Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132342e302f32332d3233203d3e20323634343436.roa
File:                     3136382e39302e3132342e302f32332d3233203d3e20323634343436.roa (raw, json)
Hash identifier:          Uu2Tv/SFh07/vtv4yqfypf0qHNVFIywyj5dPmWxIQj8=
Subject key identifier:   F7:6D:7D:60:18:2F:71:D2:82:C4:B6:C5:A3:6E:5B:97:91:37:D3:99
Certificate issuer:       /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial:       3E1DB55E595A996062A9E48818273C7783AD9B68
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132342e302f32332d3233203d3e20323634343436.roa
Signing time:             Tue 02 May 2023 16:14:21 +0000
ROA not before:           Tue 02 May 2023 16:09:21 +0000
ROA not after:            Tue 30 Apr 2024 16:14:21 +0000
asID:                     264446
IP address blocks:        168.90.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1d:b5:5e:59:5a:99:60:62:a9:e4:88:18:27:3c:77:83:ad:9b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
        Validity
            Not Before: May  2 16:09:21 2023 GMT
            Not After : Apr 30 16:14:21 2024 GMT
        Subject: CN=F76D7D60182F71D282C4B6C5A36E5B979137D399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:4e:5f:3c:ac:9c:b2:5f:ab:fc:92:7b:d0:
                    65:8a:88:39:a4:17:fe:13:fd:52:dd:ff:a0:d6:ed:
                    78:73:50:4d:73:e9:2b:8f:e0:d9:9d:14:88:2b:fc:
                    2d:1e:73:0c:e0:4b:33:47:7f:dd:26:f6:b2:0c:ab:
                    5c:55:1f:50:d9:cd:84:69:f3:ba:bd:18:53:7e:4a:
                    94:d7:ca:ba:0f:b6:2f:9a:b0:0a:18:96:44:9b:b8:
                    c6:a3:bc:8b:f8:d8:61:f1:c9:48:89:4d:7a:55:8d:
                    e8:ff:0c:fd:49:11:47:a0:ff:f9:74:5e:52:33:10:
                    02:ba:24:50:c5:71:55:0c:8d:2b:cf:86:28:0c:5c:
                    53:4e:d0:e7:cb:c5:fb:a3:88:b0:b8:6f:96:23:24:
                    a5:58:76:58:e4:30:a1:2e:3a:11:21:ab:7a:a3:35:
                    5f:8d:f1:07:5f:a2:7d:c1:0e:77:25:ab:ac:ae:d1:
                    48:c1:d0:ed:ef:77:7d:67:57:dd:61:c3:11:18:b5:
                    b9:87:8f:63:67:45:19:0b:e9:d5:b7:6e:c4:42:e3:
                    ba:4c:d3:c5:31:d7:5e:67:0c:f1:50:03:fa:fc:f1:
                    be:55:10:58:17:19:fa:2c:b4:98:cd:e5:73:c3:2a:
                    89:d6:3d:84:76:f6:04:fe:57:db:5a:79:6d:51:d9:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6D:7D:60:18:2F:71:D2:82:C4:B6:C5:A3:6E:5B:97:91:37:D3:99
            X509v3 Authority Key Identifier:
                keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132342e302f32332d3233203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:5e:6c:6c:b4:43:7c:7e:42:bc:e2:88:39:ef:83:8d:2a:
         c7:ab:19:5b:eb:c2:f4:6b:13:7f:0f:88:83:69:3a:17:9f:a0:
         7d:2e:98:58:97:6e:4c:96:7c:2b:68:38:63:ec:d4:af:15:1a:
         db:5e:c6:4b:cf:b8:d5:05:13:20:b5:16:2a:96:4d:a1:97:cc:
         16:ed:81:b1:9e:d3:7f:2e:23:65:22:0a:3e:b9:f5:ee:4e:bb:
         04:b0:63:10:31:dc:33:dd:68:9e:c6:08:dd:ba:d8:30:fc:6e:
         d0:56:20:1b:8f:74:47:65:a1:7a:fe:8b:f9:97:f0:48:58:6e:
         8f:2d:b5:2f:e5:d3:65:c9:8b:a1:b8:b2:ee:55:82:8f:ec:4f:
         8b:52:68:64:d6:53:b0:2a:59:5b:78:0d:65:e8:79:a5:26:0c:
         bc:89:ab:58:9f:fa:cc:94:b6:3e:01:9f:5b:f4:d1:7d:9b:7d:
         46:21:44:a2:2a:ac:6a:91:63:ce:3b:79:ea:3f:51:20:10:69:
         58:c2:26:ad:d5:14:fc:85:df:15:48:7c:bb:4e:8b:8f:8d:96:
         7e:52:ce:10:40:43:a4:f5:db:8d:68:0c:14:27:31:51:84:28:
         f5:4e:df:85:d8:11:f5:15:63:6f:56:2b:62:e8:2b:c0:92:56:
         88:da:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org