Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/3136382e39302e3134302e302f32322d3332203d3e20323635323736.roa
File:                     3136382e39302e3134302e302f32322d3332203d3e20323635323736.roa (raw, json)
Hash identifier:          xTX9bP8w6C7/bpCshPGtV+AV+HN3PUGBX+/7URGi+gg=
Subject key identifier:   AA:CF:DA:66:F7:9C:AB:88:FB:55:C6:30:B0:6A:DA:84:71:49:83:15
Certificate issuer:       /CN=9AD015F7B9EB80FCB9CD824D2456519260917170
Certificate serial:       3E5D0165A695415C00F33F9EC8B57C05DC141297
Authority key identifier: 9A:D0:15:F7:B9:EB:80:FC:B9:CD:82:4D:24:56:51:92:60:91:71:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD015F7B9EB80FCB9CD824D2456519260917170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/3136382e39302e3134302e302f32322d3332203d3e20323635323736.roa
Signing time:             Mon 10 Apr 2023 17:12:14 +0000
ROA not before:           Mon 10 Apr 2023 17:07:14 +0000
ROA not after:            Mon 08 Apr 2024 17:12:14 +0000
asID:                     265276
IP address blocks:        168.90.140.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5d:01:65:a6:95:41:5c:00:f3:3f:9e:c8:b5:7c:05:dc:14:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD015F7B9EB80FCB9CD824D2456519260917170
        Validity
            Not Before: Apr 10 17:07:14 2023 GMT
            Not After : Apr  8 17:12:14 2024 GMT
        Subject: CN=AACFDA66F79CAB88FB55C630B06ADA8471498315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:5a:43:2b:53:f2:3d:d0:fc:5c:be:1a:0a:
                    48:b1:ca:46:b5:7a:27:6b:f1:01:25:2d:44:b9:31:
                    5f:09:af:39:ce:61:7c:db:49:a1:b6:53:88:72:e6:
                    cc:1c:59:6e:93:23:bb:23:a2:a4:9f:8b:60:47:cf:
                    69:a6:09:57:9d:49:ed:59:c8:b8:68:12:f1:5a:e2:
                    d4:69:7f:c0:2c:73:e3:a1:07:3d:81:45:f2:0a:ba:
                    a3:74:88:de:aa:0c:2a:65:c6:7a:38:b1:82:59:91:
                    e6:66:1e:2b:ac:1f:ec:df:17:e1:d5:e6:ab:84:58:
                    10:46:d2:bf:2f:5e:05:d7:81:c2:90:c3:45:22:ba:
                    c9:dd:d7:97:2f:97:ab:7b:ed:61:f0:4b:71:a0:00:
                    42:98:a8:ee:09:e2:fe:ad:b9:56:e9:54:0a:cf:31:
                    bb:19:44:06:d5:f8:c1:52:5c:4f:db:1c:be:7b:76:
                    9b:f9:2f:4a:c5:e9:13:f3:52:aa:60:f7:21:bf:b1:
                    a6:22:1f:74:bc:0c:d5:ae:95:16:a1:8e:2e:22:cc:
                    55:39:5d:21:d5:a6:3d:4e:56:6f:be:d7:be:f6:df:
                    e2:fc:d6:8e:1e:25:2c:9e:48:24:c6:6c:d0:7c:3e:
                    6c:6a:41:d7:9e:3b:4a:30:81:df:54:9c:d0:f4:31:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CF:DA:66:F7:9C:AB:88:FB:55:C6:30:B0:6A:DA:84:71:49:83:15
            X509v3 Authority Key Identifier:
                keyid:9A:D0:15:F7:B9:EB:80:FC:B9:CD:82:4D:24:56:51:92:60:91:71:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/9AD015F7B9EB80FCB9CD824D2456519260917170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD015F7B9EB80FCB9CD824D2456519260917170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/3136382e39302e3134302e302f32322d3332203d3e20323635323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:f8:9a:49:b6:7d:d1:d9:cc:5d:8a:37:3e:44:8b:b6:4a:
         e7:76:2b:6d:d2:be:80:9a:7a:53:1d:21:82:4d:21:b9:c9:ce:
         fd:f8:64:0e:01:ad:05:d6:79:93:7f:a3:31:78:43:43:40:40:
         27:e2:23:95:6c:c0:57:a0:ee:2e:f0:ec:1e:c3:f1:53:29:9c:
         9a:8b:94:74:46:ec:1a:82:f6:ef:26:6c:e4:a0:2d:39:67:c2:
         33:66:16:5b:16:84:a2:17:4a:92:b4:81:42:8e:92:fe:7d:eb:
         83:11:e2:15:05:20:b6:de:b8:98:e6:56:a5:2b:71:e1:f2:89:
         58:10:cb:15:f1:22:f6:e5:a9:f2:3c:a0:ac:11:d9:3f:54:47:
         f5:92:54:fb:fc:45:ad:25:15:eb:50:90:3d:db:ad:3f:c2:9a:
         e1:dc:a8:1b:2e:10:24:ce:77:20:db:05:b7:ac:87:bb:0c:0a:
         24:e5:d8:95:dc:10:d9:c2:50:90:f3:6a:17:f3:00:8e:a8:e2:
         de:47:88:42:ec:af:d1:d4:d1:dd:62:6a:44:ae:e6:91:62:f6:
         38:34:a8:2a:f6:37:2c:4d:9d:9c:8f:5d:e1:51:09:fd:ea:8e:
         e7:c6:16:5d:6e:52:d3:c8:51:88:64:f6:0c:5a:75:f1:98:19:
         ba:9e:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org