Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa
File:                     3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          Fc3M6SnW36HfiuoDeMCpKB0XVy7nLOTVV5SosBOsfVE=
Subject key identifier:   C4:66:24:62:DF:BF:84:AF:A8:3B:78:1A:03:5C:FF:54:B6:25:AF:8D
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       10096C014F0493A29D2C81080BDA7AFE3AF8D514
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 02:00:00 +0000
ROA not before:           Fri 28 Jul 2023 01:55:00 +0000
ROA not after:            Fri 26 Jul 2024 02:00:00 +0000
asID:                     265187
IP address blocks:        168.90.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:09:6c:01:4f:04:93:a2:9d:2c:81:08:0b:da:7a:fe:3a:f8:d5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 01:55:00 2023 GMT
            Not After : Jul 26 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:d9:45:b4:7c:59:95:6a:1a:73:32:11:55:
                    2a:80:c2:7e:c8:80:b5:a7:7f:80:b4:ad:cc:28:75:
                    b5:42:70:97:55:c4:96:54:1f:84:90:18:22:c6:c0:
                    2b:17:0d:be:86:d4:40:ef:9f:49:56:5c:d6:4c:bb:
                    e2:8e:ec:7d:55:8b:f5:63:e3:7c:ab:1e:ec:00:c3:
                    e6:fc:d7:ba:13:37:15:40:72:90:a3:18:11:2d:89:
                    dd:b6:93:5d:0c:04:04:c4:93:96:a1:c9:0f:61:f9:
                    5a:ed:72:b9:f9:91:6c:5e:4f:f0:0b:a5:ca:52:b2:
                    b4:57:3a:cf:14:fe:b8:8e:a3:82:d1:7c:73:7e:c8:
                    76:bf:0f:cf:30:2b:55:8c:19:de:c2:71:9c:ee:68:
                    e6:7e:b1:de:bd:2d:76:ba:91:22:45:b6:3a:e8:a9:
                    f3:03:a3:f2:7c:c7:e1:07:65:f7:68:4c:54:20:42:
                    4e:25:8b:27:7a:d4:ae:fe:03:56:9e:d3:62:b4:a5:
                    0a:e8:a8:20:ee:d9:58:9e:1a:e8:32:d7:3d:4d:f6:
                    e7:63:66:df:c2:68:0d:89:4e:44:6c:8f:39:be:23:
                    47:34:33:2f:e5:52:d3:de:53:87:69:9d:b0:9e:fb:
                    99:8a:13:56:8a:03:19:dd:77:76:44:84:ea:b7:c4:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:66:24:62:DF:BF:84:AF:A8:3B:78:1A:03:5C:FF:54:B6:25:AF:8D
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:47:a1:44:13:20:d5:5c:c0:05:00:2c:2d:bd:cf:80:30:ba:
         2b:17:65:a0:46:5a:7c:f9:b5:d2:df:59:f2:4b:0b:79:51:40:
         08:6a:4d:3b:4a:b9:79:05:b8:e6:cc:d2:fd:24:d0:e1:81:d6:
         4c:e2:e8:d4:9e:f4:eb:f8:41:b4:9c:c3:85:b1:8c:8c:13:70:
         0d:45:8f:c2:93:d0:bc:95:c2:d2:23:47:94:e7:dc:71:4d:63:
         05:74:2d:3c:04:de:cd:ba:e7:38:33:4d:a4:44:fb:3f:30:81:
         24:c2:ef:8c:e7:17:43:31:0d:87:e3:3b:03:f1:f0:32:15:dc:
         85:c4:38:b0:0c:1a:1e:f4:51:65:2f:ef:ce:5f:c2:10:81:13:
         bf:ef:3c:65:5c:07:2c:f4:ca:22:8d:6b:1b:b0:ed:f3:c4:c3:
         ca:51:1a:11:f5:ee:55:aa:ab:5a:fe:54:8f:8f:c2:6f:24:45:
         0b:9c:c7:47:cc:9d:c6:7e:ce:4b:3a:48:61:13:e2:0d:33:8f:
         09:84:05:c3:13:b1:74:4f:96:b2:1c:8a:f6:88:3d:5a:04:a1:
         68:90:bc:82:0d:91:fb:ce:6f:17:20:99:30:88:82:13:dd:84:
         4a:87:25:92:ac:16:d1:55:75:c9:a5:34:c8:fd:8c:ec:09:fe:
         5f:a5:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org