Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa
File:                     3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa (raw, json)
Hash identifier:          1E8ke5wku9Ni5cAMxT3eaQLyCyxotG6TXDui8bv9wxg=
Subject key identifier:   D0:49:15:8D:04:CC:F8:FB:C4:94:FC:28:5A:DE:06:0A:C6:6C:81:FD
Certificate issuer:       /CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
Certificate serial:       41D9C801A97FDEDABE747B7121320D34BA9A0526
Authority key identifier: 7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa
Signing time:             Tue 12 Mar 2024 18:40:43 +0000
ROA not before:           Tue 12 Mar 2024 18:35:43 +0000
ROA not after:            Tue 11 Mar 2025 18:40:43 +0000
asID:                     265276
IP address blocks:        168.90.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:c8:01:a9:7f:de:da:be:74:7b:71:21:32:0d:34:ba:9a:05:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
        Validity
            Not Before: Mar 12 18:35:43 2024 GMT
            Not After : Mar 11 18:40:43 2025 GMT
        Subject: CN=D049158D04CCF8FBC494FC285ADE060AC66C81FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:22:6c:11:1b:b4:19:57:9e:a3:b9:b3:03:
                    5c:7c:97:ee:76:19:59:db:23:16:c2:9e:38:72:19:
                    d3:df:3d:fe:4d:a4:2c:3f:09:0a:e4:fa:6e:ae:6f:
                    b4:d1:a3:c5:b4:3a:77:f4:9e:dc:dc:a2:7b:80:40:
                    90:87:05:68:a4:8b:db:3b:12:35:66:7e:27:e7:50:
                    54:77:dd:9c:21:0b:74:fc:25:60:0f:38:52:76:d6:
                    ae:44:bd:45:81:aa:e5:98:36:0e:0a:0c:8a:26:e6:
                    e3:3c:a0:e9:35:09:7b:85:ed:02:cb:2c:27:5d:1c:
                    73:f5:6b:ea:ae:a0:f6:82:f8:a8:a8:6f:1e:74:67:
                    cd:16:77:c2:a2:67:68:61:7f:e3:99:ac:db:b7:02:
                    1d:c8:1a:a6:47:2e:31:1d:04:be:bf:f2:b1:16:cf:
                    d8:75:da:26:32:c5:8d:11:07:e8:51:cd:7d:9c:cd:
                    4a:3c:85:a4:06:25:19:d8:ac:bb:65:13:61:b8:f3:
                    c1:0c:3f:57:e7:8d:1a:8c:f5:29:cf:9f:3c:4c:7c:
                    8a:2f:75:f8:03:a3:c4:80:9c:24:ed:f4:eb:0a:02:
                    e9:d8:c7:4c:18:aa:6f:81:ab:a9:71:37:db:a0:5e:
                    c7:c5:89:f4:a6:79:71:2e:22:1f:ca:87:a9:56:43:
                    84:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:15:8D:04:CC:F8:FB:C4:94:FC:28:5A:DE:06:0A:C6:6C:81:FD
            X509v3 Authority Key Identifier:
                keyid:7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:28:ac:6d:12:38:6f:71:27:49:d8:98:0d:b6:2e:cd:17:bf:
         f0:e3:ec:5b:14:88:6e:95:f7:6a:73:07:cb:aa:8d:9a:ab:91:
         13:91:26:7b:e4:7a:28:6d:6a:db:80:c6:e0:12:35:a0:53:74:
         8a:bc:99:ea:78:f3:38:20:98:7c:e2:d7:7f:ff:9b:db:a5:72:
         3c:b2:bd:73:76:3a:b2:ac:9f:03:9b:32:7b:44:1f:c3:67:a4:
         5d:a1:a1:44:3a:ad:52:ac:db:03:eb:49:e8:1d:dc:c5:1a:43:
         a3:40:7d:69:d1:f9:8f:a1:0b:5d:85:96:88:94:d8:de:65:f2:
         af:6f:50:a3:d0:bb:a2:20:12:87:7e:82:70:9f:68:0e:77:a1:
         c8:71:03:56:b0:06:ef:8e:63:14:09:cc:0a:3f:3c:d6:28:dc:
         f9:af:17:c9:39:4c:1b:01:6b:0f:e2:5b:11:56:d9:76:ce:14:
         80:94:ab:d6:af:dd:7d:bd:61:33:d0:0a:4f:ea:ce:99:53:50:
         03:11:ac:a7:27:88:34:65:6c:42:2e:7c:db:a6:0b:ac:04:b1:
         92:0e:ff:61:69:40:11:01:b4:a6:5f:c6:57:ed:92:f1:44:a1:
         26:39:42:34:be:72:33:5b:8b:35:f6:d2:31:64:9b:44:35:42:
         72:43:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org