Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138322e302f32342d3234203d3e20323632343931.roa
File:                     3136382e39302e3138322e302f32342d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          51ykdHOLJ3r3Kdq8rydSaKsm/mn4PXP1RsOgiSRvKPs=
Subject key identifier:   0A:28:89:15:6E:57:0B:0D:F0:00:4F:94:72:2F:F3:AF:32:2D:78:1C
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       7F3FC32144102786E04245B8D7C36DE5FDC602
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138322e302f32342d3234203d3e20323632343931.roa
Signing time:             Fri 24 Feb 2023 13:31:36 +0000
ROA not before:           Fri 24 Feb 2023 13:26:36 +0000
ROA not after:            Fri 23 Feb 2024 13:31:36 +0000
asID:                     262491
IP address blocks:        168.90.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3f:c3:21:44:10:27:86:e0:42:45:b8:d7:c3:6d:e5:fd:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Feb 24 13:26:36 2023 GMT
            Not After : Feb 23 13:31:36 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:4f:12:60:93:e0:0c:f7:40:95:e6:8a:49:
                    e3:db:2a:07:66:af:72:ec:e7:5f:b6:2b:79:19:05:
                    e6:a2:a0:81:b5:a0:9a:46:6b:be:ae:78:53:3e:39:
                    a3:19:8b:13:9a:87:9a:b8:83:8f:81:61:79:01:47:
                    0e:9d:f4:54:55:35:36:88:21:cf:9d:53:0e:5f:b2:
                    84:74:3b:8a:2c:d2:87:29:34:41:41:c7:98:61:3a:
                    5d:a6:e6:13:15:d4:57:a2:5f:c6:ae:7c:3a:aa:af:
                    10:e8:99:60:a2:df:69:07:8d:69:ec:ae:8e:fc:35:
                    51:34:dd:8c:6d:13:23:75:33:13:9e:0c:30:71:84:
                    d1:49:d9:58:5e:d0:6e:b4:29:5c:aa:2a:7f:98:99:
                    8e:67:5a:8e:63:6b:92:3e:25:a8:4c:f4:3c:e1:ca:
                    64:47:87:90:88:bc:31:a5:01:ff:82:a4:b1:46:5b:
                    b6:8e:44:b0:d3:7a:8a:db:90:a5:1d:30:9d:a8:6a:
                    98:5d:f4:79:48:a8:77:97:b7:a1:19:ca:36:22:67:
                    7e:51:80:15:d6:a9:d1:d2:49:00:0c:d4:5e:d6:f9:
                    23:01:1e:9d:3a:88:44:2f:86:96:79:70:e8:4c:f5:
                    1f:82:9f:07:73:f1:85:cf:dd:13:01:f4:45:6e:f3:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:89:15:6E:57:0B:0D:F0:00:4F:94:72:2F:F3:AF:32:2D:78:1C
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138322e302f32342d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:66:6f:11:f1:cf:03:66:e2:8f:cd:fb:42:30:97:3f:aa:
         6c:19:c7:7a:26:a5:eb:1e:07:5c:5e:66:83:04:98:ca:3c:4a:
         49:8a:96:ad:bf:7c:bb:1a:3c:a1:e2:1b:35:d1:a5:ff:b2:e6:
         c6:be:19:1c:85:25:08:9e:01:78:c8:82:73:7f:3f:13:61:28:
         1a:45:91:62:ec:31:e8:84:64:6d:04:0d:42:fa:d4:26:4e:e7:
         9a:31:06:b0:07:d6:fa:1c:56:cc:f9:65:5e:18:34:6a:b2:5d:
         a9:d7:dd:42:3f:da:7a:32:87:ac:52:88:f8:bc:aa:28:a4:58:
         54:f1:af:45:3a:f9:11:b5:cf:c6:22:90:a7:ab:6e:e2:af:2f:
         8b:fa:28:c4:b5:f6:15:39:fc:b7:ad:64:7d:c5:a6:47:ab:3b:
         e5:37:0f:a9:f1:79:4f:55:8e:4d:1a:40:17:11:41:f9:ce:0f:
         37:3d:01:04:15:b2:1a:80:90:26:63:e4:32:b5:02:66:80:63:
         65:a4:b0:49:85:18:4a:0c:61:d1:5d:6c:f7:80:b1:db:1f:0c:
         f9:ac:4d:fb:0c:b6:fb:9d:20:06:43:8e:26:c8:cd:f3:c0:12:
         46:28:24:b2:cc:b8:58:44:b3:ad:6b:82:c7:62:9f:72:40:b8:
         d3:7f:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org