Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e39302e302f32342d3234203d3e20323635323639.roa
File:                     3136382e39302e39302e302f32342d3234203d3e20323635323639.roa (raw, json)
Hash identifier:          ZAWqayPVPqJxuz+Y1v8wJTuE+y34VJSyQKEL6rbhaJY=
Subject key identifier:   AF:36:B2:02:3B:9E:A5:FF:BF:2A:48:6B:04:BA:D9:9C:E2:F1:F4:9B
Certificate issuer:       /CN=50967DD0D6ED253035A8473574C998814467525B
Certificate serial:       7ACDB3F54D3BD8473FE7457BA9134B1FF157DBCB
Authority key identifier: 50:96:7D:D0:D6:ED:25:30:35:A8:47:35:74:C9:98:81:44:67:52:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50967DD0D6ED253035A8473574C998814467525B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e39302e302f32342d3234203d3e20323635323639.roa
Signing time:             Mon 23 Oct 2023 19:19:35 +0000
ROA not before:           Mon 23 Oct 2023 19:14:35 +0000
ROA not after:            Mon 21 Oct 2024 19:19:35 +0000
asID:                     265269
IP address blocks:        168.90.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cd:b3:f5:4d:3b:d8:47:3f:e7:45:7b:a9:13:4b:1f:f1:57:db:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50967DD0D6ED253035A8473574C998814467525B
        Validity
            Not Before: Oct 23 19:14:35 2023 GMT
            Not After : Oct 21 19:19:35 2024 GMT
        Subject: CN=AF36B2023B9EA5FFBF2A486B04BAD99CE2F1F49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:45:b2:5f:64:c3:72:e5:03:87:4a:29:ce:
                    3f:c4:ed:5e:3e:cd:2b:e7:6a:3c:b0:19:e0:5b:f2:
                    69:c7:44:21:db:9e:7c:55:a2:1c:00:11:4f:e6:90:
                    25:f8:cc:6e:5e:61:2c:16:61:b5:8f:a0:64:85:49:
                    ee:42:a7:92:f9:d1:b6:90:01:f2:d8:f7:fe:61:8e:
                    e3:8c:dd:5f:51:19:ce:2e:af:06:7b:d1:b8:db:5b:
                    f3:9c:54:84:60:79:28:48:da:15:b2:ac:fd:ac:2c:
                    dc:02:c8:40:e2:a1:62:35:57:15:ab:a4:c6:75:ab:
                    80:7d:a2:b3:44:b0:07:74:cf:5e:40:81:f3:26:d2:
                    3e:ba:f6:a0:4e:5e:05:06:b6:70:61:d1:3f:27:fa:
                    e3:6e:c1:c4:a2:ac:d6:07:3d:9b:0d:6a:4e:38:ba:
                    81:a2:02:43:01:c1:a3:38:a5:70:33:ae:f9:c6:eb:
                    88:65:a5:76:6c:71:52:a6:c9:8d:e0:03:1c:1f:17:
                    9a:59:9b:91:83:31:2a:b3:df:48:10:b0:1b:01:7f:
                    20:92:7a:aa:db:a7:06:d6:cb:32:d8:7f:b5:87:4b:
                    e7:ff:ee:3f:47:6a:89:6e:b3:d7:b8:b7:72:c7:4e:
                    03:66:4d:5b:ef:48:2d:fe:4e:34:ee:20:34:ed:9d:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:B2:02:3B:9E:A5:FF:BF:2A:48:6B:04:BA:D9:9C:E2:F1:F4:9B
            X509v3 Authority Key Identifier:
                keyid:50:96:7D:D0:D6:ED:25:30:35:A8:47:35:74:C9:98:81:44:67:52:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/50967DD0D6ED253035A8473574C998814467525B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50967DD0D6ED253035A8473574C998814467525B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e39302e302f32342d3234203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:76:dc:0c:db:ef:95:84:74:43:a9:a7:d6:ee:9a:ea:7b:4c:
         bc:7c:0c:8e:29:29:5e:91:9b:d5:f8:4b:86:f1:8e:23:5a:b1:
         32:c6:ef:c4:6d:27:2a:01:11:0b:28:db:6a:8c:d0:37:b9:15:
         06:ff:ef:70:d9:20:23:3a:0b:a9:29:d3:05:0b:64:04:a4:b0:
         85:5f:48:18:a2:f3:38:46:d0:85:8c:b0:7d:54:c0:d3:88:2c:
         65:27:3c:21:5e:5e:77:23:de:2d:f9:13:b7:55:a1:2c:2a:21:
         37:87:53:37:f9:9e:fd:fe:a6:33:ae:1b:4c:21:9b:63:89:ee:
         f2:b7:fe:8d:7c:51:c4:ff:e8:ba:71:97:50:73:10:a3:8f:68:
         7d:f0:e2:37:04:2e:af:e8:a0:7b:45:24:af:d5:c6:98:e8:c5:
         0c:e5:68:73:08:50:2f:76:dd:18:18:5f:d6:eb:43:01:f5:78:
         11:6f:e8:99:f7:f6:42:b9:10:8f:59:f7:3a:a8:0d:93:bc:de:
         2e:ec:c9:92:4a:c2:76:c8:73:54:42:c6:7e:04:b1:08:31:21:
         9f:34:61:cc:a8:0e:10:d4:6e:06:1d:9a:24:26:a4:e9:7e:62:
         3f:d4:e1:e1:7a:dd:ca:4a:49:bd:e4:32:42:fa:b2:12:5a:29:
         03:b5:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org