Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
File:                     3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier:          uHFtaHCstDzrOOE6QdkKE2UOz46LK0lPMJphvJ69nYM=
Subject key identifier:   F2:E9:5C:6C:60:94:61:F2:D7:CE:95:20:F4:8C:FA:E6:5B:BC:98:9D
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       3A0683F993EA3DE4EE1F256A5DEFF5773B554815
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
Signing time:             Thu 06 Oct 2022 17:40:04 +0000
ROA not before:           Thu 06 Oct 2022 17:35:04 +0000
ROA not after:            Thu 05 Oct 2023 17:40:04 +0000
asID:                     266555
IP address blocks:        160.238.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:06:83:f9:93:ea:3d:e4:ee:1f:25:6a:5d:ef:f5:77:3b:55:48:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Oct  6 17:35:04 2022 GMT
            Not After : Oct  5 17:40:04 2023 GMT
        Subject: CN=F2E95C6C609461F2D7CE9520F48CFAE65BBC989D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:14:2e:1a:f2:a8:40:b2:57:3b:ac:28:ed:
                    ac:92:17:e0:eb:70:d2:dd:f8:82:7d:f7:f3:90:0e:
                    c6:55:62:5e:c4:46:3d:fa:04:ad:4d:ac:1a:18:23:
                    4f:fe:49:7a:f7:d2:d9:e7:16:05:b9:7f:a0:54:44:
                    b6:df:51:0c:7c:89:12:1e:d0:4c:0e:b5:48:95:44:
                    e9:86:32:42:45:b3:ab:60:c9:29:2e:de:54:a2:55:
                    ae:8c:00:9f:8a:59:2b:d1:01:8c:0f:09:e7:ad:39:
                    ad:82:93:7e:99:84:00:d5:5b:38:e2:2f:05:24:d7:
                    2d:37:f1:81:3e:90:a3:85:3f:0d:08:45:e4:e9:f1:
                    73:09:9b:df:27:60:31:c4:85:28:08:6e:51:ae:75:
                    c1:66:df:ef:06:aa:f5:09:1c:83:d7:d8:19:6e:5e:
                    28:ee:05:03:3a:cd:68:0c:5c:71:0f:ba:79:2a:5f:
                    98:b3:57:72:72:37:af:17:ce:55:59:83:e8:00:64:
                    1d:26:6c:fb:a1:26:e3:4c:0d:7c:26:4a:62:8c:ed:
                    e2:9a:de:3a:52:78:5e:03:68:e0:f3:3e:15:ef:bd:
                    3a:f6:0b:65:f4:62:dc:6d:e3:e6:9d:d3:18:6e:d2:
                    80:ba:90:f4:2d:19:5b:4d:69:05:87:1a:e5:68:11:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:5C:6C:60:94:61:F2:D7:CE:95:20:F4:8C:FA:E6:5B:BC:98:9D
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:17:7e:d5:95:6c:cd:b1:da:fe:4c:6a:df:03:a1:24:92:
         84:ac:ea:de:00:55:9f:e2:d8:bd:ea:9a:b5:3b:bc:d9:b2:0a:
         ac:67:1f:9f:71:cb:6b:91:9a:5f:62:90:19:3b:5c:a1:35:af:
         d8:37:43:c5:25:d1:2e:50:bf:7b:d6:69:8e:18:c1:10:18:5b:
         a0:cb:23:d9:24:d3:5e:5a:75:ee:77:45:ca:d9:4e:43:9f:5a:
         47:05:1b:11:0f:0d:c3:77:2e:1d:92:4b:fc:f2:0f:43:74:91:
         a8:0f:0b:47:97:31:55:3f:11:f5:82:3e:59:1d:6b:8e:2b:62:
         ad:8a:f4:7e:73:1d:a7:b1:cd:1b:61:df:9a:53:d6:88:5e:ad:
         84:2e:c1:5a:76:a0:ac:51:d1:8a:3e:b8:fc:48:cf:55:7c:af:
         30:3e:96:db:ee:7c:e8:5b:8b:b5:2c:80:b1:26:be:44:99:65:
         e5:6e:35:e3:36:9a:92:23:4e:39:60:ec:fc:c1:f5:6a:0c:7a:
         0c:ab:65:c7:19:ca:33:db:a1:8d:a7:7c:35:a2:9e:68:76:cf:
         38:4b:c1:d9:27:39:89:3d:41:73:fa:a9:54:96:5e:7c:e0:b6:
         0c:03:e2:b6:69:78:cc:47:0a:cf:99:cb:db:0b:fd:c4:ef:34:
         72:bb:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org