Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
File:                     3136382e39302e31362e302f32322d3234203d3e20323635323731.roa (raw, json)
Hash identifier:          dHy9mFPm5rttlCqVmlrxWWXOksJvpP8rfUfIfQVUw8o=
Subject key identifier:   97:70:B9:28:CA:17:FB:31:62:4F:95:44:81:5A:08:3B:9D:10:6C:FF
Certificate issuer:       /CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Certificate serial:       29F565E741AE521DC1701BEDC65BF6B78208B8C5
Authority key identifier: 13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
Signing time:             Tue 12 Mar 2024 12:37:55 +0000
ROA not before:           Tue 12 Mar 2024 12:32:55 +0000
ROA not after:            Tue 11 Mar 2025 12:37:55 +0000
asID:                     265271
IP address blocks:        168.90.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f5:65:e7:41:ae:52:1d:c1:70:1b:ed:c6:5b:f6:b7:82:08:b8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
        Validity
            Not Before: Mar 12 12:32:55 2024 GMT
            Not After : Mar 11 12:37:55 2025 GMT
        Subject: CN=9770B928CA17FB31624F9544815A083B9D106CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:61:94:c0:f9:ed:8a:c0:53:10:37:98:61:
                    fa:89:17:86:17:d9:21:a6:b8:16:26:20:cc:38:a3:
                    d8:c0:87:de:d5:c1:26:ed:0b:b7:5d:c8:e6:05:34:
                    a3:13:2e:3c:e6:23:e8:65:11:74:33:16:b4:39:41:
                    28:45:fc:4a:7b:7b:3f:08:ac:fd:98:c4:cb:ea:09:
                    c7:66:76:cd:f8:3a:3f:51:1c:fe:9b:a2:89:25:29:
                    c5:1e:88:67:90:7a:a5:64:12:53:88:b3:1a:29:47:
                    77:ce:6a:6f:59:b3:e5:cf:e2:ed:ae:52:eb:da:55:
                    cd:c7:b2:08:92:1c:b2:9a:6a:38:15:6e:c6:64:09:
                    0d:7f:70:ec:26:44:9d:c5:cc:7f:eb:3f:5d:c9:7a:
                    fb:d5:d9:0f:10:c0:b9:bd:02:90:b6:90:d3:1e:30:
                    cd:31:52:ff:aa:17:9a:63:e2:fd:32:ea:af:cb:2f:
                    fb:dc:ce:01:cf:8e:ad:2e:72:47:be:20:df:02:5d:
                    d6:55:d1:2d:a1:e1:d8:41:db:17:3b:c9:23:06:d3:
                    f9:7c:29:88:cb:76:6b:98:76:1b:61:74:39:ff:c6:
                    4d:43:48:2d:f1:cb:74:86:3f:27:2d:2e:d6:8f:ad:
                    73:48:df:5f:d0:6a:37:0d:de:91:32:c7:04:a1:69:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:70:B9:28:CA:17:FB:31:62:4F:95:44:81:5A:08:3B:9D:10:6C:FF
            X509v3 Authority Key Identifier:
                keyid:13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:43:9e:5e:8e:dc:11:19:35:a7:9b:17:dc:08:a5:61:30:
         74:d7:95:da:62:1d:6c:6d:87:b3:d1:52:6c:67:88:6c:82:97:
         b5:19:27:b6:5e:2b:00:8f:c3:20:a8:5a:dd:8a:0a:86:2d:dd:
         11:dc:59:35:08:5f:db:d5:db:dc:9a:93:c7:ec:10:03:6f:c7:
         38:84:45:c3:e7:fc:bb:94:b8:71:0c:e6:88:92:4e:e5:d7:08:
         38:b6:16:7d:25:2e:7d:88:50:5d:31:40:ad:5c:ab:84:27:b9:
         bc:ca:b5:38:ae:b6:c3:ed:7e:84:76:32:09:13:81:d7:b8:31:
         c6:27:97:5e:7a:13:ee:c9:f5:7d:42:1e:4c:f1:3b:45:e4:45:
         42:e2:38:2d:da:d4:b4:e9:24:e3:6d:62:38:db:4e:09:79:9f:
         fc:e1:24:c0:6b:d9:71:4a:bd:83:71:8a:ee:1f:88:b9:30:72:
         7a:c4:8c:5d:5b:7e:9b:f5:71:b5:a2:b0:98:48:c8:99:86:0f:
         1c:70:b9:12:9f:07:09:0c:85:0c:5e:bd:6c:dc:fa:da:ee:6b:
         d1:7e:d7:84:44:06:97:05:f3:4b:e6:d7:96:61:9b:7b:2a:c3:
         d2:e1:69:c5:99:38:b3:da:a0:d5:f7:13:3f:0e:bd:e8:39:cb:
         8f:9c:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org