Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3232203d3e20323635323639.roa
File:                     3136382e39302e38382e302f32322d3232203d3e20323635323639.roa (raw, json)
Hash identifier:          vfesR9AwjIK7Z2vzgAaTsEQyWlywy/m/uLIMhPa/DZc=
Subject key identifier:   51:71:2D:71:EA:11:BF:44:1B:A3:86:33:CF:44:D2:37:34:98:6D:44
Certificate issuer:       /CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
Certificate serial:       22D7246121E4FFA0D0616A4F12FA5D368279DF63
Authority key identifier: C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3232203d3e20323635323639.roa
Signing time:             Thu 09 May 2024 19:33:09 +0000
ROA not before:           Thu 09 May 2024 19:28:09 +0000
ROA not after:            Thu 08 May 2025 19:33:09 +0000
asID:                     265269
IP address blocks:        168.90.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d7:24:61:21:e4:ff:a0:d0:61:6a:4f:12:fa:5d:36:82:79:df:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Validity
            Not Before: May  9 19:28:09 2024 GMT
            Not After : May  8 19:33:09 2025 GMT
        Subject: CN=51712D71EA11BF441BA38633CF44D23734986D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:eb:c5:c3:85:c5:ae:88:64:38:48:14:c8:
                    4f:ad:e0:88:be:15:f3:e2:bf:9b:81:a5:c5:73:74:
                    a4:dc:80:73:a1:32:62:94:4e:c8:bb:d9:80:21:3e:
                    eb:15:9a:ca:f5:b0:96:29:2c:85:c7:cb:03:84:fa:
                    b4:7a:d7:90:92:19:a8:f6:30:06:a6:4d:7a:81:77:
                    e0:6f:64:be:a6:d8:51:9d:97:8e:53:9c:19:07:b8:
                    22:11:f1:38:9c:51:67:eb:06:fc:85:f9:a7:e2:64:
                    b6:6e:b0:4f:69:92:f3:08:82:7b:cf:5b:03:5f:6c:
                    fc:58:cf:bf:71:56:fe:db:c5:fa:52:8d:ec:af:eb:
                    d7:60:42:a7:73:be:25:38:93:45:a3:ca:19:02:80:
                    a5:28:6c:8b:fa:76:90:5f:1e:11:1c:20:d5:e7:b8:
                    d4:77:c8:d9:d9:00:5c:9a:f7:09:6f:fc:9f:6e:1c:
                    1b:ea:b7:1c:4e:c5:23:ca:40:41:1f:62:10:5c:47:
                    33:17:2a:df:76:d4:e3:79:cf:29:e7:eb:b7:fc:02:
                    7b:6f:da:80:4e:aa:a2:52:ea:dc:fe:57:c9:73:dc:
                    08:70:2d:b6:2c:74:eb:85:17:dd:42:31:97:c7:22:
                    22:e1:5c:69:6b:c5:78:04:d4:f2:fb:79:67:b1:69:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:71:2D:71:EA:11:BF:44:1B:A3:86:33:CF:44:D2:37:34:98:6D:44
            X509v3 Authority Key Identifier:
                keyid:C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3232203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:45:c0:d3:c4:9c:ae:8e:79:c5:b6:4e:b3:fc:6d:76:ff:e3:
         c2:61:56:21:25:12:32:09:be:aa:7a:b0:30:ce:a2:3e:22:09:
         c2:ac:3a:af:31:5d:dd:e7:9b:41:84:d9:ba:39:1f:e7:75:63:
         27:3a:ed:0f:ac:8b:ab:30:d7:f2:b5:bc:c7:b3:1f:6d:70:21:
         53:5e:e3:98:49:11:c9:a6:4e:9e:54:46:33:71:18:c5:ef:1f:
         4b:3f:71:c0:d1:8e:d5:23:6c:16:19:57:0f:28:99:00:19:2c:
         53:5a:31:3a:f8:a1:3e:f2:b0:2c:0f:7d:a8:f3:a1:9f:e8:91:
         23:ad:1f:df:93:62:33:2b:85:1d:4c:6f:5d:c1:59:9a:d1:e0:
         f6:80:33:31:33:be:1e:75:43:51:48:e9:0a:9b:dc:90:46:5e:
         d9:56:69:0c:f6:ae:15:6b:6d:79:74:44:0f:b4:06:07:ad:aa:
         38:27:c5:45:1b:79:53:89:7d:b7:e3:1d:64:31:f4:a0:ff:25:
         dd:a5:24:ab:02:08:5e:0e:ca:8a:ea:83:f9:d1:1c:59:7a:75:
         f2:4a:c2:c8:ce:7d:be:48:15:34:de:5e:e5:b7:83:67:c8:c0:
         e7:4e:ef:d6:ba:66:d4:77:bd:12:60:d3:e9:67:1b:4b:3a:7c:
         e0:64:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org