Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3136382e3233322e3136302e302f32322d3232203d3e203532363133.roa
File:                     3136382e3233322e3136302e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          c2niewlc+xPciMSiVRkoUv58pnGVRwjk6uN+2792gX4=
Subject key identifier:   54:FE:3A:14:E1:3F:B4:03:48:B9:11:DD:5D:18:FE:73:BA:6D:17:FB
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       3CA097DFF91D463578CED1D173C8B1906B390700
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3136382e3233322e3136302e302f32322d3232203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        168.232.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:97:df:f9:1d:46:35:78:ce:d1:d1:73:c8:b1:90:6b:39:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=54FE3A14E13FB40348B911DD5D18FE73BA6D17FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:7e:db:4e:67:f2:34:31:f9:fa:81:fa:0d:
                    41:c1:8a:fa:71:53:37:4b:50:00:d3:9a:44:81:6c:
                    46:fb:13:80:99:ba:c3:ef:0f:f5:53:6a:91:41:c5:
                    9f:d4:aa:ee:5f:c3:ce:ea:07:0d:77:5e:51:d4:e8:
                    1e:d5:94:ad:c7:af:bc:f9:70:c0:52:ab:ce:9a:e2:
                    29:88:9b:21:40:32:9b:ee:31:37:b2:be:68:b6:97:
                    ea:a8:f6:f0:62:71:a5:ec:1b:e5:07:74:d8:04:33:
                    8c:c0:0d:17:bc:e6:2f:cd:bb:24:58:52:4c:a8:04:
                    1b:ff:f2:b2:0e:53:ca:69:2a:fa:06:71:b2:fb:36:
                    04:dc:f4:5a:3d:28:cb:51:6b:86:a5:a2:b1:b2:1a:
                    2d:f4:9e:0d:b4:ce:c1:ea:a9:f0:eb:60:50:0f:38:
                    d8:41:f1:ba:ad:9d:bb:6b:19:a8:6e:8c:99:24:c9:
                    ea:45:02:a5:5d:cd:c6:0a:c3:70:a8:56:ea:83:3a:
                    b5:a0:dd:65:15:38:05:bb:36:25:6f:62:bd:3a:70:
                    ac:75:60:4f:a4:94:de:d7:34:66:37:5c:94:4a:39:
                    4a:10:f3:e2:1f:4f:a7:6b:86:3e:2d:dd:1b:9f:18:
                    b8:f4:3c:38:ef:25:d8:1a:a6:79:e7:4d:34:60:e5:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:3A:14:E1:3F:B4:03:48:B9:11:DD:5D:18:FE:73:BA:6D:17:FB
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3136382e3233322e3136302e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:73:01:42:7c:eb:ad:85:3a:8f:b1:73:87:fd:5a:7a:00:
         25:25:09:7a:db:b3:df:11:30:05:b2:47:c6:28:03:0f:6b:4f:
         59:6a:ef:02:fb:a0:e2:bc:c4:86:04:f3:a0:93:81:f3:be:c1:
         f7:51:a2:31:f7:e4:41:1e:27:b1:1d:66:6b:aa:d5:a3:41:e9:
         6c:b1:6d:65:ee:fa:bf:ea:3e:80:f2:40:6b:ab:6a:2b:63:ed:
         63:08:c0:d5:0f:b4:10:fc:d7:be:46:e6:c1:f4:e4:1d:d4:8d:
         9d:29:39:5e:9e:7a:3c:2c:95:5c:92:3b:f4:5e:a0:f9:32:f4:
         b6:2f:95:8b:73:9c:84:81:a8:98:cf:7b:e8:71:7e:4d:85:d5:
         3d:15:21:f3:bd:a8:a7:7e:b8:b3:3d:03:63:27:0a:16:8a:7f:
         c2:e4:e9:42:43:a0:07:92:d2:67:0d:eb:6b:f8:e9:f8:fa:dd:
         11:77:b5:bb:7b:67:92:12:de:c8:7a:fd:b1:b9:6d:e3:6a:18:
         bd:30:8c:9b:10:92:2c:5d:20:e9:6a:44:ee:a2:54:4c:38:40:
         22:d4:d4:5a:2a:90:06:30:5e:e0:ab:f4:7a:81:e8:ed:c3:ef:
         80:be:81:c6:2c:26:b0:41:57:72:0f:d9:45:bb:e7:e9:de:65:
         2c:ba:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org