Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3234203d3e20323635323639.roa
File:                     3136382e39302e38382e302f32322d3234203d3e20323635323639.roa (raw, json)
Hash identifier:          v1WDeFhCWR7HAZx8KcBxdwfD94ZXTeDX8Rc6riMx09g=
Subject key identifier:   72:30:C3:50:35:F4:E9:CD:72:D4:3E:57:49:6B:29:CD:38:3C:A5:BF
Certificate issuer:       /CN=CC6429DFF468815A46E635DFB4B2EF802526494F
Certificate serial:       5A2BE0B539CEED57D9AF33589BE08EBB6695AF99
Authority key identifier: CC:64:29:DF:F4:68:81:5A:46:E6:35:DF:B4:B2:EF:80:25:26:49:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC6429DFF468815A46E635DFB4B2EF802526494F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3234203d3e20323635323639.roa
Signing time:             Wed 01 Jun 2022 13:48:20 +0000
ROA not before:           Wed 01 Jun 2022 13:43:20 +0000
ROA not after:            Wed 31 May 2023 13:48:20 +0000
asID:                     265269
IP address blocks:        168.90.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2b:e0:b5:39:ce:ed:57:d9:af:33:58:9b:e0:8e:bb:66:95:af:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC6429DFF468815A46E635DFB4B2EF802526494F
        Validity
            Not Before: Jun  1 13:43:20 2022 GMT
            Not After : May 31 13:48:20 2023 GMT
        Subject: CN=7230C35035F4E9CD72D43E57496B29CD383CA5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:9c:34:7f:73:07:54:8a:41:f5:f0:1f:13:
                    a9:b8:11:cd:cf:23:68:67:9b:c0:b4:07:dd:b3:62:
                    8f:9b:96:44:88:c9:ff:d3:22:7c:23:12:ee:c2:3c:
                    19:ee:0c:1e:87:66:bc:18:4f:c3:5c:cc:0a:93:54:
                    00:b1:73:f5:61:e5:f1:25:a3:42:0b:56:37:30:0d:
                    75:65:2a:d0:68:bc:91:2b:d2:4e:02:2d:d8:21:49:
                    bb:0d:99:22:83:f7:ea:d9:e2:c9:dc:c5:77:5b:58:
                    3c:de:39:cb:dd:3a:1e:29:54:b0:cf:ea:a5:7f:d8:
                    5f:cc:10:2a:66:5c:ff:83:27:67:ac:f8:55:08:d1:
                    36:53:24:2d:b0:4d:92:2c:84:9e:10:1a:eb:6d:24:
                    bb:37:4a:b0:2a:a2:66:e8:19:9c:e9:72:3d:da:89:
                    48:72:13:f9:bf:b2:20:64:75:a2:27:fe:e3:bd:ea:
                    8a:a7:5a:fe:ec:c1:e5:37:4e:4a:f6:f0:6e:8e:e0:
                    97:00:dc:71:63:4a:e0:0c:9f:9d:b7:2d:5e:0b:29:
                    2d:a0:fc:9d:a5:37:9a:36:02:c9:7c:95:d0:df:c3:
                    c8:4a:8b:73:2c:23:89:82:a7:ce:a2:97:43:71:d0:
                    49:69:7b:3d:96:cd:03:38:36:fd:0b:00:ed:3c:19:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:C3:50:35:F4:E9:CD:72:D4:3E:57:49:6B:29:CD:38:3C:A5:BF
            X509v3 Authority Key Identifier:
                keyid:CC:64:29:DF:F4:68:81:5A:46:E6:35:DF:B4:B2:EF:80:25:26:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/CC6429DFF468815A46E635DFB4B2EF802526494F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC6429DFF468815A46E635DFB4B2EF802526494F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3234203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:4d:d3:81:0b:92:dc:ca:91:0b:d4:32:7b:17:7b:36:01:
         7d:75:a5:a0:b0:b2:f4:04:3a:33:3f:7d:b6:50:23:27:cb:c9:
         b2:68:11:73:c6:73:dc:0b:2d:81:93:c2:d5:c7:bb:1a:44:ca:
         96:b0:38:73:e0:ee:35:16:fa:46:4a:a7:68:ae:a5:08:85:74:
         d2:11:4a:a0:23:a9:f2:b2:dc:b8:69:cf:e5:66:33:17:a2:dc:
         72:17:8b:47:ee:e8:f4:bb:94:f8:09:d0:ab:7e:79:0d:9a:cc:
         af:ae:11:04:b9:4c:af:20:b1:69:82:e6:5f:77:0f:84:f5:04:
         e0:7d:c1:87:4e:47:a8:00:c5:f3:cd:b0:d8:53:c9:40:41:9e:
         bd:1e:d8:c3:a7:6e:dd:b3:ad:22:f3:ab:84:e1:12:36:e0:fb:
         2f:9c:f9:c1:32:db:dc:c7:56:bf:5f:67:ff:01:8b:2c:2a:05:
         f8:5d:f3:86:53:00:3d:11:f2:7d:68:45:3a:5e:16:dc:33:42:
         48:9d:71:b9:ae:21:d5:96:0e:bc:3f:5d:c9:8a:11:7c:59:21:
         22:a4:68:da:ea:d4:10:62:b2:db:e9:04:61:d5:36:80:a6:34:
         31:0b:db:58:03:73:f9:5f:da:4f:38:3c:b6:c8:c3:b7:12:9b:
         2c:06:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org