Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31392e302f32342d3234203d3e20323635323731.roa
File:                     3136382e39302e31392e302f32342d3234203d3e20323635323731.roa (raw, json)
Hash identifier:          1rxZEZ7fKETlX4sLT1SsNWHerKcjiPnvYEGlhRFNm9Q=
Subject key identifier:   AF:BC:77:E6:9D:A8:07:6E:76:E1:AD:EC:D3:B3:38:B3:16:74:34:2F
Certificate issuer:       /CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Certificate serial:       7DBF28C9B9666D0740F4ACDAF126986B4AA06F86
Authority key identifier: 13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31392e302f32342d3234203d3e20323635323731.roa
Signing time:             Mon 11 Mar 2024 19:08:24 +0000
ROA not before:           Mon 11 Mar 2024 19:03:24 +0000
ROA not after:            Mon 10 Mar 2025 19:08:24 +0000
asID:                     265271
IP address blocks:        168.90.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bf:28:c9:b9:66:6d:07:40:f4:ac:da:f1:26:98:6b:4a:a0:6f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
        Validity
            Not Before: Mar 11 19:03:24 2024 GMT
            Not After : Mar 10 19:08:24 2025 GMT
        Subject: CN=AFBC77E69DA8076E76E1ADECD3B338B31674342F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:9d:1b:87:13:8d:ac:43:48:66:d2:95:94:
                    f6:8d:35:cd:b2:44:0b:0e:3b:38:79:2f:05:e0:34:
                    ab:a5:79:5d:b4:a3:98:e4:ec:3c:b6:c0:6e:f0:fa:
                    4a:26:90:09:c8:05:a8:9a:3d:23:b9:57:51:35:c4:
                    81:de:e8:a0:0f:23:e4:7a:8a:2e:d2:cb:b9:b2:07:
                    32:2a:7e:8f:1f:b6:74:f7:df:d0:89:e1:c5:f4:43:
                    53:d5:f7:1c:09:d7:fb:4d:17:fe:fc:49:63:d6:7c:
                    98:88:67:d5:34:3d:ec:42:12:6b:65:35:0b:ae:53:
                    53:8c:10:84:33:c4:b1:ac:fa:e5:86:9a:24:33:79:
                    1f:1a:65:45:f5:50:a0:7e:41:2c:78:7b:22:0b:33:
                    f4:76:53:b4:f8:be:20:91:cd:3a:81:7e:4a:e6:13:
                    24:d5:63:c4:df:92:fc:65:4e:a7:96:41:f0:1b:0e:
                    87:34:25:89:6f:3a:3d:73:15:3c:1e:65:24:d8:45:
                    98:eb:bd:b6:35:a9:a6:12:09:6c:8c:24:e0:21:3e:
                    22:90:f4:95:f2:d4:6b:54:4b:da:b8:c0:74:c8:f1:
                    1e:1f:22:7e:2b:20:b7:3e:07:ca:7b:82:26:51:cc:
                    b7:cb:c2:c4:b4:c5:9f:59:13:ce:8c:fe:82:ab:c4:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:77:E6:9D:A8:07:6E:76:E1:AD:EC:D3:B3:38:B3:16:74:34:2F
            X509v3 Authority Key Identifier:
                keyid:13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31392e302f32342d3234203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:0e:71:f6:24:b2:ae:5e:3d:3f:18:7c:5d:6d:9a:49:68:
         78:a9:16:02:14:f7:3f:e8:fa:59:ac:fb:6c:dc:42:15:5a:c6:
         8d:a9:f6:5b:da:7d:35:52:5b:9b:57:d9:3b:78:6a:31:3d:3e:
         69:aa:0b:88:ff:4a:56:e4:dd:6a:76:51:6f:12:5c:34:86:ed:
         90:15:eb:47:5c:3c:5f:21:1d:8f:02:88:71:70:4e:5a:38:cb:
         ce:86:76:70:9b:2e:9f:42:fa:a4:04:bb:b1:1a:1d:df:0f:4a:
         de:03:5e:0a:a0:27:31:32:23:48:01:ab:fd:cb:35:f9:82:37:
         e5:bf:56:16:c6:17:c3:55:5d:4c:58:25:05:3e:01:00:e1:ea:
         95:af:90:91:08:91:c9:1b:30:07:23:fa:ba:a9:b1:7e:df:72:
         9e:cb:12:5f:c8:1c:99:26:a8:22:bf:66:5f:74:d2:ea:17:26:
         05:4e:c2:80:dd:f9:bc:e7:a0:5f:e7:d2:4e:69:6b:3d:02:14:
         3a:be:2c:94:db:83:2c:e4:a2:68:2d:12:6a:a7:14:65:98:41:
         75:7e:c3:4d:ba:4b:bd:d5:0e:a2:eb:c7:60:e7:d2:5c:f5:08:
         9d:a9:1c:af:c7:e2:b1:19:08:d4:aa:62:c6:54:cb:6f:9e:8d:
         fe:41:9d:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfb8oyblmbQdA9Kza8SaYa0qgb4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwMTU5Q0Y0RkE2MEQyNkE3RDFCRDBGQTg4NTE2NzMz
QjY3NkQ2QTAeFw0yNDAzMTExOTAzMjRaFw0yNTAzMTAxOTA4MjRaMDMxMTAvBgNV
BAMTKEFGQkM3N0U2OURBODA3NkU3NkUxQURFQ0QzQjMzOEIzMTY3NDM0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJp50bhxONrENIZtKVlPaNNc2y
RAsOOzh5LwXgNKuleV20o5jk7Dy2wG7w+komkAnIBaiaPSO5V1E1xIHe6KAPI+R6
ii7Sy7myBzIqfo8ftnT339CJ4cX0Q1PV9xwJ1/tNF/78SWPWfJiIZ9U0PexCEmtl
NQuuU1OMEIQzxLGs+uWGmiQzeR8aZUX1UKB+QSx4eyILM/R2U7T4viCRzTqBfkrm
EyTVY8TfkvxlTqeWQfAbDoc0JYlvOj1zFTweZSTYRZjrvbY1qaYSCWyMJOAhPiKQ
9JXy1GtUS9q4wHTI8R4fIn4rILc+B8p7giZRzLfLwsS0xZ9ZE86M/oKrxCmzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr7x35p2oB2524a3s07M4sxZ0NC8wHwYDVR0j
BBgwFoAUEwFZz0+mDSan0b0PqIUWcztnbWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0pKQzQybnROQXU0UkNpdnZzRFU1N2RMNXBHSldiYXNUUlBKU1NwRWpX
Z00vMC8xMzAxNTlDRjRGQTYwRDI2QTdEMUJEMEZBODg1MTY3MzNCNjc2RDZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzMDE1OUNGNEZBNjBEMjZB
N0QxQkQwRkE4ODUxNjczM0I2NzZENkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dKSkM0Mm50TkF1NFJDaXZ2c0RVNTdkTDVwR0pXYmFzVFJQSlNTcEVqV2dNLzAv
MzEzNjM4MmUzOTMwMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzIzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqFoTMA0GCSqGSIb3DQEBCwUAA4IBAQAOAA5x9iSy
rl49Pxh8XW2aSWh4qRYCFPc/6PpZrPts3EIVWsaNqfZb2n01UlubV9k7eGoxPT5p
qguI/0pW5N1qdlFvElw0hu2QFetHXDxfIR2PAohxcE5aOMvOhnZwmy6fQvqkBLux
Gh3fD0reA14KoCcxMiNIAav9yzX5gjflv1YWxhfDVV1MWCUFPgEA4eqVr5CRCJHJ
GzAHI/q6qbF+33KeyxJfyByZJqgiv2ZfdNLqFyYFTsKA3fm856Bf59JOaWs9AhQ6
viyU24Ms5KJoLRJqpxRlmEF1fsNNuku91Q6i68dg59Jc9QidqRyvx+KxGQjUqmLG
VMtvno3+QZ1o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org