Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e39302e302f32332d3233203d3e20323635323639.roa
File:                     3136382e39302e39302e302f32332d3233203d3e20323635323639.roa (raw, json)
Hash identifier:          G6Sfp9DEUIbv1nFVy0ObLXCjC9V+//A1Skl2xearVCQ=
Subject key identifier:   F6:85:A5:BE:38:2B:46:25:F8:03:79:D3:88:6C:C4:3A:19:B1:E0:49
Certificate issuer:       /CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
Certificate serial:       39545D58C945292E08326EFB27AE42D3E2A76299
Authority key identifier: C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e39302e302f32332d3233203d3e20323635323639.roa
Signing time:             Thu 09 May 2024 19:33:09 +0000
ROA not before:           Thu 09 May 2024 19:28:09 +0000
ROA not after:            Thu 08 May 2025 19:33:09 +0000
asID:                     265269
IP address blocks:        168.90.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:54:5d:58:c9:45:29:2e:08:32:6e:fb:27:ae:42:d3:e2:a7:62:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Validity
            Not Before: May  9 19:28:09 2024 GMT
            Not After : May  8 19:33:09 2025 GMT
        Subject: CN=F685A5BE382B4625F80379D3886CC43A19B1E049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:b1:16:bf:c0:96:cd:33:fc:0f:5e:52:ca:
                    93:0c:69:f8:9a:0b:aa:5a:39:01:d4:5e:f7:c3:d5:
                    76:da:88:01:b3:92:d1:01:0c:ef:1d:55:f3:92:e8:
                    47:e9:42:f6:69:f7:20:be:df:b3:c6:4e:69:74:fd:
                    76:c0:7c:25:d0:64:ed:45:41:40:6c:a8:b4:2c:67:
                    ed:96:dc:73:75:af:d7:b4:f3:7a:0c:c0:b2:36:7a:
                    b3:c5:b6:b2:49:5c:92:ac:0d:fe:56:b9:cf:b5:44:
                    e0:68:36:88:2d:ed:d9:04:14:3d:e1:94:cd:c3:1e:
                    85:9f:b9:e9:81:a3:4b:04:88:09:71:c3:17:ab:e8:
                    2d:f5:70:8a:a4:cb:e4:1e:b9:2c:45:9f:d2:8d:0b:
                    4e:39:c3:a4:ee:e4:c7:e8:5c:d7:15:05:c7:ad:d1:
                    e1:9f:d5:fa:7c:40:8a:df:b2:10:7e:c7:3b:01:16:
                    d3:d0:06:ef:2e:c6:58:4a:97:39:c3:cf:43:69:09:
                    0b:11:06:11:51:48:8f:ab:87:93:ef:f6:9b:6e:57:
                    72:47:5e:d8:82:1e:d5:76:9a:0f:79:8d:a2:9b:c8:
                    20:22:f4:22:d2:04:ed:71:8a:b7:1a:dd:f4:2e:32:
                    5f:73:e0:a4:b6:fa:25:eb:a3:ee:c5:7d:90:ed:71:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:A5:BE:38:2B:46:25:F8:03:79:D3:88:6C:C4:3A:19:B1:E0:49
            X509v3 Authority Key Identifier:
                keyid:C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e39302e302f32332d3233203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:84:73:c2:14:56:f4:5a:bc:a7:be:56:e2:f0:c1:58:d0:26:
         b5:b5:40:e0:5f:35:a4:f9:81:5a:68:14:a1:6e:96:01:b3:28:
         bb:8c:e3:11:f6:a5:2f:b0:ea:69:cd:b1:ed:1e:18:f4:27:91:
         f3:fd:a7:22:07:a3:ca:f6:00:50:49:42:01:14:82:b3:5d:5f:
         3e:37:b1:16:3a:7e:10:54:83:82:b7:f4:aa:e3:ff:33:e6:84:
         00:7b:c0:c5:3f:41:15:74:8f:f8:19:a2:95:1b:3c:cb:f7:b4:
         cf:46:e0:83:32:5d:1d:54:42:5e:b8:94:43:53:ad:80:82:b7:
         8b:07:c4:7e:9f:3e:2b:96:1b:2e:c3:1f:3f:df:e3:2a:c2:16:
         58:a6:a2:27:50:a3:8d:58:95:32:03:2c:3f:a2:70:a5:b2:de:
         89:b1:03:8a:7a:8a:99:df:03:d8:99:cf:a6:66:78:9e:14:75:
         a1:30:db:32:49:80:09:71:86:f5:41:70:79:69:fd:47:c0:af:
         30:01:d6:29:0f:3d:7f:95:f0:b3:8c:78:54:59:96:9d:fb:87:
         c9:1e:f5:d6:1d:02:62:e9:65:f7:16:49:49:1a:d5:f8:5d:a5:
         45:0f:2a:e2:7c:0b:4a:ac:08:93:da:ab:0f:3d:1e:bc:e3:90:
         75:e4:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org