Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32332d3233203d3e20323635323731.roa
File:                     3136382e39302e31362e302f32332d3233203d3e20323635323731.roa (raw, json)
Hash identifier:          2ivthe0ncHpK8sVY8XNcmLflES8JgRBMj0nLeItneRs=
Subject key identifier:   A6:47:B7:E7:43:E7:98:09:76:B0:DF:4D:BA:D7:0F:53:C5:AB:E0:C4
Certificate issuer:       /CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Certificate serial:       4732867B005EFFF8267E6FB47EE8C4198411F3F7
Authority key identifier: 13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32332d3233203d3e20323635323731.roa
Signing time:             Mon 11 Mar 2024 19:08:21 +0000
ROA not before:           Mon 11 Mar 2024 19:03:21 +0000
ROA not after:            Mon 10 Mar 2025 19:08:21 +0000
asID:                     265271
IP address blocks:        168.90.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:86:7b:00:5e:ff:f8:26:7e:6f:b4:7e:e8:c4:19:84:11:f3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
        Validity
            Not Before: Mar 11 19:03:21 2024 GMT
            Not After : Mar 10 19:08:21 2025 GMT
        Subject: CN=A647B7E743E7980976B0DF4DBAD70F53C5ABE0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:7b:0b:ee:ff:d2:ab:1e:70:fd:93:ea:ee:
                    00:0a:ae:ff:2e:92:c6:4a:02:9b:3e:b2:a4:e1:1e:
                    a5:49:7d:e9:1b:e0:e2:b5:38:be:ef:85:40:bb:03:
                    02:be:71:ee:95:71:a2:27:29:5d:c0:dc:49:5e:60:
                    19:c8:ba:30:95:64:3e:c1:f4:61:07:34:11:27:00:
                    7c:c5:55:16:cd:ea:ad:46:d7:31:78:bf:64:7a:2c:
                    93:8b:46:b0:b8:5b:c4:bf:a9:a2:82:d0:96:51:39:
                    e7:d6:16:e1:dd:c9:23:1b:5b:cd:cc:cc:3c:b3:b2:
                    70:df:58:19:e4:ab:2f:bb:dd:35:08:2f:54:d4:30:
                    de:bf:02:d5:68:c7:86:2e:cc:46:45:89:df:46:d5:
                    86:6a:79:f8:80:27:b8:f7:f7:5e:da:1d:55:d2:c5:
                    21:8a:92:60:0f:d8:d3:5e:ae:12:bb:dd:6d:52:a4:
                    b6:e6:4e:11:ad:85:43:44:00:e1:e4:6c:0d:34:8e:
                    4c:ca:e7:72:eb:2d:bb:62:70:4c:f0:99:1d:a5:0f:
                    f3:d2:2b:4e:47:77:08:db:9f:4f:83:ef:27:4d:94:
                    2a:07:56:17:38:f0:10:27:11:8c:ce:a9:c3:b7:6a:
                    4e:c0:fd:1c:30:16:b9:7c:3d:dd:6a:cc:80:3e:3a:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:47:B7:E7:43:E7:98:09:76:B0:DF:4D:BA:D7:0F:53:C5:AB:E0:C4
            X509v3 Authority Key Identifier:
                keyid:13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32332d3233203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:7d:1f:85:06:31:8c:e8:8d:44:09:ee:5b:58:b6:cc:70:
         79:c8:32:c2:87:ff:23:67:a8:9e:08:6b:36:2a:47:09:dc:db:
         17:2a:54:a1:86:60:16:3e:38:97:5b:f9:ea:ad:d1:4a:bd:c7:
         57:7b:47:ff:35:1e:ba:1e:ec:3e:1d:90:8d:6d:12:76:2c:c4:
         3a:4f:5f:48:61:e9:7f:b4:3d:00:1d:25:b1:61:96:32:f3:82:
         6b:2c:4e:03:78:ba:04:c3:cf:6d:c0:91:03:7e:61:3f:1f:d5:
         6d:ae:90:5f:a7:be:d4:19:e5:83:fe:d9:5b:42:18:6c:a3:b3:
         43:ad:84:0b:52:10:41:b1:23:52:f9:77:f5:1c:63:3f:c3:57:
         0e:84:d2:ca:af:fc:2c:1f:77:a5:b7:30:b4:0b:d7:0b:5f:e2:
         ce:f2:a1:d2:4d:42:fb:27:1a:3e:37:63:81:db:d6:dc:c5:0a:
         58:d6:ee:da:b2:9a:0a:8e:24:65:1a:19:14:c3:5b:f1:82:bd:
         ed:08:c0:86:d4:6b:24:db:e9:da:6e:b1:44:96:1d:0e:09:36:
         3e:00:28:00:01:86:2e:18:f1:24:c5:8b:52:d2:b6:4b:ed:94:
         bc:48:c2:a5:d6:bd:16:4f:29:76:26:c6:80:1a:7a:9f:b9:a4:
         d8:f0:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:12 2025 by rpki-client