Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32332d3233203d3e20323635313837.roa
File:                     3136382e39302e3131342e302f32332d3233203d3e20323635313837.roa (raw, json)
Hash identifier:          lZRp7FZsB7vE/jlOFYVaQxSgoErX3EiglaYD9iumsJI=
Subject key identifier:   07:23:CB:AA:6E:03:B5:EB:BD:95:0F:DD:FB:56:AD:29:77:80:8F:A7
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       52B3CE0C3C62D38AA5B1CF85873752B916071241
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32332d3233203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        168.90.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b3:ce:0c:3c:62:d3:8a:a5:b1:cf:85:87:37:52:b9:16:07:12:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:fb:59:18:88:a1:a8:6c:3b:ce:96:03:35:
                    26:45:bf:61:53:92:78:ae:d4:49:20:35:90:f5:54:
                    c5:fe:f4:96:de:7f:41:61:81:de:b3:30:f1:bf:d7:
                    2b:bf:1e:40:b8:20:c0:ca:6d:51:07:eb:52:c6:33:
                    fa:ee:59:c5:d8:5f:0a:7a:f1:1d:d6:4e:46:5c:23:
                    48:3d:4f:27:15:5d:7a:c0:25:a4:c3:a7:de:8b:1c:
                    91:db:8d:c5:e9:e5:ce:20:04:ee:f5:20:e8:a3:fa:
                    a8:89:5f:5b:a3:e7:21:69:e6:1b:21:ed:8b:84:ea:
                    cf:02:ce:47:77:32:53:8e:cb:6f:ad:3a:18:7c:74:
                    ad:45:0f:38:4e:15:f7:48:03:55:f7:d0:f3:6f:1c:
                    bc:d7:75:b1:e2:e1:fc:18:d9:2f:65:df:0c:8f:85:
                    f0:08:dd:91:2b:05:58:2e:a7:2a:f0:a7:a4:1a:b0:
                    0b:6b:55:d7:27:cc:4d:d9:58:bb:e1:87:66:83:c9:
                    13:1d:94:62:0f:c0:56:8b:00:56:11:17:7c:2c:ee:
                    0a:74:de:28:99:9a:bc:00:be:76:38:35:49:0b:9f:
                    9b:35:55:d7:f8:86:fb:22:a5:66:e1:72:cd:50:0a:
                    36:cd:46:9e:c1:aa:ea:75:5e:93:94:64:c5:43:25:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:CB:AA:6E:03:B5:EB:BD:95:0F:DD:FB:56:AD:29:77:80:8F:A7
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32332d3233203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:d7:84:fe:17:9f:2d:79:56:7a:ee:d8:ff:d5:a0:a2:4a:
         42:8f:7c:3c:15:42:75:a2:e0:32:3f:e5:78:58:79:d4:fd:6d:
         4b:58:f5:a6:20:00:1e:72:a5:29:7c:8f:67:18:63:01:b6:04:
         9f:fa:96:c4:75:e6:7a:e0:36:d4:18:fa:83:3f:40:9b:e8:66:
         a9:31:b1:34:0f:06:43:28:b5:5a:90:ba:d3:f7:81:be:a0:62:
         57:94:68:f6:d5:de:1e:4d:4f:b3:cf:00:67:23:c5:d4:ff:67:
         32:a7:d6:fc:1e:99:53:a0:b1:8c:9e:f3:89:3a:68:77:9d:6d:
         69:50:e9:4d:ba:62:a6:e7:64:3f:ea:6a:a9:0a:47:ae:8e:d9:
         ed:3e:4b:f0:0e:f0:95:16:68:7a:ad:fb:ac:b8:54:be:f1:04:
         ad:ae:a6:7d:c2:7a:28:4a:d4:c9:f6:6a:41:c9:59:c4:aa:29:
         4d:9c:30:33:4b:f9:31:62:4b:1b:f4:f0:4a:ae:bf:18:58:56:
         a6:5c:aa:fb:61:f2:a3:f8:88:e6:0d:b2:89:a9:71:07:50:26:
         e9:95:d3:0d:44:60:3e:71:33:f3:fd:18:cf:95:a2:41:2f:b0:
         79:65:7b:63:23:e7:0b:c4:2e:73:4c:e5:01:f3:e1:9c:0f:9f:
         3a:a9:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org