Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323635323633.roa
File:                     3136382e39302e33332e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier:          qe2KtpDycbeXoXDjN5nzAnlc+H9QkGHvqMUjUq+EtqU=
Subject key identifier:   EA:2C:52:FD:0B:18:02:F4:D8:3A:F0:00:27:16:8D:80:89:AE:01:62
Certificate issuer:       /CN=4DF04DE3305B3700D931F1DFB0BEDC97FAB94109
Certificate serial:       57A74E621C3F67E872DA3D59587816D74B436173
Authority key identifier: 4D:F0:4D:E3:30:5B:37:00:D9:31:F1:DF:B0:BE:DC:97:FA:B9:41:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323635323633.roa
Signing time:             Fri 20 Jan 2023 18:34:34 +0000
ROA not before:           Fri 20 Jan 2023 18:29:34 +0000
ROA not after:            Fri 19 Jan 2024 18:34:34 +0000
asID:                     265263
IP address blocks:        168.90.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a7:4e:62:1c:3f:67:e8:72:da:3d:59:58:78:16:d7:4b:43:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF04DE3305B3700D931F1DFB0BEDC97FAB94109
        Validity
            Not Before: Jan 20 18:29:34 2023 GMT
            Not After : Jan 19 18:34:34 2024 GMT
        Subject: CN=EA2C52FD0B1802F4D83AF00027168D8089AE0162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:98:6d:24:67:e9:e0:72:f5:c3:9a:f7:57:
                    dd:d4:66:c0:74:05:4f:4d:9d:69:a8:7e:7c:5f:95:
                    c8:34:50:c9:53:7c:2b:4a:3b:98:ef:df:77:8b:34:
                    6b:b0:0f:f6:ec:72:2b:c6:11:c2:a1:2d:2d:7b:67:
                    4e:89:90:4d:52:f2:d1:b9:bc:a6:e4:25:ca:7b:6c:
                    32:40:65:23:3b:45:12:bd:b1:9d:88:d9:ef:04:a9:
                    b4:aa:b3:b8:f4:e9:1e:ca:4a:8b:02:0f:d7:03:ff:
                    5a:1b:d1:6e:3e:77:88:51:86:c6:2f:95:fe:c1:01:
                    38:25:7c:69:53:f4:13:59:93:1a:a3:55:4f:54:c2:
                    df:3f:8e:8a:fd:b4:45:cf:e5:4a:99:66:ec:ab:8a:
                    16:2f:b6:0e:7f:69:0b:05:b4:82:90:50:d5:6b:0a:
                    f5:0a:46:f6:d9:98:aa:6d:e9:b9:93:6b:1c:23:86:
                    61:34:30:28:31:83:6a:51:3f:0c:9e:b0:07:5f:fa:
                    90:e1:f9:ff:7a:61:1d:fe:00:1e:f8:f9:ba:a2:e0:
                    f2:ad:9e:2e:a7:84:4b:46:ca:7f:41:57:cd:ea:ed:
                    1a:d6:b9:65:b2:e6:a2:21:19:f7:b2:ad:55:60:dc:
                    f8:a7:24:03:46:4a:31:9f:7e:3d:90:11:32:a9:0f:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:52:FD:0B:18:02:F4:D8:3A:F0:00:27:16:8D:80:89:AE:01:62
            X509v3 Authority Key Identifier:
                keyid:4D:F0:4D:E3:30:5B:37:00:D9:31:F1:DF:B0:BE:DC:97:FA:B9:41:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:ca:49:5f:e9:19:50:d5:22:89:18:82:f9:42:af:f5:cc:
         88:4c:c6:87:80:3f:54:4b:4b:da:27:57:6a:d5:5f:33:c2:b2:
         eb:a7:44:bf:84:4e:01:9d:e9:6a:ad:e6:64:09:f3:a8:48:88:
         87:7b:e5:07:fd:e9:ca:19:b0:7a:0b:92:b8:c5:43:b0:08:40:
         41:2f:ee:93:f6:cb:3a:40:7d:c0:c7:a2:72:bf:4f:9e:fc:e3:
         2a:34:d3:67:8c:18:cc:aa:fe:03:84:f1:0a:a8:9f:7d:38:6e:
         90:55:70:ce:4d:01:b1:68:91:f2:d4:fe:62:4e:41:59:00:26:
         b0:22:9b:8a:08:e8:71:71:79:12:f9:19:e9:97:17:22:86:d3:
         bf:b9:bc:fe:17:c0:20:1e:6e:48:cb:8e:4e:da:0e:50:92:86:
         57:3a:22:ca:ea:04:49:e1:84:77:70:19:41:99:2d:06:cf:47:
         46:54:71:2a:7e:35:ff:a9:50:91:bf:14:89:ae:a7:ec:53:07:
         8c:a0:73:0b:89:0d:02:5d:c1:aa:05:a0:99:99:28:c9:55:fd:
         1f:f8:63:92:c0:83:17:30:b6:c9:af:56:52:97:3d:7b:1a:cd:
         8d:d6:37:62:8c:24:b3:63:b8:a0:fc:0f:94:42:75:cf:a2:ae:
         86:2b:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org