Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (raw, json)
Hash identifier:          YP9iPq0Fm0nLDchZ6Y8rszal9e4wrlTDvt/fuRSrYyo=
Subject key identifier:   4D:C2:A6:4E:3C:10:66:CC:1A:94:E1:CB:0C:FA:06:3E:84:F2:89:09
Certificate issuer:       /CN=92AB6D40A4BFAB962C103D49F32B13BE572A9636
Certificate serial:       07EA8172EFCF68EA627AFF6076BABA1B826E6157
Authority key identifier: 92:AB:6D:40:A4:BF:AB:96:2C:10:3D:49:F3:2B:13:BE:57:2A:96:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92AB6D40A4BFAB962C103D49F32B13BE572A9636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa
Signing time:             Wed 03 Apr 2024 13:25:27 +0000
ROA not before:           Wed 03 Apr 2024 13:20:27 +0000
ROA not after:            Wed 02 Apr 2025 13:25:27 +0000
asID:                     265290
IP address blocks:        168.90.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ea:81:72:ef:cf:68:ea:62:7a:ff:60:76:ba:ba:1b:82:6e:61:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92AB6D40A4BFAB962C103D49F32B13BE572A9636
        Validity
            Not Before: Apr  3 13:20:27 2024 GMT
            Not After : Apr  2 13:25:27 2025 GMT
        Subject: CN=4DC2A64E3C1066CC1A94E1CB0CFA063E84F28909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:7c:94:ac:a8:9d:b8:e7:91:d2:73:1a:86:
                    6a:e8:0f:da:df:ce:46:cf:69:8c:66:e7:f8:d1:7b:
                    71:a0:8a:4c:7e:55:b5:0d:e0:af:20:77:18:b7:47:
                    2d:8b:63:57:67:c2:f0:f3:eb:48:b3:3c:fa:80:79:
                    a5:36:ce:3f:0d:50:8b:e8:07:35:8e:cb:8f:bb:38:
                    b4:9c:c7:43:cb:55:ea:6a:97:df:e6:60:76:d4:80:
                    b6:41:cf:9b:31:6e:24:1b:bf:f9:98:58:51:a8:88:
                    00:ad:9c:d9:45:be:d4:59:7e:c6:2c:7d:a6:5e:dc:
                    5c:43:3a:3f:ce:ae:8e:f9:7a:55:69:97:3c:40:a3:
                    bc:80:a2:1f:a5:1d:0b:90:88:c6:0f:6a:22:ba:c1:
                    02:7f:29:4c:44:31:51:b5:4f:6c:4f:4b:f8:0a:db:
                    fb:9a:f7:0a:71:6e:57:03:4e:59:06:c7:14:3a:c7:
                    d3:fb:e1:6b:c5:20:ff:fa:17:1c:05:c7:55:77:26:
                    78:07:eb:68:1e:20:df:4a:b1:fc:8c:28:26:fd:e0:
                    7c:4e:16:b4:93:f7:3f:35:97:cf:e8:0c:9b:29:54:
                    26:9a:f9:75:24:21:70:64:63:f7:1f:80:e1:48:97:
                    4b:08:80:be:26:da:56:bf:8e:76:62:d8:df:26:7d:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C2:A6:4E:3C:10:66:CC:1A:94:E1:CB:0C:FA:06:3E:84:F2:89:09
            X509v3 Authority Key Identifier:
                keyid:92:AB:6D:40:A4:BF:AB:96:2C:10:3D:49:F3:2B:13:BE:57:2A:96:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/92AB6D40A4BFAB962C103D49F32B13BE572A9636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92AB6D40A4BFAB962C103D49F32B13BE572A9636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:38:fb:98:e7:e3:dc:7d:e0:78:ae:ab:7c:a9:5d:bb:25:c0:
         dd:3b:2e:28:c4:49:b1:c0:b1:3b:97:36:f3:d4:7e:7d:84:76:
         6b:7c:a6:20:37:e0:fe:57:6e:3a:97:23:b4:d6:01:a4:11:5a:
         dc:8a:23:30:77:b2:40:7b:96:62:98:ce:29:55:19:56:0d:ed:
         de:be:da:db:99:58:47:87:ee:30:3b:f8:5d:c2:3f:dc:99:ad:
         1e:06:47:ca:e1:35:77:7f:ec:9f:87:83:b8:d7:c3:49:4d:01:
         ae:ac:4d:71:76:08:dd:77:f2:cc:ae:63:89:48:63:2d:62:12:
         3d:53:68:a5:b3:70:74:5b:54:a4:61:5c:a6:4c:87:38:4c:a7:
         3a:1f:13:b6:1c:73:6d:70:db:00:77:b8:96:59:80:49:1b:0f:
         06:ac:5d:e3:0e:a6:4a:1a:3a:3d:57:72:02:fb:4d:bd:dc:01:
         e1:26:e4:a7:7c:23:d4:99:18:09:d6:df:7e:69:93:a4:11:c2:
         6d:e7:73:c4:3e:d6:aa:3a:8f:be:a3:74:ee:7b:d9:9a:4d:3e:
         8e:0e:6b:69:f7:98:51:73:69:c8:82:2f:46:f5:11:01:6f:36:
         4c:b0:16:a8:29:94:bb:a3:60:37:9e:25:0e:ed:02:15:35:a6:
         80:1c:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org