Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32322d3232203d3e20323635323633.roa
File:                     3136382e39302e33322e302f32322d3232203d3e20323635323633.roa (raw, json)
Hash identifier:          X6QbFA4j0vHX65O8zC/LHlPTOfRBgtkHAJA1QHsB7/o=
Subject key identifier:   6D:07:90:A8:44:C5:77:ED:09:5D:00:EF:AB:14:7F:2E:5A:A4:4C:2B
Certificate issuer:       /CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
Certificate serial:       241D1186CA4F662D4CF4FB9BB9B576DA851ED8DD
Authority key identifier: C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32322d3232203d3e20323635323633.roa
Signing time:             Sat 01 Apr 2023 14:24:56 +0000
ROA not before:           Sat 01 Apr 2023 14:19:56 +0000
ROA not after:            Sat 30 Mar 2024 14:24:56 +0000
asID:                     265263
IP address blocks:        168.90.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:11:86:ca:4f:66:2d:4c:f4:fb:9b:b9:b5:76:da:85:1e:d8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
        Validity
            Not Before: Apr  1 14:19:56 2023 GMT
            Not After : Mar 30 14:24:56 2024 GMT
        Subject: CN=6D0790A844C577ED095D00EFAB147F2E5AA44C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:1b:9e:26:b1:62:40:22:e0:02:10:d7:6e:
                    35:37:52:9a:bc:7a:3b:65:23:c1:3a:77:eb:ae:db:
                    41:af:37:f3:bc:cb:39:84:92:4a:72:7c:eb:12:7c:
                    72:52:c1:f4:38:09:5e:69:56:32:b7:60:57:56:77:
                    4a:b4:7c:40:ff:e9:42:d1:86:0b:ba:0b:6a:8e:04:
                    9d:b3:0d:66:f4:7f:f5:6b:7f:48:c2:cd:e3:a9:25:
                    5c:3f:d1:8c:a2:ad:fd:aa:5f:0d:47:b4:db:1f:22:
                    c1:c0:8e:ab:a8:ed:23:ec:10:24:af:6c:0c:48:cd:
                    11:e4:d1:02:13:70:65:09:b8:54:ed:b5:82:70:85:
                    e6:3b:d7:a9:d2:9f:9c:79:88:00:e8:a6:db:45:03:
                    60:af:40:f8:18:d5:af:70:cb:d2:c5:90:ef:8c:6f:
                    e6:9b:20:65:73:2f:09:2c:41:33:8a:72:cb:42:4a:
                    4b:cb:f1:64:c1:b4:05:6c:52:57:51:33:36:3f:91:
                    30:09:dc:3b:ae:c6:75:e3:63:3d:e5:f6:9d:05:7b:
                    54:96:ae:01:ab:53:de:76:af:ae:00:96:37:8b:d9:
                    fa:b4:10:71:f5:86:79:01:97:4e:85:d2:71:ad:9e:
                    05:81:80:f4:fe:b5:8c:9e:78:82:b9:f3:b7:4e:1b:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:90:A8:44:C5:77:ED:09:5D:00:EF:AB:14:7F:2E:5A:A4:4C:2B
            X509v3 Authority Key Identifier:
                keyid:C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32322d3232203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:fa:42:21:f9:3d:b2:c8:d9:80:e0:42:55:59:b4:e5:1b:03:
         28:d1:88:e1:c5:4b:35:2c:a5:df:45:51:d0:e2:c6:d0:50:0b:
         61:86:26:89:31:44:a8:21:aa:f6:8d:4b:a0:9a:8d:de:45:5c:
         73:bd:35:a3:b4:d1:1b:87:7b:63:8d:d7:f5:90:65:b1:f9:79:
         92:d9:b9:80:a9:eb:eb:3c:00:4e:c7:43:29:55:be:c9:53:be:
         1a:52:5c:be:8a:a2:17:ec:eb:fb:78:55:2b:16:2a:09:e6:b1:
         1f:25:f8:b0:6f:12:38:f6:82:66:0a:de:8b:c2:32:4d:ff:21:
         52:3f:4c:35:95:ef:2f:c4:63:28:a0:33:e9:e1:8b:80:a7:50:
         50:f3:cf:8c:62:a7:35:ed:e0:d5:bf:83:e7:af:7d:aa:ca:e3:
         39:2a:9d:c7:24:04:46:18:00:e6:5e:76:a7:4a:a5:8f:a5:01:
         fc:a3:fd:24:cc:34:e6:01:65:00:e6:5a:90:af:a2:cc:06:9b:
         67:75:0e:eb:a6:e3:42:f3:a3:d0:87:65:ef:20:1e:54:8c:d6:
         48:c6:46:30:c9:b6:76:d9:2e:73:4e:44:7b:f1:b4:1f:0f:36:
         af:78:44:d4:b7:e3:28:1b:a8:65:dc:ab:b6:e8:59:f4:1b:80:
         9f:ff:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org