Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32332d3233203d3e20323635323832.roa
File:                     3136382e39302e3230382e302f32332d3233203d3e20323635323832.roa (raw, json)
Hash identifier:          ZB5ZqwkmJcAJ9ZyTgepbguRMfDbAwjh7KTBsklVNi9A=
Subject key identifier:   4E:F8:DD:CD:F7:F2:BC:E5:8F:F5:84:8F:16:83:6D:C1:3E:09:AC:AD
Certificate issuer:       /CN=15CE72F864B9D222722D29CFB14428A88692222C
Certificate serial:       11AA7369EE643B0094237487472A2678344D3D26
Authority key identifier: 15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32332d3233203d3e20323635323832.roa
Signing time:             Wed 27 Apr 2022 20:21:03 +0000
ROA not before:           Wed 27 Apr 2022 20:16:03 +0000
ROA not after:            Wed 26 Apr 2023 20:21:03 +0000
asID:                     265282
IP address blocks:        168.90.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:aa:73:69:ee:64:3b:00:94:23:74:87:47:2a:26:78:34:4d:3d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15CE72F864B9D222722D29CFB14428A88692222C
        Validity
            Not Before: Apr 27 20:16:03 2022 GMT
            Not After : Apr 26 20:21:03 2023 GMT
        Subject: CN=4EF8DDCDF7F2BCE58FF5848F16836DC13E09ACAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:7d:04:0d:56:dc:e4:3d:33:7c:f9:aa:05:
                    fe:52:d3:f2:27:6e:5c:33:47:e4:eb:7f:45:36:c3:
                    2c:0b:cc:fc:5d:c9:ba:bb:cb:6e:18:c8:8d:67:ae:
                    7d:2e:7e:cd:35:17:0c:1f:a2:d1:98:db:b4:d6:4f:
                    a4:ef:f5:f6:c0:54:5b:08:35:72:b0:ee:15:90:2c:
                    9f:2d:b1:b6:15:2f:7d:05:e1:81:e7:93:b7:bd:74:
                    85:d3:70:23:1b:30:7a:38:99:a2:f1:b8:d0:b6:d8:
                    ee:8f:b4:2c:e8:68:90:66:68:51:5e:31:d7:f5:44:
                    81:e7:ac:9e:30:22:18:a1:92:d4:5d:a8:5d:6f:fc:
                    94:cc:fd:66:88:1d:c4:4c:57:88:b5:11:9c:01:05:
                    6e:31:6c:0a:5b:e0:a3:22:c1:40:d4:8e:7c:af:1f:
                    b8:cc:5a:1a:a6:63:fd:32:3b:a3:9c:4a:b0:1d:1c:
                    48:ea:c3:79:41:47:26:1d:59:f6:a1:4a:b9:87:96:
                    86:de:76:6f:df:84:59:64:70:e0:59:72:de:20:0d:
                    85:a7:d8:11:71:e3:3f:f6:ad:b8:6c:44:44:c0:0a:
                    e7:80:c4:81:b3:fd:eb:0d:d0:60:d8:76:29:a5:06:
                    e4:a3:44:4c:66:62:4c:8f:7a:00:85:ef:0d:b6:61:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F8:DD:CD:F7:F2:BC:E5:8F:F5:84:8F:16:83:6D:C1:3E:09:AC:AD
            X509v3 Authority Key Identifier:
                keyid:15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32332d3233203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:bb:4c:dc:e5:3e:fb:5d:2a:58:27:ae:a2:52:d9:b2:03:
         77:45:ef:dd:cc:db:5e:c9:68:2f:d2:c2:fa:b2:4f:f6:d9:63:
         60:1c:89:51:36:68:f8:91:07:d8:53:6c:d3:61:3a:40:d5:0e:
         dc:ee:05:d3:22:56:1d:6f:bb:11:57:27:06:4b:fb:84:4f:17:
         c1:e0:70:7c:15:2a:93:9e:f3:e4:01:ea:b4:95:9a:3b:5e:ef:
         d5:22:0c:e3:0f:25:00:12:74:af:2b:58:ff:e5:87:d9:ae:cf:
         6f:a6:bf:0e:d6:37:46:da:9a:3a:81:db:9e:45:46:31:25:34:
         e2:81:ce:55:8a:05:b1:92:a7:18:d0:23:e4:73:75:0f:d2:f5:
         2f:93:7b:a7:97:8b:09:52:c3:eb:6a:93:9e:ea:09:c9:e7:b2:
         08:5c:2c:f0:02:4f:ed:14:7e:18:1e:ac:57:2a:a7:77:0b:1b:
         4c:19:60:16:27:3b:74:25:36:f4:f9:08:e1:b8:a6:fc:56:18:
         74:49:3c:83:51:4d:84:97:62:61:20:24:9d:60:c1:8b:de:59:
         ac:f3:1b:7f:a4:79:b1:b5:59:2e:4c:1f:e5:da:0d:99:27:c4:
         ca:91:bf:20:5b:b3:8d:ac:da:b1:aa:3b:92:30:ac:41:70:8f:
         83:76:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org