Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3232203d3e203238323230.roa
File:                     3136302e3233382e3232302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          AHcy2q58u6T62iqfqKG+hCryShbA772GHRgvnS9PGP8=
Subject key identifier:   12:C0:2A:5B:49:E8:81:65:4D:36:E9:FF:8A:B0:20:A5:B9:12:94:C6
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       756FA979B1796697ABBF4306FF1A659CCEE84A76
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 18:00:03 +0000
ROA not before:           Thu 06 Oct 2022 17:55:03 +0000
ROA not after:            Thu 05 Oct 2023 18:00:03 +0000
asID:                     28220
IP address blocks:        160.238.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:a9:79:b1:79:66:97:ab:bf:43:06:ff:1a:65:9c:ce:e8:4a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Oct  6 17:55:03 2022 GMT
            Not After : Oct  5 18:00:03 2023 GMT
        Subject: CN=12C02A5B49E881654D36E9FF8AB020A5B91294C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:9a:19:46:ea:22:59:a1:c7:2c:e0:94:05:
                    07:5d:56:cd:c6:67:56:1e:e8:1c:bc:f9:4a:1e:b2:
                    ed:f8:ce:4f:0e:52:c3:b2:ad:b1:72:c6:b4:ab:7f:
                    4a:26:48:e8:3b:d4:d8:04:fc:f8:b1:db:7d:57:da:
                    36:0e:5d:6f:52:38:e3:bc:39:4e:66:25:85:ed:2d:
                    90:b2:7d:33:db:2e:a6:c3:82:8c:16:17:01:ff:f2:
                    e5:ae:df:1e:14:16:53:22:11:fb:1e:d0:3d:28:de:
                    81:f8:88:5a:9f:bc:1a:27:56:28:5c:dd:8e:e9:cc:
                    ce:a4:ad:82:3f:da:98:d0:b1:ed:5b:98:d0:d7:e6:
                    5b:c9:23:1c:cd:5a:76:60:16:6a:ba:43:e1:29:05:
                    ab:62:77:16:eb:89:89:0c:29:78:c0:e1:a7:c9:8f:
                    01:46:b7:b0:05:cc:9f:87:fa:31:21:75:74:bf:37:
                    30:fb:26:e6:be:93:03:a4:80:8d:44:b4:21:69:40:
                    ab:cc:3f:7f:11:f3:4c:1e:85:96:56:8a:5d:ca:67:
                    28:be:9b:10:af:80:ab:6b:99:a4:5a:8e:3c:5d:69:
                    62:be:43:5f:05:fd:f3:1a:e9:96:e1:bc:b1:c1:c4:
                    86:97:80:4b:a0:52:94:d2:c6:d5:a0:1a:8d:d6:b7:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:2A:5B:49:E8:81:65:4D:36:E9:FF:8A:B0:20:A5:B9:12:94:C6
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:db:67:b8:52:64:d4:90:4e:10:be:b4:46:e0:2e:f1:82:
         c5:45:75:56:c0:c9:15:38:ad:6f:91:24:d8:d8:39:2a:ed:09:
         51:1c:02:4a:21:e2:91:cf:6d:62:99:69:a1:74:dc:b5:1d:c4:
         29:13:90:60:b1:bb:1e:e7:3a:bf:7c:ac:39:79:c7:c2:5e:17:
         ae:a5:19:b2:2d:fc:e6:e8:49:9f:29:75:0c:97:1a:de:64:bc:
         9d:b0:e9:1b:1c:fe:1e:81:4a:cc:e9:26:d1:e5:61:39:3f:1b:
         29:02:b9:3d:d1:fc:e3:e7:8a:b5:2a:78:71:ea:ca:59:f5:8a:
         10:58:5d:64:05:f0:37:fd:a1:e2:d2:56:7f:22:d7:a9:ff:ad:
         b7:62:51:ad:b7:2e:4d:a6:db:85:17:81:59:d4:8e:d8:ca:cb:
         d8:91:0c:4a:67:67:ed:bf:41:53:fc:d2:b7:65:2c:e4:05:b7:
         d8:44:9f:36:bc:fc:df:a4:55:95:45:84:eb:46:95:26:ae:00:
         70:df:d3:3a:b9:24:6b:93:b5:41:b2:73:89:c6:cf:1b:fa:20:
         5f:11:5a:2a:bc:d3:d2:4d:54:fd:47:c6:8d:d4:95:25:fa:00:
         2a:80:fb:c8:76:88:8d:ad:09:9c:c3:a0:e6:89:80:2c:17:bb:
         38:57:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org