Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32332d3233203d3e20323635323639.roa
File:                     3136382e39302e38382e302f32332d3233203d3e20323635323639.roa (raw, json)
Hash identifier:          Zbj7ALXdIk4XPULzAOtpRWNwA/aFyYa7pEhW+LMkpcc=
Subject key identifier:   46:AA:F9:E7:4A:E9:F5:FE:FF:A9:84:B1:E4:5B:06:A6:5C:DE:5D:A3
Certificate issuer:       /CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
Certificate serial:       3356295B9CCF4252F424CE5E7A429F241206C1A0
Authority key identifier: C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32332d3233203d3e20323635323639.roa
Signing time:             Thu 09 May 2024 19:33:09 +0000
ROA not before:           Thu 09 May 2024 19:28:09 +0000
ROA not after:            Thu 08 May 2025 19:33:09 +0000
asID:                     265269
IP address blocks:        168.90.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:56:29:5b:9c:cf:42:52:f4:24:ce:5e:7a:42:9f:24:12:06:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Validity
            Not Before: May  9 19:28:09 2024 GMT
            Not After : May  8 19:33:09 2025 GMT
        Subject: CN=46AAF9E74AE9F5FEFFA984B1E45B06A65CDE5DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:25:32:0a:78:a5:d3:2d:0a:82:1e:53:5d:
                    ef:75:a5:c3:ab:ce:8f:b3:d5:2f:14:2f:b3:f7:64:
                    33:4f:3f:51:88:61:e4:d7:7c:d8:5d:94:c0:97:64:
                    87:1c:e1:f0:5e:26:e2:ab:56:00:05:35:d8:65:44:
                    f8:d7:a7:dd:7c:f8:c5:2e:5b:dd:6b:68:e3:e9:24:
                    44:e4:e9:e2:9e:c6:2c:87:d0:84:e0:87:c9:29:e5:
                    80:07:3b:f3:92:4c:50:24:4c:60:1e:64:b3:bd:de:
                    71:a8:ae:a8:20:ba:e3:3e:58:da:d1:49:6f:49:bf:
                    bc:05:dc:1b:89:88:71:dd:c2:6a:25:d4:80:cc:2c:
                    c0:d4:20:47:d8:0f:79:f9:d8:c5:71:c3:02:ac:40:
                    7c:d3:0b:77:6c:04:8f:79:d7:d1:9e:61:ce:20:58:
                    c3:84:cd:a4:7b:fb:93:31:f8:27:09:4a:5d:59:bc:
                    72:97:b4:0b:1c:86:ae:0a:7c:34:7f:60:16:a8:c5:
                    0d:ee:16:0b:13:5e:68:6e:0f:d2:cc:92:d5:71:1e:
                    17:da:1b:bb:f4:50:4a:a2:17:c5:e2:0a:a6:ac:87:
                    22:30:18:2e:a3:ba:18:fb:de:44:61:59:d5:e4:fc:
                    62:92:a0:c1:d7:c7:84:f0:21:6d:90:23:ad:54:6b:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AA:F9:E7:4A:E9:F5:FE:FF:A9:84:B1:E4:5B:06:A6:5C:DE:5D:A3
            X509v3 Authority Key Identifier:
                keyid:C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32332d3233203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:16:2b:56:47:d6:a9:73:58:da:2e:ee:c5:53:99:72:50:
         90:fc:ae:85:66:04:c9:d0:9d:45:dc:46:35:7b:3c:92:fa:89:
         99:20:84:55:ac:2c:01:f9:f8:b3:31:44:89:b0:c1:a3:5e:46:
         31:68:9e:f1:75:d6:56:ac:3c:92:74:88:2d:5f:f6:a9:05:a7:
         72:21:6b:4e:bf:1a:4c:18:2a:b8:5d:d8:87:a4:2a:3d:e3:60:
         3b:90:af:09:89:7e:ef:bc:f8:e3:7b:17:ce:b7:e2:08:4d:98:
         63:df:e0:78:11:3a:2d:6d:56:a4:c1:65:6e:39:88:a3:c6:81:
         2d:78:32:50:2a:f1:93:a9:0c:b0:e2:5e:ee:f6:31:86:66:cf:
         ae:6d:ff:d4:ff:1a:aa:4e:86:07:51:79:81:dc:68:6f:90:90:
         48:9f:b7:5b:bb:07:b4:cd:c6:1d:62:f2:16:88:72:16:75:18:
         a3:1c:88:a6:1e:8b:48:6c:61:08:20:a3:1b:38:fe:3a:b1:de:
         53:77:1b:17:ef:52:e7:dc:4e:f7:a7:ac:fc:9c:33:19:a6:a0:
         e1:fa:3e:e4:06:af:71:5b:92:3c:4f:76:43:a2:11:be:be:57:
         a4:99:3a:27:3a:e7:37:a1:60:03:99:f5:6c:a9:30:d7:c2:e7:
         e5:19:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org