Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File:                     3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          l/w2GArC3oWcmUjVC5RxfruFXnLR63K0NlTlekMaKsc=
Subject key identifier:   23:68:25:34:2C:0F:B5:CF:BE:97:6D:E5:34:9E:2F:54:34:33:4A:F7
Certificate issuer:       /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial:       206AD1D98ED2D8A7CEC272294B933AFBB4643CAD
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time:             Sun 10 Dec 2023 14:29:48 +0000
ROA not before:           Sun 10 Dec 2023 14:24:48 +0000
ROA not after:            Sun 08 Dec 2024 14:29:48 +0000
asID:                     53062
IP address blocks:        168.90.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6a:d1:d9:8e:d2:d8:a7:ce:c2:72:29:4b:93:3a:fb:b4:64:3c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
        Validity
            Not Before: Dec 10 14:24:48 2023 GMT
            Not After : Dec  8 14:29:48 2024 GMT
        Subject: CN=236825342C0FB5CFBE976DE5349E2F5434334AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:42:f5:c6:45:86:1a:7a:fb:9b:a3:29:98:
                    21:bb:9b:f7:fd:46:7a:f6:7a:d1:37:d6:26:3b:09:
                    ea:80:73:f1:90:9c:00:0f:50:1d:8a:7c:71:e3:91:
                    06:cf:f5:bd:f8:63:5f:67:6b:ad:e4:6d:e4:13:e0:
                    ff:93:f5:2f:45:cc:66:50:b5:f6:92:0d:7f:e4:cf:
                    2d:7c:c4:0c:eb:1e:95:33:40:56:48:ed:03:9a:f4:
                    03:0b:a1:b5:66:55:f5:ed:81:01:e7:4c:b8:05:c2:
                    0e:e7:b3:9d:d1:1a:26:61:7a:77:a4:cb:44:e0:6d:
                    84:e5:82:7c:b8:53:c0:70:0f:fd:4b:f4:35:d2:c5:
                    19:fe:97:c7:28:19:fd:a6:eb:f5:b1:13:4d:2d:9a:
                    90:f1:fc:89:3f:b4:7c:77:85:c6:fa:36:ac:d4:cf:
                    0c:fc:fb:e8:3d:2d:b3:17:64:95:07:56:86:bb:27:
                    78:82:41:ce:6f:5f:b4:31:83:65:91:92:98:b3:83:
                    2c:e1:6b:06:f8:24:8d:0e:66:71:e4:5b:8c:ff:52:
                    05:18:b1:24:1e:de:68:b8:1d:d1:0e:a1:c7:ab:9c:
                    07:8b:63:4a:58:18:23:e9:6b:cd:f9:49:9e:d6:a8:
                    d5:65:60:20:27:55:44:04:67:f1:47:af:23:07:db:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:25:34:2C:0F:B5:CF:BE:97:6D:E5:34:9E:2F:54:34:33:4A:F7
            X509v3 Authority Key Identifier:
                keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:ce:0d:c2:30:21:62:9d:84:25:27:3a:3a:e6:39:a6:bd:
         35:46:9c:29:03:76:22:ac:dd:98:e5:66:1c:7b:a6:f3:24:2f:
         33:23:86:b5:21:81:d9:f8:91:fc:7d:25:91:54:fa:34:c1:76:
         5a:c2:7b:d4:3c:92:eb:38:96:8d:46:a6:96:ca:d9:29:5d:38:
         e3:a3:d9:5f:29:78:f2:27:a6:10:4f:c1:b8:63:b5:02:5e:f9:
         2e:c3:0b:4e:14:ab:19:af:ab:a2:a2:f9:18:19:8a:13:b2:a0:
         71:f2:62:b7:95:38:3a:97:8e:4b:9f:88:8d:08:ea:5b:3b:00:
         62:c3:27:f2:95:83:51:c5:8b:90:51:ee:87:ea:8e:74:04:75:
         c9:c9:3d:83:ef:14:32:61:dc:f4:e9:c8:79:3a:6e:06:c2:5f:
         ef:81:14:9e:59:db:7e:73:54:84:af:16:2c:62:fa:62:9b:d2:
         0e:df:a5:34:d4:33:fd:2f:36:1e:f7:e5:03:b4:b6:33:8a:3e:
         60:03:4f:5c:27:72:93:2e:f4:fd:08:ff:b5:0e:ed:8a:4d:4d:
         bf:36:e2:14:b3:cb:4c:a4:ec:64:ea:f7:82:4c:4a:ea:bd:2f:
         66:f1:da:8f:c1:35:31:b3:2e:3c:ee:24:d3:ff:a8:d4:58:c8:
         af:67:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org