Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          Vh9Vk6ywYho03yR+BZd7B5ecFRfltYFXHD2j7GlY8Xk=
Subject key identifier:   63:7F:21:DE:64:29:E5:0F:D5:EB:FB:33:1B:9C:85:15:2D:AD:D6:F2
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       17149CC8EF8DD71113E02E04984A2FABFC508639
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:24 +0000
ROA not before:           Fri 28 Jul 2023 17:37:24 +0000
ROA not after:            Fri 26 Jul 2024 17:42:24 +0000
asID:                     265364
IP address blocks:        168.205.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:14:9c:c8:ef:8d:d7:11:13:e0:2e:04:98:4a:2f:ab:fc:50:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:24 2023 GMT
            Not After : Jul 26 17:42:24 2024 GMT
        Subject: CN=637F21DE6429E50FD5EBFB331B9C85152DADD6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:16:22:7f:b7:8b:98:55:64:8c:9d:e2:53:
                    c0:fc:5e:5c:ba:53:77:ff:b0:58:52:d7:e1:b3:5a:
                    d7:bd:89:cb:33:2f:c6:d6:e0:ca:ca:8c:87:62:cc:
                    d2:89:7e:ac:91:06:32:0f:3f:0e:9f:4a:f5:63:f5:
                    98:cf:96:e4:2d:95:c1:e9:3b:5b:17:a6:f6:eb:73:
                    fb:03:95:bf:b2:c3:e5:68:37:5c:42:44:e3:ff:8d:
                    54:cf:d9:9c:58:ba:dd:76:8c:94:bf:f5:2e:d5:63:
                    fe:ef:36:62:52:33:96:a6:59:1b:c7:ab:77:ee:87:
                    cf:2d:ec:ad:ce:9d:cb:27:c3:4e:c2:84:0e:c2:3a:
                    65:f1:cf:33:e2:d7:95:c7:86:cf:91:82:c9:f1:2d:
                    b4:9e:46:e4:34:62:66:f5:e4:fe:88:d3:8c:a1:8a:
                    94:40:60:2e:d5:0f:78:66:03:cc:56:ff:30:84:12:
                    ed:1c:da:5e:27:20:43:5b:0d:e3:bb:49:25:4b:50:
                    60:ae:5d:5d:76:f6:ca:54:4b:fd:03:c2:1a:66:d3:
                    a6:0e:a0:25:97:93:59:9a:e5:46:cd:63:20:48:cb:
                    0f:76:b4:e3:cb:98:8a:ff:1f:ae:1b:9b:62:90:bc:
                    83:d1:c8:b0:17:98:63:99:31:31:53:c8:d1:6f:35:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7F:21:DE:64:29:E5:0F:D5:EB:FB:33:1B:9C:85:15:2D:AD:D6:F2
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d3:59:8e:d0:3e:73:e7:53:83:2d:f5:b2:a4:bd:62:78:7b:
         b9:dc:1e:ab:59:de:1c:5d:b1:5c:5e:14:db:94:ee:23:60:5c:
         54:93:9e:ec:a2:bc:25:2c:b8:3d:5b:ed:dc:e0:39:0a:98:7f:
         a8:14:61:a2:de:aa:dc:04:4e:80:54:aa:e0:df:54:c2:4b:ef:
         42:87:70:5d:17:a7:5b:4c:c5:7e:6e:73:07:2c:0b:f2:44:3e:
         10:58:cf:27:73:ff:6d:e7:97:3f:76:28:05:d0:59:3b:c3:75:
         ac:87:ca:91:5b:6c:30:3d:6b:81:09:29:8e:94:61:f3:a0:74:
         3b:3a:d0:a9:8d:84:a3:ad:7e:5b:ca:5f:16:ac:12:ea:dc:53:
         e9:06:04:ad:10:d8:cf:f1:25:53:89:39:85:44:91:35:63:b0:
         61:2a:46:9a:44:04:1f:e1:09:53:45:f7:a5:16:1f:fe:4b:69:
         44:b8:a8:67:af:57:f0:a8:64:59:65:b7:49:51:59:07:6d:8c:
         7b:fb:b7:51:0c:41:89:c2:31:65:02:61:aa:eb:79:75:49:f8:
         33:96:fd:5f:7c:b2:d0:cb:b7:02:1e:bc:c0:6b:50:75:c0:43:
         04:1e:2a:bf:03:41:50:2c:21:39:7b:81:9e:5b:fc:6e:07:da:
         ba:63:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org