Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3232203d3e20323635313837.roa
File:                     3136382e39302e3131322e302f32322d3232203d3e20323635313837.roa (raw, json)
Hash identifier:          3UW2DYq2zIJQCdWmMK6NjBPo/cDlC50V7ecoUInfNBw=
Subject key identifier:   93:50:B7:25:96:82:30:62:B5:6E:80:E1:B8:08:90:54:6B:21:BD:BE
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       3CC7DDE68F284814EDA6E011016EF603CEF27CEA
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3232203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        168.90.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c7:dd:e6:8f:28:48:14:ed:a6:e0:11:01:6e:f6:03:ce:f2:7c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:22:15:01:84:58:eb:48:6f:89:d7:22:11:
                    2d:f1:cb:0b:d1:dc:d5:b8:94:7f:bb:22:17:54:bd:
                    bc:45:fd:cf:4f:0e:3f:e3:5b:ed:f5:fa:6c:3e:c2:
                    32:62:f3:99:fc:c2:00:06:fc:7c:43:39:b8:24:9d:
                    7f:fd:a2:6d:32:3f:33:fb:83:ea:68:6d:f8:59:ce:
                    94:ac:38:cc:c0:0e:d1:a8:fe:0e:75:35:b6:29:6a:
                    0c:bd:cf:95:cc:08:4e:d8:a5:59:91:60:ee:72:a3:
                    67:f1:d0:a0:ac:93:c7:08:5f:90:32:32:f4:fe:62:
                    0a:ca:e6:0b:69:66:93:0b:6f:38:67:6a:88:03:fe:
                    b1:92:9e:1b:b7:cd:01:bf:49:e0:8a:72:e0:b2:b7:
                    e8:7f:93:01:10:8d:3c:a6:8b:3b:c8:b5:a0:7f:ac:
                    e2:aa:ef:3d:ff:c7:5c:90:e9:fa:0a:a9:32:12:08:
                    57:74:86:cf:4c:d3:4d:21:ea:66:74:72:23:2c:3d:
                    0b:e0:b9:5a:e3:29:02:f7:0a:52:7c:07:53:77:a0:
                    cd:51:87:6c:21:0f:22:2a:02:38:d9:08:52:8b:ca:
                    4f:5a:99:d2:1c:21:03:f9:d6:30:c0:d7:88:b3:29:
                    5f:39:c6:01:06:e8:fd:62:06:90:d9:4b:03:27:bf:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:50:B7:25:96:82:30:62:B5:6E:80:E1:B8:08:90:54:6B:21:BD:BE
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3232203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:85:37:ff:ef:e7:63:5e:1b:91:55:7e:e9:69:26:79:5b:33:
         9f:53:d3:2a:82:75:a0:b1:c1:b6:66:fe:c4:b0:b9:77:7e:62:
         ec:f5:15:4c:ff:01:64:e9:d6:6a:13:a5:a3:f4:24:ca:0d:7b:
         42:78:81:e1:0d:4f:d4:b1:a1:98:4b:e3:83:32:79:3b:1a:29:
         3f:4b:61:97:72:b2:53:25:a9:12:16:78:15:58:c1:60:b1:4f:
         c1:67:b3:33:d9:71:32:25:97:cb:cf:8a:73:2a:94:f6:dd:31:
         af:a8:9d:3e:90:fd:36:96:49:52:f8:4c:4e:a1:3b:4f:31:c2:
         44:9b:82:8e:cb:16:4f:29:18:1d:62:e7:c8:0a:cd:a4:f8:61:
         b3:81:ff:e2:74:15:f0:a2:b2:6f:1c:17:5d:6f:b2:8a:4b:b8:
         0a:cf:a9:dd:d5:3f:e2:e6:da:9e:ae:f3:67:b1:23:aa:ed:34:
         f8:d8:57:2b:85:72:12:93:c7:24:16:73:46:16:ea:a9:9c:67:
         ad:eb:a1:aa:0c:57:98:8b:5e:ca:ac:a8:ce:d2:89:58:4e:3a:
         6d:5e:f5:31:c7:a9:ce:db:5f:a6:af:a6:e7:e2:f5:18:4a:69:
         23:62:bd:2e:97:9c:a4:cc:58:50:72:d2:ca:10:8f:09:64:67:
         9d:f2:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org