Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3232203d3e20323635323731.roa
File:                     3136382e39302e31362e302f32322d3232203d3e20323635323731.roa (raw, json)
Hash identifier:          bEYO8ZqGVKZ4vr8GEUvVx4FgVTgkKBuzR/5gmHeXqyo=
Subject key identifier:   C3:83:0E:DC:E6:DC:12:35:FB:21:66:A8:AB:1B:4E:F0:84:67:70:08
Certificate issuer:       /CN=C3AB4D07DFEDCED4DF4280B484808715BDA4B837
Certificate serial:       73A0B56BDB1FB039CA873B6D69FA6839BE5CD48E
Authority key identifier: C3:AB:4D:07:DF:ED:CE:D4:DF:42:80:B4:84:80:87:15:BD:A4:B8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3AB4D07DFEDCED4DF4280B484808715BDA4B837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3232203d3e20323635323731.roa
Signing time:             Thu 04 May 2023 19:44:21 +0000
ROA not before:           Thu 04 May 2023 19:39:21 +0000
ROA not after:            Thu 02 May 2024 19:44:21 +0000
asID:                     265271
IP address blocks:        168.90.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:b5:6b:db:1f:b0:39:ca:87:3b:6d:69:fa:68:39:be:5c:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AB4D07DFEDCED4DF4280B484808715BDA4B837
        Validity
            Not Before: May  4 19:39:21 2023 GMT
            Not After : May  2 19:44:21 2024 GMT
        Subject: CN=C3830EDCE6DC1235FB2166A8AB1B4EF084677008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:09:cb:4e:8a:03:a1:63:d0:8b:a0:47:1d:
                    1d:6a:e2:34:96:40:d2:da:a2:9f:0a:b3:97:59:c7:
                    e3:33:c7:c6:f8:6f:22:04:49:85:45:b6:98:89:f4:
                    9d:2e:ac:b4:38:b3:b1:42:33:51:7a:ba:97:9f:a6:
                    83:ea:6d:18:80:c0:8a:01:2e:1f:36:c8:ce:c8:0e:
                    f2:fb:f9:f9:d9:30:aa:72:7e:63:b2:8f:46:d1:c8:
                    20:5e:2b:1e:93:17:8a:ba:10:ad:3c:86:93:f6:16:
                    b9:40:82:8c:92:a7:3c:f6:f5:81:0a:20:11:07:0e:
                    53:b9:61:a5:9a:9f:c3:b8:3f:2f:29:aa:b5:85:97:
                    b8:b5:c7:5c:06:be:1f:6d:23:ac:66:42:1f:68:b0:
                    5b:ef:f9:24:63:40:ed:31:f5:0e:9e:56:9f:1a:78:
                    e8:fd:c4:26:15:d4:70:0c:94:7a:fe:34:46:35:e0:
                    34:c4:77:74:b1:d6:93:4e:42:22:25:22:08:aa:6b:
                    88:0b:cd:13:dd:77:ab:a6:19:cc:5f:1d:30:0e:03:
                    d3:d0:83:64:17:1e:e9:5e:c6:8f:3c:32:29:4a:08:
                    f6:ce:37:38:48:b5:ec:fa:b5:e5:b2:09:70:12:7e:
                    16:94:a2:8d:17:6d:e1:fb:a9:41:88:52:fd:3a:c2:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:0E:DC:E6:DC:12:35:FB:21:66:A8:AB:1B:4E:F0:84:67:70:08
            X509v3 Authority Key Identifier:
                keyid:C3:AB:4D:07:DF:ED:CE:D4:DF:42:80:B4:84:80:87:15:BD:A4:B8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/C3AB4D07DFEDCED4DF4280B484808715BDA4B837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3AB4D07DFEDCED4DF4280B484808715BDA4B837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3232203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:cf:11:da:b7:cb:f0:c2:07:56:98:10:5a:e5:b3:65:8a:
         cd:f1:08:dc:09:18:a3:c9:23:64:a4:89:9b:f8:a0:4f:00:1f:
         75:ef:6c:5e:e1:ad:15:65:a2:23:96:24:ab:45:cc:e3:bf:6f:
         a1:f1:94:de:f5:15:30:c4:9a:fb:12:0a:b7:ae:8d:48:b9:fd:
         05:79:32:0c:10:4d:dd:b7:a0:52:d1:3e:e8:9c:82:c6:cb:a7:
         f6:27:6f:cf:b8:3a:cb:bf:5a:ec:bd:d2:ad:20:83:ed:41:0c:
         f2:23:4f:27:2b:a2:9f:0f:77:ab:1e:e5:11:ee:2f:b5:95:37:
         87:5d:19:82:fc:72:76:fa:68:5d:7a:9b:49:29:74:a8:9d:a7:
         04:68:e3:fa:fb:2c:57:19:67:af:0c:8c:ba:4e:9e:46:8c:52:
         11:a3:9b:63:a7:5b:71:59:80:18:9f:00:90:dd:5a:38:3e:92:
         a2:0c:1b:24:4b:6b:b7:d0:1e:92:f0:94:b8:c7:04:97:9b:ee:
         d9:fc:da:aa:fc:39:9e:17:b0:a9:89:d8:e4:f1:d1:8b:d9:c3:
         1c:78:75:10:ac:98:d0:df:2a:2b:97:80:b9:67:87:4c:93:c9:
         d3:9e:9d:c4:a6:ff:7a:3b:4c:c5:36:d9:7e:76:7d:57:f3:ab:
         cc:e2:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org