Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32332d3233203d3e20323636313638.roa
File:                     3136302e31392e3234342e302f32332d3233203d3e20323636313638.roa (raw, json)
Hash identifier:          9jbLFDsa/xyT5SirrmUIjUkoNBGlUTml2V8zx59ZLSo=
Subject key identifier:   2A:FE:1B:06:F3:59:02:70:4E:10:96:99:CB:A3:08:9B:6F:79:C5:14
Certificate issuer:       /CN=5EF2FE316132AA0A7ED797DE25638745F555C6F0
Certificate serial:       5568217132E583AD5FC4ED612E8B0718BF5F84CD
Authority key identifier: 5E:F2:FE:31:61:32:AA:0A:7E:D7:97:DE:25:63:87:45:F5:55:C6:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF2FE316132AA0A7ED797DE25638745F555C6F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32332d3233203d3e20323636313638.roa
Signing time:             Wed 14 Sep 2022 21:10:25 +0000
ROA not before:           Wed 14 Sep 2022 21:05:25 +0000
ROA not after:            Wed 13 Sep 2023 21:10:25 +0000
asID:                     266168
IP address blocks:        160.19.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:68:21:71:32:e5:83:ad:5f:c4:ed:61:2e:8b:07:18:bf:5f:84:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF2FE316132AA0A7ED797DE25638745F555C6F0
        Validity
            Not Before: Sep 14 21:05:25 2022 GMT
            Not After : Sep 13 21:10:25 2023 GMT
        Subject: CN=2AFE1B06F35902704E109699CBA3089B6F79C514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:0a:aa:e6:1e:6a:f1:99:2b:5b:d2:58:91:
                    4a:6e:43:68:4a:f2:d0:5e:60:73:c0:be:eb:df:a9:
                    07:eb:87:5e:62:40:7c:90:8e:c0:a4:25:29:c5:80:
                    37:e5:6b:47:48:08:a9:7b:d1:0a:2f:4f:5d:be:ae:
                    73:ee:1e:94:02:cd:7b:41:ea:65:93:c0:1c:c3:0a:
                    5f:de:4a:60:a6:d1:7c:f3:d0:29:1c:37:f1:74:e3:
                    57:42:dc:ab:5d:e2:52:6a:07:63:88:5f:c7:6b:84:
                    42:a7:d9:41:9b:05:2e:61:2d:c4:1c:a1:32:26:6c:
                    e2:3c:7f:22:ab:4a:88:37:ea:0b:82:45:d6:92:77:
                    d6:cb:dd:fe:59:0e:c0:6b:39:2e:09:74:fb:b7:fd:
                    42:9e:bc:8a:55:d1:30:5a:60:0e:6d:d7:d8:11:a5:
                    5b:7d:2c:09:56:37:72:05:73:97:78:7f:da:18:51:
                    e4:57:28:a7:55:de:c2:2f:15:5d:88:11:77:cc:52:
                    4f:ce:ea:bf:e4:34:19:31:1c:ab:cc:0f:c3:2e:27:
                    1b:81:d1:b4:c1:c8:77:09:c5:95:0e:9c:9a:76:68:
                    db:6d:e0:21:3a:f0:81:73:43:54:ab:4a:21:cf:52:
                    97:81:d0:67:2d:3b:24:30:63:0f:18:43:6e:2b:2f:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FE:1B:06:F3:59:02:70:4E:10:96:99:CB:A3:08:9B:6F:79:C5:14
            X509v3 Authority Key Identifier:
                keyid:5E:F2:FE:31:61:32:AA:0A:7E:D7:97:DE:25:63:87:45:F5:55:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/5EF2FE316132AA0A7ED797DE25638745F555C6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF2FE316132AA0A7ED797DE25638745F555C6F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32332d3233203d3e20323636313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:63:b5:19:c2:2c:97:2e:59:6e:48:ed:5a:e2:b2:ff:80:9b:
         bc:6b:e5:a9:35:71:57:3d:c3:fd:b7:f7:1c:15:cd:de:a7:57:
         6b:f5:49:81:ed:1a:32:a3:f5:e4:9e:d7:6a:b0:9c:8f:cd:58:
         6a:79:8c:02:22:20:b5:31:ce:b1:d7:d3:e4:71:01:b1:4e:2f:
         e9:0d:1b:96:d2:ef:06:c4:65:e3:84:d1:78:09:9c:cf:5e:04:
         ef:0e:d0:bf:ac:22:00:f9:16:2f:9e:8d:96:a8:75:fd:c0:09:
         b1:7f:17:d7:72:b3:ef:57:1d:55:d0:1e:43:4f:67:c8:73:f4:
         62:e8:e5:23:4a:e9:08:79:8b:1d:dd:56:9a:0a:71:fe:de:70:
         b3:67:6f:2f:92:f9:8e:7c:7a:b4:2b:cc:03:14:9a:0b:a7:d2:
         ca:ed:cd:f2:de:4b:6c:9b:16:bd:ef:13:6e:97:c0:39:6f:7e:
         28:ef:bf:2e:50:65:37:9b:79:18:f1:e1:38:5d:b6:81:70:65:
         dd:54:de:50:c8:37:4c:db:46:c4:36:43:2f:0a:02:bc:1e:8a:
         27:af:08:13:a3:68:4d:b9:0b:17:d1:d9:bd:c8:ad:db:8f:af:
         91:56:84:88:56:74:f5:2a:e9:47:28:6c:64:ae:d2:0d:0a:51:
         c2:ba:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org