Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131332e302f32342d3234203d3e20323635313837.roa
File:                     3136382e39302e3131332e302f32342d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          otJMC7783CbyuJqZlx9ZbE+E2VutH4NYzC4b/d43zuo=
Subject key identifier:   B2:52:EF:F8:C6:1E:D6:0E:E2:CE:DB:DD:2E:1B:37:FD:DE:AB:0C:4D
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       08C2D9A950D3B7B4B2DF897386AF872A08971B92
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131332e302f32342d3234203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        168.90.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c2:d9:a9:50:d3:b7:b4:b2:df:89:73:86:af:87:2a:08:97:1b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject: CN=3082010A0282010100CBB87244431ADC6A15F3FE865640E1FF00AFC4E70765EA650ED3187CA9A6638A5A1F5E51F645298683ED4CBF34F52133D906AC598032AB0AA079CCAEA69D4D2BAE8BC2AD7120C645131732A7FE7530748905B15472D14FEE265D9984D46EFD6A861B2DDB11B9ED9153FAB7E98B1510C2DBA4CC387D4EC10DD88A27A26D87789E649F3F1E1B9AED4C8C3A634173729935CD42178D420A25A8CCE7F927BE6E259522A6B6DD3510C964A9E5D40F0BBC88453FE01A98FA4330863370B175C604FB81C81484824D7CD65158264F3D0C4C1A19FFEBED6168CFC9920099C6CEB6FD96BAC1188ED635EACF0C6F0AC9B0E81ADE7FDBE14C5261C08899D791DC446B50C6A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:72:44:43:1a:dc:6a:15:f3:fe:86:56:40:
                    e1:ff:00:af:c4:e7:07:65:ea:65:0e:d3:18:7c:a9:
                    a6:63:8a:5a:1f:5e:51:f6:45:29:86:83:ed:4c:bf:
                    34:f5:21:33:d9:06:ac:59:80:32:ab:0a:a0:79:cc:
                    ae:a6:9d:4d:2b:ae:8b:c2:ad:71:20:c6:45:13:17:
                    32:a7:fe:75:30:74:89:05:b1:54:72:d1:4f:ee:26:
                    5d:99:84:d4:6e:fd:6a:86:1b:2d:db:11:b9:ed:91:
                    53:fa:b7:e9:8b:15:10:c2:db:a4:cc:38:7d:4e:c1:
                    0d:d8:8a:27:a2:6d:87:78:9e:64:9f:3f:1e:1b:9a:
                    ed:4c:8c:3a:63:41:73:72:99:35:cd:42:17:8d:42:
                    0a:25:a8:cc:e7:f9:27:be:6e:25:95:22:a6:b6:dd:
                    35:10:c9:64:a9:e5:d4:0f:0b:bc:88:45:3f:e0:1a:
                    98:fa:43:30:86:33:70:b1:75:c6:04:fb:81:c8:14:
                    84:82:4d:7c:d6:51:58:26:4f:3d:0c:4c:1a:19:ff:
                    eb:ed:61:68:cf:c9:92:00:99:c6:ce:b6:fd:96:ba:
                    c1:18:8e:d6:35:ea:cf:0c:6f:0a:c9:b0:e8:1a:de:
                    7f:db:e1:4c:52:61:c0:88:99:d7:91:dc:44:6b:50:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:EF:F8:C6:1E:D6:0E:E2:CE:DB:DD:2E:1B:37:FD:DE:AB:0C:4D
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131332e302f32342d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:77:48:e0:b6:a7:77:22:79:4f:fe:cf:63:e0:ba:db:c8:
         1a:3b:07:f6:45:92:83:ee:be:46:ee:2f:4e:dc:40:ad:c1:a7:
         b7:d7:79:89:1d:23:77:1c:40:17:d8:a4:8a:07:1b:14:2a:bb:
         de:f5:89:f5:10:bf:7f:30:de:2d:f1:85:b7:cb:53:26:b3:c5:
         43:e8:cf:30:25:1f:e2:62:77:35:02:7b:80:fe:65:8d:9e:35:
         95:6d:62:71:d9:18:cf:38:10:ca:db:4b:82:e9:9a:0b:ae:d1:
         b6:67:19:d5:de:ae:ec:82:12:09:94:66:80:e4:4a:b2:bc:c8:
         f2:37:df:f9:0d:81:81:e7:be:38:96:b2:1f:20:f5:3a:dc:25:
         80:bc:8b:32:f6:b3:ca:40:5c:9d:4a:a4:97:d5:80:6f:87:11:
         7f:42:0b:27:c9:88:39:fc:64:82:dc:20:75:09:61:d2:5c:0e:
         3f:d0:31:d0:1d:cc:d3:70:6c:14:dc:bf:bc:fc:9c:c7:ad:a1:
         47:13:ec:79:10:c1:4f:0e:30:5c:f6:65:0d:f1:f4:f6:5b:9a:
         08:44:a6:a6:18:b3:84:4c:9f:58:af:24:c1:6a:52:1e:1a:95:
         9c:cb:39:ef:d3:84:26:f9:1a:e7:06:05:34:fd:51:98:06:c7:
         1b:ee:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org