Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38392e302f32342d3234203d3e20323635323639.roa
File:                     3136382e39302e38392e302f32342d3234203d3e20323635323639.roa (raw, json)
Hash identifier:          DnqB/m0iTIW2k5yEe0nuku27pL7iHSjtMu2D9mtxRco=
Subject key identifier:   53:8A:47:05:B0:DB:E4:D5:9E:F0:D9:80:20:10:EB:C7:27:C3:95:55
Certificate issuer:       /CN=50967DD0D6ED253035A8473574C998814467525B
Certificate serial:       6E24400720D6E8D9538815BE58DC673F1DC2CF48
Authority key identifier: 50:96:7D:D0:D6:ED:25:30:35:A8:47:35:74:C9:98:81:44:67:52:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50967DD0D6ED253035A8473574C998814467525B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38392e302f32342d3234203d3e20323635323639.roa
Signing time:             Mon 23 Oct 2023 19:19:35 +0000
ROA not before:           Mon 23 Oct 2023 19:14:35 +0000
ROA not after:            Mon 21 Oct 2024 19:19:35 +0000
asID:                     265269
IP address blocks:        168.90.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:40:07:20:d6:e8:d9:53:88:15:be:58:dc:67:3f:1d:c2:cf:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50967DD0D6ED253035A8473574C998814467525B
        Validity
            Not Before: Oct 23 19:14:35 2023 GMT
            Not After : Oct 21 19:19:35 2024 GMT
        Subject: CN=538A4705B0DBE4D59EF0D9802010EBC727C39555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:be:0a:57:0e:58:fc:b0:5d:3f:e0:44:23:
                    32:72:27:7e:8a:e6:a3:18:14:54:16:f5:08:1c:7b:
                    57:5f:5d:36:44:81:d0:9f:d8:97:07:38:3e:d9:28:
                    58:b1:53:4a:18:a1:ce:fd:c1:90:62:eb:8a:90:62:
                    3f:83:82:32:26:f8:3a:78:a1:19:0a:bc:50:a7:21:
                    7b:b9:5e:b3:73:95:85:90:69:91:ec:13:cb:da:6b:
                    38:28:e1:8a:18:84:bf:5b:6d:2e:5f:31:04:e3:55:
                    ee:44:0b:70:58:ff:75:2f:30:cf:ab:8b:d6:d9:58:
                    75:cf:a5:af:a8:9a:e0:f1:ae:75:b7:5a:7c:68:38:
                    79:c1:6d:47:59:9f:5b:fe:96:a2:c5:57:75:24:3a:
                    7a:e8:d7:61:0d:00:20:f7:d4:cb:03:d1:f2:2a:27:
                    2a:29:46:36:26:46:65:73:6a:95:3d:00:3a:ab:2f:
                    67:32:a2:c0:a3:e5:cc:70:33:1a:01:45:63:24:24:
                    7f:6b:1a:8c:0e:02:7b:4a:28:c1:82:76:5e:66:21:
                    37:b8:e4:a2:24:70:29:17:b6:3a:85:ee:5a:5f:2b:
                    1a:f3:ee:6f:c2:2c:1c:28:2f:0f:35:4e:02:8f:9a:
                    b0:f3:53:db:57:e2:7d:5f:71:5e:5f:63:fb:47:89:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:47:05:B0:DB:E4:D5:9E:F0:D9:80:20:10:EB:C7:27:C3:95:55
            X509v3 Authority Key Identifier:
                keyid:50:96:7D:D0:D6:ED:25:30:35:A8:47:35:74:C9:98:81:44:67:52:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/50967DD0D6ED253035A8473574C998814467525B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50967DD0D6ED253035A8473574C998814467525B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38392e302f32342d3234203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:b5:ef:12:7b:88:4a:8d:2e:bf:ca:91:93:79:1a:c7:bd:
         96:6a:e8:1f:c3:2b:de:d7:d2:94:2c:9a:91:78:c2:1b:74:c8:
         42:43:c3:1c:d5:48:54:47:b2:99:eb:44:ef:9c:9d:8c:51:ff:
         11:62:88:ef:c8:f9:96:88:34:d6:af:4f:0c:27:67:cb:76:43:
         0e:90:69:3a:59:78:2b:dd:fe:e7:65:82:80:66:5a:88:07:1f:
         98:1d:3f:4f:b2:91:e6:35:d7:f8:c6:5c:79:8c:5d:8b:e7:f7:
         d1:22:6c:f0:67:56:35:64:72:43:a6:13:07:37:9a:54:0b:ae:
         d9:08:34:c3:76:32:69:80:23:40:73:d2:e4:6e:c2:4d:f6:2d:
         cd:00:42:f2:87:49:c8:72:af:e0:24:be:88:9f:83:16:d4:af:
         c3:5d:a8:23:ca:1c:ec:56:54:0b:72:2e:d6:12:69:fd:d6:ef:
         74:5e:b7:d3:8f:bf:6c:ec:88:02:14:a5:85:78:46:7e:f9:b1:
         60:e5:40:07:7e:0a:81:c6:80:e3:54:38:7a:61:f6:df:13:33:
         28:b6:d0:77:31:47:71:0a:71:8b:a1:3e:00:8f:d1:51:7b:84:
         ce:75:1c:42:0e:1f:0d:10:78:73:c5:90:4a:ad:51:71:33:d3:
         d3:48:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org