Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
File:                     3136382e39302e33322e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier:          lLribDcvB+/Fj4TAMz1AQvRINe+EOacD7bsQpcznoAc=
Subject key identifier:   A2:68:26:E8:3D:8E:E9:BA:6F:6F:29:85:17:D2:27:F1:45:CE:38:6A
Certificate issuer:       /CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
Certificate serial:       3050433FEA80570E53329D793DCDE1B38B33AD94
Authority key identifier: C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
Signing time:             Sat 01 Apr 2023 14:25:05 +0000
ROA not before:           Sat 01 Apr 2023 14:20:05 +0000
ROA not after:            Sat 30 Mar 2024 14:25:05 +0000
asID:                     265263
IP address blocks:        168.90.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:50:43:3f:ea:80:57:0e:53:32:9d:79:3d:cd:e1:b3:8b:33:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
        Validity
            Not Before: Apr  1 14:20:05 2023 GMT
            Not After : Mar 30 14:25:05 2024 GMT
        Subject: CN=A26826E83D8EE9BA6F6F298517D227F145CE386A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:5e:28:f3:13:57:c7:59:8e:f8:ca:73:fc:
                    72:6a:cb:df:fa:80:93:66:57:41:e4:c7:45:8d:ff:
                    27:55:c4:85:37:c4:df:ce:33:70:22:68:a9:79:b8:
                    6f:a6:15:cc:af:5a:2d:3a:f6:a7:69:b5:ad:e4:18:
                    f4:a8:f3:b4:85:55:cd:6b:11:61:f6:0f:3f:88:19:
                    4f:a3:f6:28:31:97:82:aa:27:c9:4a:ff:f7:41:1b:
                    f5:6f:1a:28:90:f8:4c:ed:9b:88:c2:03:70:87:5d:
                    53:1b:31:5c:af:8f:41:50:ff:12:f0:98:db:e3:73:
                    d2:55:d3:42:de:08:6d:f2:a5:87:2d:53:6b:92:82:
                    61:46:a2:a7:89:38:55:81:81:af:b7:a6:24:bb:41:
                    bc:bb:64:f3:cd:d0:12:d4:e5:69:9a:bd:6d:1b:56:
                    96:23:b0:d1:79:26:93:9c:38:00:d9:f8:cb:4e:ec:
                    a1:94:0f:ec:2d:9b:3d:5c:1e:2a:ac:de:20:09:36:
                    b9:67:40:83:7e:07:c7:ff:31:98:8a:48:ad:ad:93:
                    24:4b:a3:06:5c:5d:5f:73:4f:f1:58:70:8a:4b:30:
                    e7:ee:5b:c4:a7:16:dd:52:d3:3b:e1:4f:17:7e:aa:
                    15:9d:e0:94:38:ea:6f:a4:d8:83:c2:9a:6c:d4:b8:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:68:26:E8:3D:8E:E9:BA:6F:6F:29:85:17:D2:27:F1:45:CE:38:6A
            X509v3 Authority Key Identifier:
                keyid:C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:fc:03:37:a7:d3:49:d0:2c:a8:03:b7:62:a9:1b:b6:b5:84:
         04:0b:54:41:db:5d:67:9c:9b:a0:2e:b5:a2:05:a9:86:66:44:
         e1:12:6b:33:8d:1a:b4:52:f1:c2:29:d6:60:87:c3:91:16:2b:
         6a:70:fe:81:4c:24:22:d5:e6:7e:64:52:d0:ed:7d:c9:5a:a2:
         8d:0c:1f:8c:cb:d3:4c:f0:bc:2e:27:da:75:53:21:37:bc:76:
         7c:c9:6f:cb:d4:7b:89:74:1f:fa:03:9e:42:b4:3f:51:32:2d:
         84:1d:17:91:3d:26:e4:92:bc:15:74:e2:a8:7e:e3:2c:ba:ae:
         e1:0f:2e:61:b8:33:1a:a9:05:cf:36:b8:14:e5:c0:bf:7b:30:
         8c:8e:ce:f3:7a:88:11:65:f3:1e:f4:3f:fe:45:4b:8d:66:8f:
         c1:9b:89:76:36:6b:c0:30:99:ba:e4:bf:0e:a8:18:82:18:c5:
         54:d5:92:e7:34:57:75:9e:19:8c:d3:a0:5a:26:7e:78:79:a8:
         a1:54:3f:9e:84:04:46:92:69:c1:b3:e7:a5:20:a0:89:c1:db:
         be:6f:41:0a:73:a9:3e:71:5f:2a:ad:d8:b5:f6:23:f8:aa:fb:
         59:01:99:ec:fb:3e:1c:f3:a4:f1:84:ae:33:b8:d7:ff:47:48:
         4b:7d:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org