Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File:                     3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          xwjXDE2lP4r0nIlPJBNn44AWNgqghxjjrIsx0JTYBtQ=
Subject key identifier:   20:EF:F7:14:B2:F3:3C:3B:25:26:22:DA:2A:F1:A2:1D:69:91:7B:A2
Certificate issuer:       /CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Certificate serial:       44C25B09A79894E19268A63A30DA00C9FDCC3F28
Authority key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time:             Thu 04 Apr 2024 11:47:44 +0000
ROA not before:           Thu 04 Apr 2024 11:42:44 +0000
ROA not after:            Thu 03 Apr 2025 11:47:44 +0000
asID:                     53062
IP address blocks:        168.90.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:5b:09:a7:98:94:e1:92:68:a6:3a:30:da:00:c9:fd:cc:3f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
        Validity
            Not Before: Apr  4 11:42:44 2024 GMT
            Not After : Apr  3 11:47:44 2025 GMT
        Subject: CN=20EFF714B2F33C3B252622DA2AF1A21D69917BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:4c:69:5f:f7:cc:59:90:0e:ef:29:eb:c6:
                    89:3d:1f:79:f6:2b:e5:59:e6:f7:9e:90:2a:fd:14:
                    10:9a:0c:3a:ae:ab:ea:08:b8:0f:ad:9a:51:be:45:
                    81:b2:1d:73:65:2d:10:26:bd:cc:15:8b:b7:3b:63:
                    df:23:e8:9c:23:5f:c9:73:c5:7a:e8:b5:13:4b:a1:
                    9b:39:61:22:c5:60:ae:7d:8c:19:a4:02:d0:3c:aa:
                    5e:72:ca:53:7b:0f:d1:0a:ae:aa:9c:91:13:d7:82:
                    39:b6:cb:92:85:bb:58:3d:69:67:99:d5:05:42:71:
                    0f:f7:cb:e8:a8:ee:aa:4b:a2:aa:f7:9b:0e:a7:03:
                    ab:5f:3a:1b:47:99:53:87:84:f0:40:eb:64:6c:19:
                    5a:78:f3:db:e7:71:64:18:9a:4b:fd:83:37:de:d6:
                    9e:ab:39:0c:87:63:dc:51:ba:b9:5a:45:8a:26:f9:
                    ca:e4:0a:e2:03:fb:a0:23:c8:79:33:6b:b3:89:82:
                    1a:c3:0e:49:78:ab:df:3c:3c:9e:90:be:d6:66:00:
                    cc:8f:99:66:9f:23:23:43:d7:28:61:9d:df:e9:98:
                    c6:61:56:34:57:80:0f:af:65:f4:f9:97:9a:b4:58:
                    3e:8e:a3:78:7e:37:04:df:2c:7d:ce:5d:14:53:c6:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:F7:14:B2:F3:3C:3B:25:26:22:DA:2A:F1:A2:1D:69:91:7B:A2
            X509v3 Authority Key Identifier:
                keyid:FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:0e:92:7e:67:12:f2:89:bd:50:56:14:fc:da:bb:21:e6:
         62:59:1d:23:46:7b:96:da:b9:a7:54:22:d6:cf:0f:69:77:6b:
         e5:8c:89:a1:cb:98:a9:e5:af:4f:75:43:26:4e:1c:08:24:97:
         fc:24:d9:10:61:b3:26:83:19:82:17:35:3b:0e:7b:b6:ca:25:
         f3:69:db:dc:7c:65:e1:3a:c2:4a:ad:cf:76:37:96:51:30:b8:
         3d:69:17:db:bf:5d:15:49:8c:10:6c:f9:5b:b8:bb:8d:98:ae:
         18:8c:ad:17:69:16:93:70:63:f1:d9:a8:5f:26:4c:bf:7b:4f:
         66:97:ad:d0:13:f0:74:2a:95:3c:0c:18:69:21:f8:3f:63:b2:
         e4:3a:87:09:53:55:9a:8d:7a:f3:c1:45:28:79:06:8a:1f:28:
         12:60:67:25:4a:f7:38:c6:d2:09:67:09:26:a8:4d:a2:23:19:
         3e:f6:7a:35:8f:37:b6:ff:e5:d6:b9:bd:ed:e5:b9:46:a1:b4:
         06:01:88:b6:32:e5:89:a2:06:96:65:44:2a:00:8e:69:b5:7b:
         d0:10:0c:98:9e:e9:80:e9:30:e3:bf:45:f6:97:9a:6d:b2:5d:
         50:70:fc:55:cd:a1:84:82:57:3c:5b:c7:8e:5a:47:78:cb:00:
         a7:f4:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 02:00:09 2024 by rpki-client on console-fra.rpki-client.org