b:85:98:a4:0d:7d:c8:
                    65:9a:8e:bc:5c:c0:b4:cb:92:38:d0:75:97:c6:f3:
                    a7:51:ed:ca:10:47:16:37:91:af:48:6f:fa:cd:b6:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:D6:E1:96:BF:D9:B4:F2:EB:2D:10:AB:DA:1D:7F:1C:AB:A2:E3
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3136382e39302e32342e302f32322d3233203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:60:ed:d2:01:eb:83:9f:b0:64:e6:15:f9:1e:7a:e9:91:
         28:e3:96:39:cc:3b:17:e3:dd:0c:33:fc:af:c9:b3:6f:a4:72:
         30:95:68:e0:31:34:67:af:c7:fe:1d:53:f1:b6:05:e6:fb:04:
         da:ae:a7:2d:85:2c:69:ab:6c:ad:4c:0f:7d:00:ac:1d:62:6a:
         7f:b9:4c:85:dc:ba:31:21:d6:2c:7f:60:9c:af:ee:fe:db:03:
         dc:48:ac:43:ce:f1:97:c7:d8:49:79:52:f4:4d:1c:7f:46:aa:
         87:c3:f5:b4:43:00:6a:1f:54:49:82:69:dc:0c:51:b9:87:df:
         1d:c7:0f:d6:7b:ae:90:2b:33:df:53:94:e7:b7:77:73:e2:43:
         52:f5:77:d2:9e:02:dd:07:c3:70:78:a3:08:f7:12:04:2a:05:
         13:d3:96:d0:16:85:8b:80:0d:cb:32:63:91:90:dd:ed:86:48:
         c0:5f:15:54:46:11:f1:07:27:d7:f2:33:60:92:81:fd:30:98:
         78:03:f2:19:ab:56:89:9a:ae:09:b9:85:79:4c:cd:fa:67:96:
         e3:48:d7:c1:8a:70:a9:9a:a8:23:e6:b6:1e:75:6b:2a:c9:b5:
         ea:43:97:9a:05:ef:dc:5d:72:d5:83:66:69:0c:f4:d3:bd:8e:
         2e:cd:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org